Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

2026-10-07T01:23:59Z•1de2b3757a1459585de549cbfb0522be3bb7b92b8adeeffbf0171a7508cbb527
CVE-2026-21589CVE-2026-61500CVE-2026-63688CVE-2026-88779CVE-2026-96940AI securityAtlassianChina-nexus espionageClickFixKubernetesMFA theftMicrosoft ExchangeNetScalerRealtekRejetto HFSactively exploited vulnerabilitiesbackdoorbotnetcredential theftdata breachphishingprivilege escalationransomwareremote code executionsupply chainunauthenticated accesszero-day

What happened

The feed reports multiple significant cybersecurity threats, including actively exploited zero-days, critical unauthenticated access and remote-code-execution vulnerabilities, credential and MFA phishing campaigns impersonating AI services, Linux backdoors, ransomware activity, supply-chain and agent security risks, and major data exposure incidents. Highest-priority items include exploited NetScaler and Rejetto HFS flaws, critical Atlassian file disclosure, Microsoft Exchange privilege escalation, Realtek SDK exploitation, and Dell Kubernetes storage vulnerabilities.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
1de2b3757a1459585de549cbfb0522be3bb7b92b8adeeffbf0171a7508cbb527
Enrichment time
2026-10-07T01:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes · Baitaphish