No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks
2026-04-21T13:24:18Z•174eee2da4bb80f01cc3d1b4b5cf0dc00455be9ae8356287dcd68a78f441a25f
AI supply chainAI-generated malwareAndroid malwareAnthropic MCPAntigravity IDEApache ActiveMQCISA KEVCiscoContext.aiGGUFHandyPayMiraiNFC data theftNGateNexcoriumObsidianPHANTOMPULSEPowMix botnet','n8n abuse','ZionSiphon','OT targeting','NISTSGLangVercel breachcredential theftidentity-based attacksnginx-uiprompt injectionremote code execution
What happened
The collection highlights a surge of identity-based attacks and multiple actively exploited, high‑severity vulnerabilities across infrastructure, AI tooling, and consumer devices. Key incidents include credential-theft remaining the dominant initial access vector; an NGate Android campaign trojanizing HandyPay to steal NFC data and PINs (malicious code reportedly AI‑generated); critical RCEs and design flaws in AI/model tooling (SGLang CVE-2026-5760, Antigravity IDE prompt-injection, Anthropic MCP design issue); widespread active exploitation of management tools (nginx-ui CVE-2026-33032,Apache
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 174eee2da4bb80f01cc3d1b4b5cf0dc00455be9ae8356287dcd68a78f441a25f
- Enrichment time
- 2026-04-21T13:24:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.