🔍 LiveThreat Advisory Brief — Apr 21, 2026
📊 14 threat advisories & intelligence reports tracked today
━━━━━━━━━━━━━━━━━━━━━━
🔗 Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain
Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture that could pave the way for remote …
🦠 Overlay‑Based Trojan Targets 800+ Android Banking Apps to Steal PINs
A sophisticated Android banking‑malware campaign is abusing screen‑overlay and Accessibility permissions to harvest PINs from over 800 mobile applications. The …
🔗 https://www.livethreat.ai/intelligence/over-800-android-apps-targeted-in-pin-stealing-trojan-campaign-16702
🕵️ Vercel Traces Customer Data Theft to Agentic AI Tool Breach
Attacker First Compromised AI Tool Used by Vercel Employee, Platform Provider Finds Cloud platform provider Vercel said an attacker breached its systems and st…
🕵️ Italian Regulator Fines Poste Italiane €12.5 Million for Invasive Data Monitoring in Payment Apps
Italy’s data‑protection authority fined Poste Italiane and its Postepay subsidiary €12.5 million for illegally harvesting device‑level data from millions of use…
🔗 https://www.livethreat.ai/intelligence/italian-regulator-fines-national-postal-service-orgs-15-million-for-data-privacy-violations-16602
🔗 Vercel breached via compromised third-party AI tool
Cloud deployment and hosting platform Vercel has suffered a security breach that resulted in attackers accessing some of its internal systems and compromising V…
🕵️ ⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More
🕵️ 52M-Download protobuf.js Library Hit by RCE in Schema Handling
🕵️ Crypto‑Stealing Wallet Apps Infiltrate Apple App Store in China, Targeting Users with Phishing and Provisioning Profile …
🔗 https://www.livethreat.ai/intelligence/china-s-apple-app-store-infiltrated-by-crypto-stealing-wallet-apps-16608
━━━━━━━━━━━━━━━━━━━━━━
📌 + 6 more advisories on our live feed
📋 Is your vendor risk program accounting for these threats?
📖 View all → https://www.livethreat.ai/threat-intel
🔔 Follow LiveThreat for daily TPRM intelligence
#Cybersecurity #ThreatIntel #TPRM #InfoSec #VendorRisk #BreachWatch #DoNotBeLarry #VerisqAI #LiveThreat