Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

2026-09-27T07:23:58Z•93aa8cf41e18a24de52d6172da5a6461bc5c7b0f5c082ca1fe08c6acadc0ec9f
CVE-2026-35273CVE-2026-48842CVE-2026-5430CVE-2026-65660CVE-2026-87902AI securityAdobe CommerceAndroid spywareCISA KEVClickFixGitHub ActionsMicrosoft 365Microsoft SharePointMikroTik RouterOSOracle PeopleSoftRoundcubeTerraformWSO2WordPressactive exploitationcloud isolationcredential theftcritical vulnerabilitiesinfostealermacOS malwareremote code executionsupply chain compromiseweb shells

What happened

This feed contains multiple high-impact cybersecurity developments, including active exploitation of critical vulnerabilities in Oracle PeopleSoft, Microsoft SharePoint, MikroTik RouterOS, Roundcube, WSO2, Adobe Commerce/Magento, and WordPress. It also reports malware campaigns using ClickFix lures, compromised websites, malicious Terraform providers, Android spyware, macOS stealers, and abuse of drivers to evade security monitoring. Additional risks include compromised GitHub Actions, Microsoft 365 account takeover, exposed GitLab CI credentials, cloud tenant data remnants, and AI-agent and L

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
93aa8cf41e18a24de52d6172da5a6461bc5c7b0f5c082ca1fe08c6acadc0ec9f
Enrichment time
2026-09-27T07:23:58Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.