NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day actively exploited. Denmark's 8.8M-person population register breached. ShinyHunters leader arrested.
Posts tagged: Chinese-Apt
Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited
CVE-2026-76504 Cisco SD-WAN Manager pre-auth RCE actively exploited. Pentagon confirms 3M-record DMDC breach. UAT-11587 Antino backdoor hits Asian govs.
NetScaler Zero-Day CVE-2026-88772 - Web Shells Live
CVE-2026-88772 NetScaler zero-day deploys WHIPSHOT web shells. China-nexus UAT-11587 uses M365 C2. Star Blizzard hits 100+ orgs with RedFlick phishing.
First Autonomous AI C2 Implant - CLOSEDQUORUM
Talos reveals CLOSEDQUORUM, the first AI-driven C2 implant making autonomous decisions. CVE-2026-7273 ZyXEL exploit hits 1,000 switches.
Cisco Email Gateway Zero-Day CVE-2026-76461 - Root RCE
CVE-2026-76461 Cisco email gateway root RCE exploited now. ScreenConnect added to KEV. China APT chains Chrome and Windows zero-days for NGO targeting.
Cisco Email Gateway Root RCE - CVE-2026-76461
CVE-2026-76461 gives root RCE on Cisco Secure Email Gateway. CVE-2026-85706 GitLab CVSS 10 hits CISA KEV. Revolut EDR abuse exposed.
Cisco FMC CVSS 10 Exploit Live - CVE-2026-20079
CVE-2026-20079 Cisco FMC pre-auth RCE actively exploited with Sept 12 CISA deadline. WatchGuard Firebox in ransomware chains.
Fire Ant Hijacks Cisco IOS XR Routers - CVE-2026-0768
Fire Ant APT targets Cisco IOS XR routers and TACACS+ servers. CVE-2026-0768 Langflow RCE and CVE-2026-82329 Artifactory bypass exploited in the wild.
Rails RCE KindaRails2Shell Exploited - Fire Ant Hits IOS XR
KindaRails2Shell Rails RCE actively exploited via file read chain. Fire Ant targets Cisco IOS XR and TACACS. Claude sessions hijacked by infostealers.
FBI Dismantles QTFY - Chinese Spy Proxy Hit the Fed
FBI takes down QTFY Chinese state proxy that breached Federal Reserve and DOJ. CVE-2026-8452 NetScaler exploited in the wild.