FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
2026-10-09T01:24:01Z•4832c58a461249415894d76ebe47e2cacfbbde9130b95eb789d4ade4efe5dab7
CVE-2026-21589API abuseAPTAtlassianChina-linked threat actorFortinetLMCache AI infrastructureRATRussia-linked threat actorSonicWallactive exploitationarbitrary file accessbotnetcredential theftcryptocurrency miningdata exfiltrationinfostealermalicious browser extensionsmalwarenpmphishingpre-authentication SSRFransomwareremote code executionsoftware supply chainweb application attacks
What happened
The document aggregates cybersecurity news covering state-linked espionage, ransomware, phishing, malware, software supply-chain compromises, exposed AI infrastructure, credential theft, active exploitation, and critical vulnerabilities. The most urgent items include an actively exploited Atlassian Data Center flaw (CVE-2026-21589), a CVSS 10.0 SonicWall SMA1000 pre-authentication SSRF, an unpatched unauthenticated remote-code-execution flaw in LMCache, and ongoing Fortinet credential harvesting. Other reports describe China- and Russia-linked campaigns, malicious npm and Firefox packages, AI/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 4832c58a461249415894d76ebe47e2cacfbbde9130b95eb789d4ade4efe5dab7
- Enrichment time
- 2026-10-09T01:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.