Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
2026-09-27T07:23:58Z•93aa8cf41e18a24de52d6172da5a6461bc5c7b0f5c082ca1fe08c6acadc0ec9f
CVE-2026-35273CVE-2026-48842CVE-2026-5430CVE-2026-65660CVE-2026-87902AI securityAdobe CommerceAndroid spywareCISA KEVClickFixGitHub ActionsMicrosoft 365Microsoft SharePointMikroTik RouterOSOracle PeopleSoftRoundcubeTerraformWSO2WordPressactive exploitationcloud isolationcredential theftcritical vulnerabilitiesinfostealermacOS malwareremote code executionsupply chain compromiseweb shells
What happened
This feed contains multiple high-impact cybersecurity developments, including active exploitation of critical vulnerabilities in Oracle PeopleSoft, Microsoft SharePoint, MikroTik RouterOS, Roundcube, WSO2, Adobe Commerce/Magento, and WordPress. It also reports malware campaigns using ClickFix lures, compromised websites, malicious Terraform providers, Android spyware, macOS stealers, and abuse of drivers to evade security monitoring. Additional risks include compromised GitHub Actions, Microsoft 365 account takeover, exposed GitLab CI credentials, cloud tenant data remnants, and AI-agent and L
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 93aa8cf41e18a24de52d6172da5a6461bc5c7b0f5c082ca1fe08c6acadc0ec9f
- Enrichment time
- 2026-09-27T07:23:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.