⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

2026-10-13T01:24:01Z•8e266fc57e31483acb4d6ff503d57f5859096316b98a60f3cc92b23bc6d7851f
CVE-2015-3306CVE-2026-102255CVE-2026-105133CVE-2026-107406CVE-2026-85097AI-assisted attacksAhsayCBSAnyDeskCitrix NetScalerFlax TyphoonGitHub ActionsSSRFSonicWall SMAUAC-0099WordPressactive exploitationcredential theftcritical infrastructurecritical vulnerabilitiescrypto wallet theftdata breachiOS malwarepre-authenticationransomwareremote code executionsupply chainzero-day

What happened

The feed highlights active exploitation of multiple critical vulnerabilities, including pre-authentication RCE/SSRF flaws in SonicWall SMA 1000, the Bricksforge WordPress plugin, AnyDesk Linux, Citrix NetScaler, and AhsayCBS. It also covers credential theft through malicious GitHub Actions workflows, AI-assisted intrusion campaigns, iOS exploit kits targeting crypto wallets, China- and Russia-linked threat activity, ransomware, web data leaks, and supply-chain risks involving hardware wallets and third-party AI agents.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
8e266fc57e31483acb4d6ff503d57f5859096316b98a60f3cc92b23bc6d7851f
Enrichment time
2026-10-13T01:24:01Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.