Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.
2026-10-05T20:51:36Z•eea9d5052f39bbc721bf92ae3843e1a33bcfa696bd35a1d32d050e9bf14c34e7
CVE-2026-61500CVE-2026-88779CVE-2026-90970AI-assisted-security-researchCitrix-NetScalerDenmarkIranian-threat-actorRejetto-HFSShinyHuntersauthentication-bypasscyber-espionagedata-breachexploitation-in-the-wildknown-exploited-vulnerabilitiesmemory-overflowremote-code-execution
What happened
Security Affairs reporting highlights a critical Rejetto HFS authentication-bypass and remote-code-execution vulnerability (CVE-2026-61500, CVSS 9.3) being exploited in the wild, plus a Citrix NetScaler memory-overflow flaw (CVE-2026-88779, CVSS 8.7) added to CISA’s Known Exploited Vulnerabilities catalog. The feed also covers a major Denmark population-registry data breach affecting 8.8 million people, alleged Iranian university email theft, Chinese influence concerns in UK academic research, and cybercrime investigations involving ShinyHunters.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- eea9d5052f39bbc721bf92ae3843e1a33bcfa696bd35a1d32d050e9bf14c34e7
- Enrichment time
- 2026-10-05T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.