Reverse Engineering With AI Unearths High-Severity GitHub Bug
2026-04-29T20:51:56Z•a2d420f7bd574211105968b7a127d3b5245cd01734558f4a7c211d8caab2cbaa
CVE-2026-1731ai-phishingai-reverse-engineeringblueNoroffbomgarelectronic-health-recordsglassworminfostealer-vidarlazarusnation-state-actorsnist-cve-managementopenemrphantomrpcprivilege-escalationransomwareremote-code-executionsupply-chain-compromiseunc6692vs-code-extensionswindows-rpcwiper-malware
What happened
DarkReading roundup (late Apr 2026): AI is speeding vulnerability discovery and exploitation — researchers used AI to reverse-engineer a high-severity GitHub bug and found 38 flaws in OpenEMR that enable database compromise, RCE, and data theft. Multiple high-impact Windows issues (including an unpatched PhantomRPC architectural weakness and active exploits against Windows Defender) and a critical Bomgar RCE (CVE-2026-1731) are being abused in supply-chain and ransomware campaigns. New and evolving threats include Vect 2.0 acting as a wiper, Lotus Wiper targeting Venezuelan energy, GlassWorm/恶
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- a2d420f7bd574211105968b7a127d3b5245cd01734558f4a7c211d8caab2cbaa
- Enrichment time
- 2026-04-29T20:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.