Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
2026-10-05T19:23:59Z•d4bda0e6cbbd2f0a072ffc7894b27595d4f0399676b1cec2db488c027fe8c094
CVE-2026-61500CVE-2026-88779Citrix NetScalerClingSTUNLinux malwareRejetto HFSSTUN tunnelingauthentication-bypassbackdoorbug-bountycybercrimeexploited-vulnerabilitieshealthcare-data-breachpersistenceremote-code-executionself-propagationvulnerability-disclosurezero-day
What happened
SecurityWeek roundup covering an exploited Rejetto HFS vulnerability enabling session-cookie key recovery, administrative access, and remote code execution; exploitation of a Citrix NetScaler zero-day; a Linux backdoor using STUN for covert back-connect proxying, persistence, and self-propagation; critical Fortra BoKS flaws; healthcare data breaches affecting approximately 250,000 people; and broader cybersecurity policy, cybercrime, and vulnerability-research developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- d4bda0e6cbbd2f0a072ffc7894b27595d4f0399676b1cec2db488c027fe8c094
- Enrichment time
- 2026-10-05T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.