Alleged ShinyHunters Leader Arrested in Jordan
2026-10-05T07:24:00Z•1e37b9baf5c3cd754ddbf6b839387e6e791c67034c36fb99ce158c3ffdca0ed1
CVE-2026-88779China-linked threat actorCitrix NetScalerCloudSyncDFortra BoKSIranian state-linked hackingMicrosoft SharePointShinyHuntersWarlockaccount hijackingactive exploitationauthentication bypassbackdoorcommand executioncritical infrastructurecryptocurrency scamsfake Zoom installermacOS malwarememory corruptionzero-day
What happened
SecurityWeek RSS items cover active exploitation of a Citrix NetScaler zero-day (CVE-2026-88779), critical Fortra BoKS vulnerabilities enabling authentication bypass and command execution, SharePoint exploitation by the China-based Warlock group against critical infrastructure, a macOS fake Zoom installer delivering the CloudSyncD backdoor, and account hijacking and cybercrime activity. The most urgent issue is the reportedly exploited Citrix NetScaler zero-day affecting appliances patched only days earlier.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 1e37b9baf5c3cd754ddbf6b839387e6e791c67034c36fb99ce158c3ffdca0ed1
- Enrichment time
- 2026-10-05T07:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.