Bug Bounty Research Triggers ServiceNow Security Alert
2026-06-10T20:51:45Z•65e79ebed2f67cad38e39754d53d9aff0a425dd1413de179c359117652ceff67
CVE-2025-8088active-exploitationadaptive-ai-wormsai-threatscheck-pointclickfixcritical-infrastructuredrivesurgeedr-evasionemail-spoofingexchangeglobalprotectkali365miasmamicrosoftnpmpalo-altophishingpypiqilinransomwareservice-nowsupply-chainwinrarzero-day
What happened
Dark Reading roundup covering multiple active and emerging threats: active exploitation of critical/zero-day vulnerabilities (Check Point VPN zero-day, Palo Alto PAN-OS GlobalProtect auth-bypass under active attack), a WinRAR flaw being weaponized against Ukrainian targets (CVE-2025-8088), and several Microsoft-focused issues including Exchange "Ghost-Sender" email spoofing and Microsoft 365 account takeover due to a coding/configuration error. The feed also highlights software supply-chain campaigns (Miasma affecting Microsoft repos, NPM/PyPI infections like IronWorm and Hades), wide-scale I/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 65e79ebed2f67cad38e39754d53d9aff0a425dd1413de179c359117652ceff67
- Enrichment time
- 2026-06-10T20:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.