Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

2026-10-08T13:24:00Z•20d7ac419d3a8566d8c4a20317b8c3c45c85ce57aacce0d2a0eb635eecd6a4cb
CVE-2026-21589AI-securityAtlassianFortinetLLM-infrastructureLMCacheSSRFSonicWallactive-exploitationcertificate-authority-abusecredential-theftcryptocurrency-walletscryptominingdata-breachdomain-registry-compromiseinformation-stealermalicious-browser-extensionsmalwarenpm-supply-chainphishingransomwareremote-code-execution

What happened

A cybersecurity news digest covering phishing kits, malicious browser extensions and npm packages, credential theft, ransomware-related fraud, certificate and registry compromise, critical vulnerabilities in SonicWall, LMCache, Atlassian, LibreOffice/OpenOffice, and attacks against AI/LLM infrastructure and MCP ecosystems. Several reports describe active exploitation, large-scale credential or secret theft, and supply-chain compromise.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
20d7ac419d3a8566d8c4a20317b8c3c45c85ce57aacce0d2a0eb635eecd6a4cb
Enrichment time
2026-10-08T13:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.