WhatsApp Discovers NSO Group-Linked Spearphishing Attempts
2026-06-09T08:52:17Z•5d0760c15e7af978368223cdc25191c95a054dc3358c6e7f1d33f2e303e67a87
AI-powered attacksChatGPTEDR evasionEverest Forms ProFlowiseInstagramMetaNSO GroupNorth KoreaOpenAIPalo Alto PAN-OSRCERed HatUNK_DeadDropWhatsAppactive exploitationbackdoorcloud secretscryptocurrency theftnation-statenpmpassword resetprompt injectionspearphishingsupply chain
What happened
Infosecurity Magazine roundup (early June 2026) reports multiple high-impact incidents and trends: WhatsApp users targeted in NSO Group‑linked spearphishing, a Meta AI bug exposed >20,000 Instagram accounts via password‑reset verification failures, and a critical Everest Forms Pro RCE is being actively exploited to create rogue WordPress admin accounts. Supply‑chain and tooling compromises include attackers backdooring 32 packages in Red Hat’s npm scope to steal cloud/CI secrets and a 1‑click Flowise RCE PoC that fully compromises self‑hosted servers. Nation‑state and criminal activity noted:北
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 5d0760c15e7af978368223cdc25191c95a054dc3358c6e7f1d33f2e303e67a87
- Enrichment time
- 2026-06-09T08:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.