French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
2026-09-29T19:24:00Z•79b0b6ff58b9a6166ab2db8dd1f33379da7d10399407272201c2a9c7f9666383
CVE-2026-35273CVE-2026-65660CVE-2026-86950CVE-2026-88771AI-agent-securityAndroid-malwareApple-CoreGraphicsAzureCISA-KEVCitrix-NetScalerDockerOracle-PeopleSoftSpectreactive-exploitationcloud-securitycredential-theftcritical-vulnerabilitycrypto-theftdata-exfiltrationnpm-malwarephishingransomware-and-malwareremote-code-executionstate-sponsored-threatsupply-chain-securityweb-shellzero-day
What happened
The feed covers active exploitation of critical enterprise vulnerabilities, credential theft, supply-chain abuse, malware campaigns, cloud destruction, and emerging AI-agent security risks. Highest-impact items include actively exploited Citrix NetScaler and Oracle PeopleSoft flaws, Apple CoreGraphics exploitation, credential theft via the MCP Python SDK, large-scale crypto theft, Azure resource deletion, malicious npm packages, and malware targeting Docker, Android, Linux, and Windows environments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 79b0b6ff58b9a6166ab2db8dd1f33379da7d10399407272201c2a9c7f9666383
- Enrichment time
- 2026-09-29T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.