Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
2026-07-26T01:24:21Z•bc5c9a26577f7bd3678394de7a9dfcbe0835f1059dc95d1a8c161e78992c5cfa
CVE-2026-16723CVE-2026-32194CVE-2026-64600active-directoryai-agent-vulnerabilitiesbing-imagesblue-noroffcertighostcl0pdevman-raasfastjsongithub-actions-abusegitlabmalvertisingnodebbphishingransomwarerceredis-zero-dayrefluxfszimbra-zero-day
What happened
A collection of high-impact security reports from The Hacker News covering active exploitation, critical RCEs, zero-days, and advanced phishing/ransomware operations. Notable items include a malvertising campaign (SourTrade) that assembles Windows executables in the browser; an actively exploited Fastjson 1.x RCE tracked as CVE-2026-16723 (Alibaba-assigned CVSS 9.0) with no patch for some environments; published GitLab RCE PoC for unpatched self-managed 18.11.3 instances; Certighost allowing low-privileged AD users to impersonate domain controllers and enable DCSync; Bing Images SVG flaws (one
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- bc5c9a26577f7bd3678394de7a9dfcbe0835f1059dc95d1a8c161e78992c5cfa
- Enrichment time
- 2026-07-26T01:24:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.