Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
2026-09-26T19:23:59Z•7a7c1902f6bae244ef5f3cc2b8ec1ec266a759ba125a4265ecce20ad60f16ba4
CVE-2026-35273CVE-2026-48842CVE-2026-5430CVE-2026-65660CVE-2026-87902AI securityAdobe CommerceAndroid spywareCISA KEVClickFixGitHub ActionsMicrosoft SharePointMikroTik RouterOSOracle PeopleSoftRoundcubeTerraformWSO2WordPressactive exploitationcloud data exposurecredential theftcritical vulnerabilitiescryptocurrency theftinformation stealermacOS malwaremalware-as-a-serviceremote code executionsupply-chain compromiseweb shells
What happened
The feed reports widespread active exploitation of critical vulnerabilities, malware campaigns, supply-chain compromises, credential theft, and abuse of trusted services. Key incidents include exploitation of Oracle PeopleSoft, Microsoft SharePoint, MikroTik RouterOS, Roundcube, WSO2, Adobe Commerce, and WordPress flaws; ClickFix campaigns delivering Psychedelic/Lunex Stealer; Android and macOS spyware; compromised GitHub Actions and malicious Terraform providers; cloud data exposure; and major account or cryptocurrency compromises. Several vulnerabilities are listed as actively exploited or C
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 7a7c1902f6bae244ef5f3cc2b8ec1ec266a759ba125a4265ecce20ad60f16ba4
- Enrichment time
- 2026-09-26T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.