Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
2026-10-08T13:24:00Z•20d7ac419d3a8566d8c4a20317b8c3c45c85ce57aacce0d2a0eb635eecd6a4cb
CVE-2026-21589AI-securityAtlassianFortinetLLM-infrastructureLMCacheSSRFSonicWallactive-exploitationcertificate-authority-abusecredential-theftcryptocurrency-walletscryptominingdata-breachdomain-registry-compromiseinformation-stealermalicious-browser-extensionsmalwarenpm-supply-chainphishingransomwareremote-code-execution
What happened
A cybersecurity news digest covering phishing kits, malicious browser extensions and npm packages, credential theft, ransomware-related fraud, certificate and registry compromise, critical vulnerabilities in SonicWall, LMCache, Atlassian, LibreOffice/OpenOffice, and attacks against AI/LLM infrastructure and MCP ecosystems. Several reports describe active exploitation, large-scale credential or secret theft, and supply-chain compromise.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 20d7ac419d3a8566d8c4a20317b8c3c45c85ce57aacce0d2a0eb635eecd6a4cb
- Enrichment time
- 2026-10-08T13:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.