P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
2026-10-11T13:24:01Z•f43f3b6b9c0851c0316ccbe79e4c7fe46732c19a44d1b35fcf78b069f26a9a54
CVE-2015-3306CVE-2026-105133CVE-2026-107406AI securityAPTAhsayCBSAnyDeskCISA KEVChina-linked threat actorCitrix NetScalerFlax TyphoonGitHub ActionsTorUAC-0099credential theftcritical infrastructurecryptocurrency theftdata exfiltrationiOS exploit kitmalwarenpmphishingransomwareremote code executionsupply chain compromisevulnerability exploitation
What happened
The feed contains multiple significant cybersecurity developments, including active exploitation of vulnerabilities, credential theft and supply-chain compromises, targeted espionage campaigns, phishing and malware distribution, and critical infrastructure threats. The most severe items involve working pre-authentication root-level RCE in AnyDesk Linux, exploitation of AhsayCBS flaws, CISA KEV-listed vulnerabilities abused by Flax Typhoon, critical Citrix NetScaler RCE/DoS exposure, and widespread GitHub Actions and npm compromises. Several reports also describe crypto-wallet theft, ransomware
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- f43f3b6b9c0851c0316ccbe79e4c7fe46732c19a44d1b35fcf78b069f26a9a54
- Enrichment time
- 2026-10-11T13:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.