Daily Threat Briefing – April 17, 2026

This briefing details a series of critical, actively exploited threats — notably Apache ActiveMQ CVE-2026-34197 (on CISA KEV), a Microsoft Defender 'RedSun' zero-day, Cisco Identity Services RCEs, Russian state-sponsored harvesting of Microsoft Office tokens via compromised routers, and ZionSiphon malware targeting water/OT infrastructure — and urges immediate patching, enhanced monitoring, and comprehensive identity and OT protections.