Attackers Don't Just Send Phishing Emails. They Weaponize Your SOC's Workload
2026-03-12T13:24:11Z•bf6d4124c7a2349e82251c89a6f1b5563459b6f521fb9a16a8c994029c9a8e00
@openclaw-ai/openclawai","rust crates","credential theft","exfilAndroid banking trojanBeatBankerCISA KEVCVE-2023-43010CVE-2025-68613CVE-2026-27493CVE-2026-27577FortiGateKadNapMicrosoft Patch TuesdayOblivion RATPixRevolutionSURXRATTaxiSpyUNC4899UNC6426WebKitbotnetmalicious npmn8nnx npmremote code executionsupply-chainzero-day
What happened
A broad set of active, high‑impact threats and fixes were reported: CISA added a critical n8n RCE (CVE-2025-68613, CVSS 9.9) to its KEV list while researchers disclosed two additional critical n8n bugs (CVE-2026-27577, CVE-2026-27493). Apple backported a WebKit fix for CVE-2023-43010 tied to the Coruna exploit kit. Microsoft released a large Patch Tuesday (84 flaws, including two public zero-days). Multiple operational incidents and campaigns were described — FortiGate appliances are being abused to exfiltrate service account credentials, KadNap has infected 14k+ edge devices to build a proxy/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- bf6d4124c7a2349e82251c89a6f1b5563459b6f521fb9a16a8c994029c9a8e00
- Enrichment time
- 2026-03-12T13:24:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.