NEW Microsoft
23 20th April – Threat Intelligence Report
Multiple zero-days (BlueHammer, RedSun, UnDefend) in Microsoft Defender are being actively exploited, requiring immediate patching.
Low
What has changed?
Comparing 20 April 2026 with the previous day 19 April 2026.
Newly added
7 NEW Linux
20 CVE-2026-31430
The vulnerability can be triggered by an unprivileged user via the keyrings API, enabling local privilege escalation.
Low
EPSS
0%
NEW Microsoft
0 Ungepatchte Windows-Zero-Days RedSun, UnDefend und BlueHammer werden attackiert
Describes active exploitation of multiple unpatched Windows zero-days (RedSun, UnDefend, BlueHammer) in the wild, indicating immediate risk beyond a standard patch advisory.
Low
NEW Microsoft
0 Zero-Day-Lücken unter Beschuss: Angriffe auf Windows-Systeme beobachtet
Describes an active attack campaign exploiting zero-day vulnerabilities in Windows systems, indicating immediate defensive action is required.
Low
NEW Microsoft
0 Microsoft: Teams increasingly abused in helpdesk impersonation attacks
Describes an active campaign where attackers are specifically abusing external Teams access for helpdesk impersonation, a novel social engineering vector.
Low
NEW Microsoft
0 Microsoft releases emergency updates to fix Windows Server issues
Highlights emergency, out-of-band updates to resolve critical stability or security issues introduced by a recent patch cycle.
Low
NEW
0 DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy
Provides insight into the TTPs of a threat actor using SystemBC malware for C2 and lateral movement within a Windows domain environment.
Low
Newly KEV-listed
0No changes in this category.
Score moved
0No changes in this category.
No longer in report
0No changes in this category.