Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
2026-10-08T01:24:00Z•8b5f3374005d9b482293b0cb4a86bdf5af605c635b2cd69719cf1478106d6e83
CVE-2026-21589CVE-2026-96940AI securityAtlassian Data CenterClickFixFortinetLMCacheLinux backdoorLunexStealerMicrosoft ExchangeOverlord RATPoeLLMSSRFSonicWall SMA1000active exploitationcredential theftcrypto miningdata breachnpm supply chainphishingremote code executionvulnerability
What happened
The feed covers major cybersecurity developments including active exploitation of critical Atlassian Data Center and Realtek SDK flaws, a high-severity Microsoft Exchange privilege-escalation issue, an unpatched unauthenticated remote-code-execution flaw in LMCache, Fortinet credential harvesting, supply-chain malware in npm packages, AI/LLM infrastructure attacks, phishing campaigns, Linux backdoors, and large-scale data exposure. The most urgent items are the actively exploited Atlassian vulnerability, exposed Fortinet credentials, critical internet-facing appliance and software flaws, and L
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 8b5f3374005d9b482293b0cb4a86bdf5af605c635b2cd69719cf1478106d6e83
- Enrichment time
- 2026-10-08T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.