Daily Threat Briefing – April 9, 2026

## Executive Summary This briefing outlines multiple high-severity, active threats including APT28's PRISMEX malware leveraging steganography against Ukraine and NATO allies; a critical Apache ActiveMQ remote code execution vulnerability; Russian-linked harvesting of Microsoft Office tokens via compromised SOHO routers; Chaos malware and the Masjesu DDoS-for-hire botnet expanding across cloud and IoT devices; UNC6783 supply-chain compromises of BPO providers; and disruptive ransomware/wiper attacks affecting healthcare — accompanied by urgent mitigation actions (patching, MFA, vendor controls, DDoS protection, and incident response).