Hackers exploit Tencent app flaw to deploy GrayRabbit malware

A BleepingComputer security news feed covering active exploitation of critical vulnerabilities, malware campaigns, phishing and identity attacks, data breaches, ransomware, AI-platform abuse, and security update failures. Notable items include exploitation of Tencent Sogou Input Method (CVE-2026-51990), imminent exploitation of Check Point VPN flaws (CVE-2026-85102 and CVE-2026-85103), a maximum-severity GitLab path traversal flaw (CVE-2026-85706), Artifactory attacks, GrayRabbit and Mantax Otax malware, Microsoft 365 phishing, and breaches involving Florida DMV and Surfshark.