Russian state hackers use new RedFlick technique to push malware
2026-10-01T01:23:22Z•6ff628446f0c41a17031048edef09121492fe4cb435a16d640d9369899515a76
CVE-2026-76504CVE-2026-88772AI-securityCisco-Catalyst-SD-WANCitrix-NetScalerClickFixCosmicPulseMikroTik-RouterOSRATRedFlickStar-BlizzardTeamViewerZammadactively-exploited-vulnerabilitybusiness-email-compromisecredential-exposurephishingprivilege-escalationremote-code-executionstate-sponsoredsupply-chainthreat-intelligenceweb-shellzero-day
What happened
A BleepingComputer security-news feed covering Russian state-sponsored malware deployment, multiple actively exploited or critical zero-days, exposed credentials, ransomware and breach activity, phishing and ClickFix malware delivery, and security guidance for affected products. The most urgent items involve exploited Cisco SD-WAN and Citrix NetScaler vulnerabilities, a critical pre-authenticated MikroTik RouterOS flaw, and a Zammad zero-day chain.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 6ff628446f0c41a17031048edef09121492fe4cb435a16d640d9369899515a76
- Enrichment time
- 2026-10-01T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.