Gorbag: Orcs at the border harvesting intelligence from Ukraine
2026-11-04T08:51:33Z•1d41b05218b3be7398d0ad006fbafff2471491007d9779ad49b7c419bb48fb25
CVE-2026-109618CVE-2026-109619AI-securityAPTESETFamousSparrowPHPRussia-alignedSandwormSecure BootUAC-0099UEFIUkrainebackdoorcyber-espionageinfostealerphishingscamssupply-chain-securitythreat-intelligence
What happened
ESET WeLiveSecurity RSS feed containing research and guidance on active cyber threats, including Russia-aligned espionage against Ukrainian organizations, infostealers, APT backdoors, phishing and scams, critical PHP vulnerabilities, Secure Boot bypass issues, and emerging AI-related security risks. The feed references CVE-2026-109618 and CVE-2026-109619 and highlights potentially destructive activity involving UAC-0099 and Sandworm-associated operations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- 1d41b05218b3be7398d0ad006fbafff2471491007d9779ad49b7c419bb48fb25
- Enrichment time
- 2026-11-04T08:51:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.