⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
2026-10-12T19:24:00Z•8fd135fa8e2de6e7b54170bd973200b964e0e146778ab7d01bc05514e3bc86e2
CVE-2015-3306CVE-2026-102255CVE-2026-105133CVE-2026-107406CVE-2026-85097AI-assisted attacksAhsayCBSBricksforgeChina-linked threat actorCitrix NetScalerDarkSwordFlax TyphoonGitHub ActionsRussia-aligned threat actorSSRFSonicWall SMAUAC-0099WordPressactive exploitationcredential theftcritical infrastructurecrypto wallet theftdata theftiOS malwareransomwareremote code executionsupply chainvulnerabilitieszero-day
What happened
Weekly cybersecurity roundup covering active exploitation of critical vulnerabilities, including SonicWall SMA 1000 SSRF, Bricksforge WordPress unauthenticated RCE, AhsayCBS flaws, and Citrix NetScaler issues. It also highlights credential theft through GitHub Actions, AI-assisted intrusion campaigns, iOS exploit kits targeting crypto wallets, state-linked operations by Flax Typhoon and UAC-0099, supply-chain and hardware tampering concerns, and attacks against critical infrastructure and government organizations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 8fd135fa8e2de6e7b54170bd973200b964e0e146778ab7d01bc05514e3bc86e2
- Enrichment time
- 2026-10-12T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.