Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
2026-10-07T07:23:59Z•fcffafb1ce1a7a1dae54874c09c848db254ce0a0a1942cb2bc9a1c8cea6f8693
CVE-2026-21589CVE-2026-61500CVE-2026-63688CVE-2026-88779CVE-2026-96940AI securityC2China-nexus espionageLinuxMFA theftWindowsactive exploitationbackdoorbotnetcloud securitycredential theftdata breachenterprise softwarephishingprivilege escalationransomwareremote code executionsupply chainvulnerability disclosurezero-day
What happened
The feed reports multiple significant cybersecurity developments, including active exploitation of critical vulnerabilities in Atlassian Data Center, Rejetto HFS, Citrix NetScaler, Realtek Jungle SDK, Microsoft SharePoint, and other enterprise products. It also covers credential-phishing platforms impersonating AI services, China-linked espionage campaigns, Linux backdoors, ClickFix payload delivery, ransomware deployment, and vulnerabilities affecting Exchange, GitLab AI Gateway, LibreOffice/OpenOffice, and Dell Container Storage Modules. Several incidents involve unauthenticated access, code
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- fcffafb1ce1a7a1dae54874c09c848db254ce0a0a1942cb2bc9a1c8cea6f8693
- Enrichment time
- 2026-10-07T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.