AI-Assisted Rootkits Arrive — UAT-10147 SPECTRE Campaign
Talos exposes AI-generated Linux rootkit in SPECTRE campaign. NSA confirms AI in OT attacks. Critical Cisco Crosswork and Citrix NetScaler auth bypasses.
Posts tagged: Chinese-Apt
vCenter Zero-Day Drops Babuk Ransomware — CVE-2026-59310
CVE-2026-59310 vCenter RCE exploited by China-nexus APT for Babuk ransomware. Plus Clop claims GE and Philips, SAP Commerce Cloud hit in 3 days.
UniFi CVSS 10 Command Injection — CVE-2026-50746
CVE-2026-50746 UniFi OS CVSS 10 command injection, CVE-2026-50656 Defender RoguePlanet exploit, UAT-7810 LONGLEASH ORB malware, ColdFusion KEV deadline.
KVM VM Escape CVE-2026-53359 — 16 Years Hidden
CVE-2026-53359 KVM VM escape has public PoC after 16 years. Plus BeyondTrust CVSS 9.2 auth bypass and China-nexus ORB malware from Talos.
Cisco SD-WAN Zero-Day CVE-2026-20262 Exploited in Wild
CVE-2026-20262 hits Cisco SD-WAN Manager with active exploitation. FortiSandbox triple-CVE exploit chain and UNC6508 year-long espionage campaign via Googl.
Cisco SD-WAN Zero-Day CVE-2026-20245 — Exploited, No Patch
CVE-2026-20245 gives root on Cisco SD-WAN with no patch available. Plus IronWorm hits 36 npm packages and Five Eyes warns on Chinese recruiter ops.
Cisco Unified CM PoC Exploit — Critical Root Access Flaw
Cisco Unified CM critical flaw with public PoC exploit code. Plus CISA warns on fuel tank ATG attacks and Miasma npm supply chain compromise hits 32 packag.
PAN-OS DNS RCE CVE-2026-0264 — Cisco CVSS 10
CVE-2026-0264 PAN-OS DNS heap overflow RCE patched, Cisco Secure Workload CVSS 10 API auth bypass, GitHub confirms 3,800-repo VS Code extension breach.