Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
2026-10-07T01:23:59Z•1de2b3757a1459585de549cbfb0522be3bb7b92b8adeeffbf0171a7508cbb527
CVE-2026-21589CVE-2026-61500CVE-2026-63688CVE-2026-88779CVE-2026-96940AI securityAtlassianChina-nexus espionageClickFixKubernetesMFA theftMicrosoft ExchangeNetScalerRealtekRejetto HFSactively exploited vulnerabilitiesbackdoorbotnetcredential theftdata breachphishingprivilege escalationransomwareremote code executionsupply chainunauthenticated accesszero-day
What happened
The feed reports multiple significant cybersecurity threats, including actively exploited zero-days, critical unauthenticated access and remote-code-execution vulnerabilities, credential and MFA phishing campaigns impersonating AI services, Linux backdoors, ransomware activity, supply-chain and agent security risks, and major data exposure incidents. Highest-priority items include exploited NetScaler and Rejetto HFS flaws, critical Atlassian file disclosure, Microsoft Exchange privilege escalation, Realtek SDK exploitation, and Dell Kubernetes storage vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 1de2b3757a1459585de549cbfb0522be3bb7b92b8adeeffbf0171a7508cbb527
- Enrichment time
- 2026-10-07T01:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.