Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
2026-11-05T13:23:59Z•a8e562684e5655600dc8e86274262271911c9d15ff277cd4e2c928a2c3cea0d7
CVE-2026-107441AI-agent-securityAndroidBarracudaCiscoEmail-Security-GatewayOS-command-executionSonicWallWatchGuardZyxelactively-exploitedauthentication-bypasscommand-injectioncritical-infrastructureevasioniOSmobile-securitynetwork-switchesphishingroot-accessshadow-AIwatering-holezero-day
What happened
SecurityWeek coverage includes phishing evasion techniques, cyberattacks against critical infrastructure, enterprise AI-agent governance, and multiple actively relevant vulnerability disclosures. Notably, a Zyxel switch zero-day enables OS command execution via crafted HTTP requests, while Barracuda Email Security Gateway flaws can be chained from authentication bypass to root access. Mobile watering-hole campaigns and vendor patch activity are also reported.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- a8e562684e5655600dc8e86274262271911c9d15ff277cd4e2c928a2c3cea0d7
- Enrichment time
- 2026-11-05T13:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.