Know what changed.
Trace why it matters.

VulnCheck reports active exploitation attempts against a critical Rejetto HTTP File Server (HFS) flaw, CVE-2026-61500, rated CVSS 9.3. The flaw involves session forgery caused by a weak pseudo-random number generator that can produce a predictable key for unauthorized access.

Active exploitation moves this from a theoretical flaw to a concrete exposure-management priority for organizations running the affected software.

Hackers accessed names, addresses and CPR numbers in Denmark’s national population register through a third-party company with legal registry access. The registry covers 8.8 million people and contains around 11 million records, including people who have died or moved abroad.

Because CPR numbers support banking, healthcare and tax services, combining them with names and addresses could create a serious identity-fraud risk.

Threat actors have been observed attempting to exploit a now-patched critical security flaw affecting the Realtek Jungle software development kit to deploy the Cling botnet malware. Nozomi Networks said Cling repurposes ordinary STUN behavior as a practical command-and-control channel rather than introducing a new propagation technique.

This account distinguishes initial access from later operator communications, a useful boundary when assessing the reported activity.