Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

2026-10-08T01:24:00Z•8b5f3374005d9b482293b0cb4a86bdf5af605c635b2cd69719cf1478106d6e83
CVE-2026-21589CVE-2026-96940AI securityAtlassian Data CenterClickFixFortinetLMCacheLinux backdoorLunexStealerMicrosoft ExchangeOverlord RATPoeLLMSSRFSonicWall SMA1000active exploitationcredential theftcrypto miningdata breachnpm supply chainphishingremote code executionvulnerability

What happened

The feed covers major cybersecurity developments including active exploitation of critical Atlassian Data Center and Realtek SDK flaws, a high-severity Microsoft Exchange privilege-escalation issue, an unpatched unauthenticated remote-code-execution flaw in LMCache, Fortinet credential harvesting, supply-chain malware in npm packages, AI/LLM infrastructure attacks, phishing campaigns, Linux backdoors, and large-scale data exposure. The most urgent items are the actively exploited Atlassian vulnerability, exposed Fortinet credentials, critical internet-facing appliance and software flaws, and L

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
8b5f3374005d9b482293b0cb4a86bdf5af605c635b2cd69719cf1478106d6e83
Enrichment time
2026-10-08T01:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.