AI Accounts Are Becoming the New Target for Infostealers
2026-09-29T02:51:37Z•a362143b20d0ac0f85ba17d14423f9aca7648b3c524c6b82d4b94f9436c1b7be
CVE-2026-48842CVE-2026-88771AI accountsAPI keysAzureCISA KEVCitrix NetScalerNetScaler ADCNetScaler GatewayRoundcubeSQL injectionactive exploitationcloud identity abusecybercrime marketplacedata exposurehealthcareinfostealerransomwareremote code executionstolen service principalszero-day
What happened
Security Affairs reports active exploitation of critical Citrix NetScaler zero-days and vulnerabilities, in-the-wild exploitation of Roundcube SQL injection, and cloud attacks abusing stolen Azure identities. It also highlights infostealer exposure of corporate AI accounts, sessions, and API keys, a major Medicaid data exposure affecting nearly 400,000 beneficiaries, and cybercrime marketplace activity.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- a362143b20d0ac0f85ba17d14423f9aca7648b3c524c6b82d4b94f9436c1b7be
- Enrichment time
- 2026-09-29T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.