Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations

A roundup of active and emerging cyber threats and high-severity vulnerabilities: threat actors used fake tech-support lures to deploy the Havoc C2 framework; an open-source AI testing tool (CyberStrikeAI) was used in AI-driven attacks against Fortinet FortiGate appliances; a new AitM phishing platform named Starkiller proxies real login pages to bypass MFA; OAuth redirect abuse is being used to deliver malware to government targets; Google confirmed exploitation of CVE-2026-21385 in a Qualcomm Android graphics component. Additional notable items include a now-patched Chrome WebView/extension-