Daily Threat Briefing – April 18, 2026

This briefing reports multiple critical, actively exploited threats: Microsoft Defender zero-days enabling privilege escalation, Apache ActiveMQ RCE (CVE-2026-34197) confirmed in the wild and added to CISA KEV, Russian state-sponsored token-harvesting via router compromises, Payouts King ransomware using QEMU VM evasion to bypass EDR, and international disruption of DDoS-for-hire infrastructure (Operation PowerOFF); it prioritizes immediate patching, router audits, endpoint and token-hunting, and DDoS preparedness.