P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

2026-10-11T19:23:59Z•ee491cdcb8489758e9648e7a208c0d7ec55841550046aa007b70f5c279a5f2bc
CVE-2015-3306CVE-2026-105133CVE-2026-107406AI-securityAhsayCBSCISA-KEVChina-linked-threat-actorFlax-TyphoonGitHub-ActionsNetScalerProFTPDRussia-linked-threat-actorcredential-theftcritical-infrastructurecryptocurrency-theftcryptominingdata-exfiltrationexploit-kitiOSinfostealermalicious-browser-extensionsmobile-malwarenpmphishingransomwareremote-access-trojansoftware-supply-chain

What happened

The feed highlights active cyber threats and vulnerabilities, including a P7 DarkSword iOS exploit kit with keychain and cryptocurrency-wallet theft, credential-stealing GitHub Actions workflows, actively exploited AhsayCBS and other vulnerabilities, China- and Russia-linked campaigns, malicious browser extensions and npm packages, phishing kits, and critical infrastructure intrusions. Several stories involve working exploits or confirmed exploitation, creating significant risk for exposed systems, developers, financial organizations, government entities, and cryptocurrency users.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
ee491cdcb8489758e9648e7a208c0d7ec55841550046aa007b70f5c279a5f2bc
Enrichment time
2026-10-11T19:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.