Tencent patched a zero-click WeChat VoIP memory-corruption vulnerability that researchers used to demonstrate a worm spreading through calls on iOS and Android. In the demonstration, the exploit took control of a victim’s WeChat account within seconds without the recipient answering; the compromised account then called another contact and repeated the process without user interaction.
Why it matters
A reviewed impact interpretation has not been published for this record.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Heimdall Daily
Identity · Cyberscoop
What happened
Proofpoint researchers reported that at least four state-aligned threat groups chained three zero-day vulnerabilities against targets of interest to China’s government since late August. The BlueMoon exploit chain targets Chrome, Chromium-based browsers and Microsoft Windows; it can run code in the browser sandbox, escape it and gain system privileges.
Why it matters
A reviewed impact interpretation has not been published for this record.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Heimdall Daily
Exploitation · Securityaffairs
What happened
Researcher Chaotic Eclipse released ShieldCrash, a proof-of-concept exploit targeting a Microsoft Defender zero-day vulnerability, CVE-2026-69414, referred to as ShieldBreak. The published PoC demonstrates arbitrary file reading with SYSTEM privileges; the researcher describes it as a basic version and says it currently publishes only enough code to show the patch does not completely block the issue.
Why it matters
A reviewed impact interpretation has not been published for this record.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Evidence is visible. Uncertainty stays visible too.
Baitaphish separates source records from interpretations, labels AI-assisted enrichment, and avoids turning ingestion volume into unsupported claims about threats, prevalence, or risk.
