ChatGPT share links abused to host fake outage pages to deliver malware

Multiple active threats and notable security developments were reported: threat actors abused ChatGPT share links to host fake outage pages that distribute malware, and AI-powered lures (GreyVibe) and an Android RAT (BTMOB) are being used in targeted campaigns. Researchers and authorities disclosed high-impact incidents: active exploitation of FortiClient EMS authentication bypass (CVE-2026-35616) to deploy an infostealer, an unpatched Gogs zero-day enabling remote code execution, and a massive 17 million–device botnet disrupted by Dutch authorities. Other items include growing DDoS-as-a‑서비스,