Attackers Hijack Three ccTLDs to Obtain Google Certificates
2026-10-08T14:52:07Z•7c41cb4e3178adfffb488302f24697bb356b2a36491edfce528f3263037371f3
CVE-2026-86950AI-assisted attacksAtlassianCisco Catalyst SD-WANCitrix NetScalerClickFixFortinetIoTLinuxactive exploitationcertificate authority abusecloud account compromisecritical vulnerabilitiesdata breacheducation sectorhealthcare securitymacOSmalwarenetwork edgephishingpost-quantum cryptographyprompt injectionransomwarestolen credentialssupply chainzero-day
What happened
A September–October 2026 cybersecurity news digest covering active exploitation of critical vulnerabilities and zero-days, credential- and cloud-account-driven breaches, ransomware, malware campaigns targeting IoT, Linux, macOS and network-edge systems, supply-chain compromise, phishing and ClickFix techniques, AI-assisted attacks, and emerging post-quantum cryptography readiness concerns. Specific CVEs are identified only for Apple CoreGraphics (CVE-2026-86950); other vulnerabilities lack identifiers in the supplied document.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 7c41cb4e3178adfffb488302f24697bb356b2a36491edfce528f3263037371f3
- Enrichment time
- 2026-10-08T14:52:07Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.