French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
2026-09-30T01:23:59Z•3682e813eccb15e749090d7f8b7619834a1f3f5d4fa0344e7241da7430a491ad
CVE-2026-35273CVE-2026-65660CVE-2026-86950CVE-2026-88771AI securityAndroid banking trojanApple CoreGraphicsAzureCISA KEVCitrix NetScalerDockerOAuthOracle PeopleSoftactive exploitationcloud securitycredential theftcryptocurrency theftdata theftmalwarenpm malwarephishingremote code executionstate-sponsored activitysupply-chain securityweb shellszero-day
What happened
The feed reports active and emerging cybersecurity threats, including credential theft, targeted state-sponsored phishing, critical vulnerabilities under exploitation, supply-chain abuse, malware campaigns, cloud destruction, and AI-agent security risks. Notable items include actively exploited Citrix NetScaler and Oracle PeopleSoft flaws, an Apple CoreGraphics vulnerability potentially exploited in targeted attacks, malicious npm packages, OAuth credential theft through the MCP Python SDK, exposed Docker daemon compromise, and major cryptocurrency theft. Several reports lack CVE identifiers,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 3682e813eccb15e749090d7f8b7619834a1f3f5d4fa0344e7241da7430a491ad
- Enrichment time
- 2026-09-30T01:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.