Supply-Chain on it-learn.io | IT, Networking & Cybersecurity Blog

Microsoft April 2026 Patch Tuesday: 167 Fixes, Exploited SharePoint Zero-Day CVE-2026-32201, and n8n Phishing Abuse

Wed, 15 Apr 2026 00:00:00 +0000

April 2026’s record Patch Tuesday, Cisco Talos research on n8n workflow abuse for phishing, a fake Ledger Live app that drained $9.5M through Apple’s App Store, and an Android RAT turning 220K devices into proxy nodes.

SAP Critical ABAP Patch, FortiClient EMS CVE-2026-21643, W3LL Phishing Takedown — 2026-04-14

Tue, 14 Apr 2026 00:00:00 +0000

SAP’s April 2026 patch cycle includes a critical ABAP vulnerability affecting 13+ products. CISA adds FortiClient EMS SQL injection CVE-2026-21643 to KEV with confirmed exploitation. FBI and Indonesia dismantle the W3LL phishing kit behind $20M in fraud. wolfSSL ECDSA flaw breaks certificate trust for embedded devices.

Adobe Reader Zero-Day CVE-2026-34621 Exploited for Months — CPUID Supply Chain Compromise and OpenAI Certificate Revocation

Mon, 13 Apr 2026 00:00:00 +0000

Adobe Reader’s CVE-2026-34621 was actively exploited for months before the April 12 patch. CPUID’s site was compromised to serve trojanized CPU-Z and HWMonitor. OpenAI revokes its macOS signing certificate after the Axios supply chain incident cascades. APT37 shifts to Facebook for initial access.

Adobe Reader Zero-Day Exploited for Months Before Emergency Patch

Sun, 12 Apr 2026 00:00:00 +0000

An Adobe Reader RCE exploited in the wild for months, a 19-hour supply chain compromise at CPUID, and active exploitation of a Marimo notebook flaw — plus detection guidance for trojanized utility installers.

Supply Chain Attack: How SolarWinds Compromised 18,000 Organizations with One Update

Wed, 08 Apr 2026 00:00:00 +0000

The SolarWinds attack did not begin with a phishing email or a misconfigured firewall. It began inside a build server — the trusted forge where software is assembled, signed, and shipped. By the time 18,000 organizations downloaded the trojaned Orion update in the spring of 2020, the attackers had already achieved something far more dangerous than a network intrusion: they had weaponized trust itself.

This post dissects the technical mechanics of the SUNBURST backdoor, the Orion build pipeline compromise, DGA-based command and control, and the detection and defense strategies that can limit your exposure to this class of attack.