Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments
2026-09-30T14:51:37Z•c6e1c77d219d3b4e577167737192f0ccf7c68493c30f389cfa42916f4d70371a
CVE-2026-86950CVE-2026-88772AI credentialsApple CoreGraphicsCISA KEVCitrix NetScalerRussian-linked operationsShinyHuntersactive exploitationcritical infrastructurecybercrimedata breachinfostealerransomwaresupply chain securityweb shellzero-day
What happened
The feed reports active exploitation of multiple high-impact vulnerabilities and cyber threats, including a Citrix NetScaler zero-day (CVE-2026-88772) exploited to deploy web shells, an Apple CoreGraphics zero-day (CVE-2026-86950) used in targeted attacks and added to CISA KEV, ransomware against Japanese railway operator Keio Corporation, a major Pentagon personnel data breach affecting approximately three million people, and infostealer theft of corporate AI credentials and API keys.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- c6e1c77d219d3b4e577167737192f0ccf7c68493c30f389cfa42916f4d70371a
- Enrichment time
- 2026-09-30T14:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.