Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist
2026-09-28T13:23:22Z•66b708333c2c08a1de1081b4a79ea911befcaaed54800322143c661c5f357795
CVE-2026-35273CVE-2026-88771CVE-2026-88772CISACitrix NetScalerElementorGitHub ActionsNorth KoreaOracle PeopleSoftShinyHuntersWAF bypassWordPressactive exploitationcloud isolationcryptocurrency theftdata exposureextortionremote code executionsupply-chain compromisevulnerability managementzero-day
What happened
BleepingComputer security feed highlights active exploitation of critical Citrix NetScaler remote-code-execution zero-days (CVE-2026-88771 and CVE-2026-88772), prompting CISA to order federal agencies to patch. Other reported incidents include a WAF bypass enabling exploitation of Oracle PeopleSoft CVE-2026-35273, compromised GitHub Actions retaining malicious payloads, cross-tenant data exposure in Cloudflare Containers, WordPress administrator-account creation via an Elementor CSRF flaw, and major cryptocurrency theft attributed to suspected North Korean hackers.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 66b708333c2c08a1de1081b4a79ea911befcaaed54800322143c661c5f357795
- Enrichment time
- 2026-09-28T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.