Daily News, Sep, 16 - active zero day

Today's briefing highlights an active zero-day exploit targeting Google Pixel devices; immediate security updates are crucial for any team using them. Acronis users should also patch a high-severity local privilege escalation vulnerability in their cPanel, WHM, and Plesk backup plugin, as it is already under active exploitation. CenterPoint Energy confirmed a data breach, underscoring persistent threats to critical infrastructure. A new malware framework, BambooToken, is now leveraging the MQTT protocol, typically for IoT, to control Windows and Linux systems – a rather innovative choice for C2 traffic. Practical actions include enforcing Google security updates, patching Acronis plugins, and reviewing external-facing protocols for anomalous MQTT traffic.