Meet GREYVIBE, the Russia-Linked Hacking Group Using AI to Target Ukraine and Still Making Rookie Mistakes

This batch covers multiple high-impact incidents: a newly tracked Russia-linked APT dubbed GREYVIBE using AI-assisted malware to target Ukraine; a controversial public dump of six Windows zero-days (three of which are already exploited in the wild); active exploitation of FortiClient EMS (CVE-2026-35616) for unauthenticated RCE; and a critical LiteSpeed cPanel plugin flaw (CVE-2026-48172) added to CISA’s KEV. Other notable items: commercial Android full-device takeover kit BTMOB, a nearly 6M-record Carnival customer data breach, Microsoft/Resecurity disruption of the Fox Tempest code‑signing/“