Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
2026-07-27T07:23:58Z•99d4356ae3eb7b61e71e08b27720a4941ccd580eb69fa92350f7b0c6d7af212a
CVE-2026-16723CVE-2026-32194CVE-2026-64600AI securityActive DirectoryBingFastjsonGitLabLinuxPTC WindchillRedisWindowsZimbraactive exploitationcloud securitycredential theftespionagemalvertisingmalwarephishingransomwareremote code executionsandbox escapesupply chain
What happened
The feed reports multiple active and emerging cybersecurity threats, including critical remote-code-execution vulnerabilities, ransomware and espionage operations, phishing and malvertising campaigns, supply-chain abuse, AI-agent security flaws, and malware deployments. Notable items include exploitation of Fastjson and PTC Windchill/FlexPLM, public GitLab and Redis exploit code, domain-controller impersonation through Active Directory certificates, Bing server compromise via crafted SVGs, and local root escalation on RHEL through RefluXFS. Several campaigns are attributed to state-linked or e
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 99d4356ae3eb7b61e71e08b27720a4941ccd580eb69fa92350f7b0c6d7af212a
- Enrichment time
- 2026-07-27T07:23:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.