KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

The feed reports active and emerging cyber threats spanning banking malware, state-sponsored espionage, MQTT-controlled cross-platform malware, mass exploitation of exposed development servers, browser and desktop data theft, supply-chain attacks, and critical vulnerabilities under exploitation. Notable high-impact items include an actively exploited Cisco Secure Email Gateway flaw enabling unauthenticated root command execution (CVE-2026-76461, CVSS 9.8), a CVSS 10 GitLab arbitrary file-read vulnerability (CVE-2026-85706), and multiple vulnerabilities added to CISA's KEV catalog. Campaigns by