PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

2026-10-16T07:23:59Z•3103a854d3cd99ad112c2a281b97aaef3c3834b99f55137c27a0fe08a0538857
CVE-2025-61624CVE-2026-0322CVE-2026-104935CVE-2026-105133CVE-2026-105134CVE-2026-105740CVE-2026-99999AhsayCBSAndroid banking trojanCISACisco Secure Email GatewayDrupalFortiOSGitHub securityIvanti Connect SecureLangflowLinux kernelNext.jsPAN-OSactive exploitationauthentication bypasscloud securitycredential theftmalwarenetwork appliancesphishingremote code executionspywaresupply chainvirtualization escapeweb shellszero-click exploitation

What happened

The feed reports widespread cybersecurity activity, including active exploitation of critical vulnerabilities in enterprise appliances and software, novel malware and spyware deployments, supply-chain and credential-theft campaigns, phishing infrastructure, and cloud or container escape risks. Highest-risk items involve unauthenticated or authenticated remote code execution, authentication bypass, web-shell deployment, and vulnerabilities under active exploitation affecting PAN-OS, Langflow, AhsayCBS, Cisco Secure Email Gateway, Ivanti Connect Secure, Next.js, Drupal, and Linux virtualization.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
3103a854d3cd99ad112c2a281b97aaef3c3834b99f55137c27a0fe08a0538857
Enrichment time
2026-10-16T07:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.