Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.
2026-10-06T02:51:37Z•c469896ce4af2e8247f009697c550545ff400d12a67a7051597532d1c7d9349e
CVE-2026-61500CVE-2026-88779CVE-2026-90970AI-assisted vulnerability researchCISA KEVCitrix NetScaler ADCCitrix NetScaler GatewayIranian threat actorRejetto HFSShinyHuntersactive exploitationauthentication bypasscyber espionagedata breachidentity data exposuremalwarememory overflowremote code execution
What happened
Security Affairs RSS items report active exploitation of a critical Rejetto HFS authentication-bypass and remote-code-execution vulnerability (CVE-2026-61500, CVSS 9.3), and CISA listing an actively exploited Citrix NetScaler ADC/Gateway memory-overflow flaw (CVE-2026-88779, CVSS 8.7) in its KEV catalog. Additional coverage includes a major Danish population-registry data breach affecting 8.8 million people, alleged Iranian university mailbox data theft, ShinyHunters law-enforcement activity, and broader AI, malware, and cyber-espionage developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- c469896ce4af2e8247f009697c550545ff400d12a67a7051597532d1c7d9349e
- Enrichment time
- 2026-10-06T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.