ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

2026-10-15T19:23:59Z•926ee2ffdc6067798de47d963ddadad7513ee5905bcfcb0570fd273ed96552d8
CVE-2026-0322CVE-2026-104935CVE-2026-105133CVE-2026-105134CVE-2026-105740AI securityAhsayCBSAndroid banking trojanCisco Secure Email GatewayDrupalGitHubIvanti Connect SecureLangflowLinux kernelNext.jsNextcloudPAN-OSactive exploitationauthentication bypasscloud securitycredential theftnetwork appliancesphishingransomware and malwareremote code executionsupply-chain securityweb shellszero-click spyware

What happened

The feed is a high-risk roundup of active exploitation, critical remote-code-execution vulnerabilities, authentication bypasses, supply-chain and credential theft campaigns, spyware operations, and malware activity. Notable items include actively exploited PAN-OS, Ivanti Connect Secure, Cisco Secure Email Gateway, AhsayCBS, and Nextcloud flaws; critical Next.js, Drupal, Langflow, and Linux kernel issues; and large-scale GitHub credential theft and phishing-kit campaigns.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
926ee2ffdc6067798de47d963ddadad7513ee5905bcfcb0570fd273ed96552d8
Enrichment time
2026-10-15T19:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.