Daily Threat Briefing – April 10, 2026

Critical briefing: Multiple high-severity active threats demand immediate action — an actively exploited Adobe Reader zero-day, APT28’s router-based Microsoft Office token-harvesting campaign, an EngageLab SDK flaw exposing ~50M Android users (including ~30M crypto wallet users), a Smart Slider 3 Pro supply-chain compromise distributing backdoors to WordPress/Joomla sites, and targeted LucidRook phishing campaigns against NGOs and universities; recommended responses include urgent patching, router/SDK/plugin audits and replacements, MFA enablement, and deployment of IOCs to security controls.