Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
2026-10-12T13:23:59Z•a63a3abfb5ca508f67bca5b88706e96ed00a0ed3f18a8711b99a95f9a282c8b2
CVE-2015-3306CVE-2026-102255CVE-2026-105133CVE-2026-107406CVE-2026-85097AI-assisted attacksAPTAhsayCBSCitrix NetScalerCobalt StrikeFlax TyphoonGitHub ActionsSSRFSonicWallUAC-0099WordPressXMRigactive exploitationcredential theftcritical infrastructurecrypto wallet theftdata theftiOS malwareidentity securityransomwareremote code executionsupply chainvulnerability managementzero-day
What happened
The feed reports active exploitation of multiple critical vulnerabilities, including SonicWall SMA 1000 SSRF, Bricksforge WordPress unauthenticated remote code execution, AhsayCBS flaws, and Citrix NetScaler memory corruption. It also covers AI-assisted campaigns, credential theft through GitHub Actions, mobile and cryptocurrency wallet malware, China- and Russia-linked threat activity, critical infrastructure targeting, supply-chain risks, and law-enforcement disruption operations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- a63a3abfb5ca508f67bca5b88706e96ed00a0ed3f18a8711b99a95f9a282c8b2
- Enrichment time
- 2026-10-12T13:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.