Know Your Enemy: Browser-Based Attack Techniques in 2026

2026-09-30T13:24:00Z•c6661c911fe18800b12455c1a415f838986afac1cf806b7c3b2152e3c2c2a1d2
CVE-2026-86950CVE-2026-88771CVE-2026-88772AI-agent-securityApple CoreGraphicsAzureCISA KEVCitrix NetScalerDTLSDockerMCPMicrosoft 365OAuth-credential-theftOpenSSLRMMactive-exploitationbotnetcloud-securitymalicious-npm-packagesmemory-disclosurephishingpre-authenticationremote-code-executionsession-theftsupply-chain-security

What happened

The document is a threat-intelligence roundup covering active exploitation of critical Citrix NetScaler vulnerabilities, including CVE-2026-88772 and related flaws; high-severity OpenSSL DTLS memory disclosure; targeted Apple exploitation; phishing and session theft against Microsoft 365 users; malicious npm and MCP SDK supply-chain risks; AI-agent security failures; malware campaigns; cloud destruction; and major data or cryptocurrency theft incidents. The most urgent items are the actively exploited, pre-authentication NetScaler flaws and associated shellcode deployment, alongside credential

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
c6661c911fe18800b12455c1a415f838986afac1cf806b7c3b2152e3c2c2a1d2
Enrichment time
2026-09-30T13:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Know Your Enemy: Browser-Based Attack Techniques in 2026 · Baitaphish