Know Your Enemy: Browser-Based Attack Techniques in 2026
2026-09-30T13:24:00Z•c6661c911fe18800b12455c1a415f838986afac1cf806b7c3b2152e3c2c2a1d2
CVE-2026-86950CVE-2026-88771CVE-2026-88772AI-agent-securityApple CoreGraphicsAzureCISA KEVCitrix NetScalerDTLSDockerMCPMicrosoft 365OAuth-credential-theftOpenSSLRMMactive-exploitationbotnetcloud-securitymalicious-npm-packagesmemory-disclosurephishingpre-authenticationremote-code-executionsession-theftsupply-chain-security
What happened
The document is a threat-intelligence roundup covering active exploitation of critical Citrix NetScaler vulnerabilities, including CVE-2026-88772 and related flaws; high-severity OpenSSL DTLS memory disclosure; targeted Apple exploitation; phishing and session theft against Microsoft 365 users; malicious npm and MCP SDK supply-chain risks; AI-agent security failures; malware campaigns; cloud destruction; and major data or cryptocurrency theft incidents. The most urgent items are the actively exploited, pre-authentication NetScaler flaws and associated shellcode deployment, alongside credential
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- c6661c911fe18800b12455c1a415f838986afac1cf806b7c3b2152e3c2c2a1d2
- Enrichment time
- 2026-09-30T13:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.