Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

2026-10-14T13:24:00Z•9becb16601b671896c0b0ea34e1fec8dff189220bfe301ab9681930742d70dd3
CVE-2026-104935CVE-2026-96951AdobeChromeCitrixCoGUIFirefoxFortinetIron ManIvanti Connect SecureMicrosoftNorth Korean IT workersS/4HANASAP NetWeaverWindowsYAM Storeauthentication-bypasscybersecuritylaptop farmspatchingphishingremote-code-executionthreat-intelligencevulnerability-managementzero-day

What happened

SecurityWeek RSS feed covering major cybersecurity events and disclosures, including Microsoft disruption of Chinese-language phishing infrastructure, arrests tied to North Korean IT worker laptop farms, extensive vendor security updates, and actively exploited or critical vulnerabilities. Notable items include Windows CVE-2026-96951, an exploited security feature bypass, and Ivanti Connect Secure CVE-2026-104935, an unauthenticated remote-code-execution zero-day chain granting root access.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
9becb16601b671896c0b0ea34e1fec8dff189220bfe301ab9681930742d70dd3
Enrichment time
2026-10-14T13:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.