FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
2026-10-08T19:23:59Z•ff27e6ed621a7f10b23ee72dc8a72b33a03b4d9a1eb48b6eb4c8fb9f2894e3ea
CVE-2026-21589AI-securityAtlassianChina-linkedFortinetLLM-infrastructureRATRussia-linkedSonicWallactive-exploitationbrowser-extensionscredential-theftcritical-vulnerabilitiescryptominingcyber-espionagedata-exfiltrationinfostealernpmphishingransomwaresupply-chainthreat-intelligencezero-day
What happened
The feed reports a broad set of October 2026 cybersecurity developments, including Chinese- and Russia-linked espionage, phishing and credential theft, malicious browser extensions and npm packages, ransomware fraud, exposed AI infrastructure, active exploitation of critical vulnerabilities, and malware campaigns targeting servers and organizations worldwide. Key urgent items include a CVSS 10.0 SonicWall SMA1000 pre-authentication SSRF, an unpatched unauthenticated remote-code-execution flaw in LMCache, active exploitation of Atlassian Data Center flaw CVE-2026-21589, ongoing Fortinet device-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- ff27e6ed621a7f10b23ee72dc8a72b33a03b4d9a1eb48b6eb4c8fb9f2894e3ea
- Enrichment time
- 2026-10-08T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.