CVE-2026-106763 is a high-severity vulnerability in @justice8096/sagemath-mcp-server version 1.0.1 that allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions. The vulnerability requires no privileges and has a high impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided.
A vulnerability in @rog0x/mcp-git-tools version 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function. This issue has a high severity rating with a CVSS score of 7.5. The vulnerability requires high attack complexity and no privileges but involves user interaction. No patch or remediation information is provided.
A vulnerability in @rog0x/mcp-docker-tools version 1.0.1 allows remote attackers to execute arbitrary code via the handleImageList function. This issue has a high severity with a CVSS score of 7.5. The vulnerability requires user interaction and has a high attack complexity. No affected versions beyond 1.0.1 are explicitly stated, and no patch or remediation information is provided.
e-SIC Livre (esiclivre) version 0.2.2 and earlier contains a vulnerability in the captcha generation script that allows remote attackers to cause denial of service by exhausting server resources. This occurs because user-supplied parameters are not validated before being used to generate CAPTCHA images, leading to excessive memory and CPU consumption.
A vulnerability in Nitro Software, Inc Nitro PDF Pro for macOS version 14.7 allows a local attacker to execute arbitrary code by using a specially crafted PDF file. This issue enables code execution on the affected system if exploited locally.
An OS command injection vulnerability exists in the /htdocs/web/diagnostic.php endpoint of the D-Link DAP1160L A1_FW101WWb04 device. This flaw allows attackers to execute arbitrary commands by injecting shell metacharacters. No patch or remediation information is provided, and no known exploits are reported in the wild.
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/controllers/contact.php of the component Contact Form. Executing a manipulation of the argument nama/email/alamat/telepon/pesan can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
In September 2026, an SEO poisoning campaign distributed Armorsteal malware via fake websites impersonating Chocolatey and Microsoft Activation Scripts tools. The malware is Python-based, protected by Pyarmor, and includes modules for remote access, surveillance, and information stealing. It captures keystrokes, clipboard data, cryptocurrency wallets, browser data, Discord tokens, passwords, and SSH keys. The campaign uses anti-analysis techniques such as cloud provider detection and code obfuscation, with frequent infrastructure changes observed. No patch or remediation is indicated, and no known exploits in the wild are reported.
This analysis covers advanced Android threats that operate beyond the standard application sandbox, leveraging new OS-level telemetry features. Android's Delegated Scope allows enterprises to grant security apps access to logs on managed devices without full MDM control. The Intrusion Logging feature extends forensic visibility to BYOD users with Advanced Protection on Android 16 or later. This capability enables collection and sharing of encrypted security, DNS, and connection logs for threat analysis. The analysis reveals the full RatHat attack chain, including Wireless Debugging self-pairing, ADB shell command execution, daemon staging, and command-and-control communications, providing actionable indicators of compromise.
This is a medium-severity phishing campaign observed in late 2026 targeting organizations during year-end and fiscal close periods. Attackers exploit increased legitimate administrative communications in finance, HR, and IT by impersonating compensation adjustments, Q4 financial documents, access reviews, invoice follow-ups, and benefits statements. The campaign uses themes from SharePoint, Docusign, and Microsoft 365 to deliver credential harvesting pages disguised as document-sharing portals. It affects multiple sectors including aviation, telecommunications, manufacturing, real estate, technology, and financial services, with a concentration in the Middle East. The phishing lures are generic and require minimal customization, making them effective during busy periods when employees expect increased document requests.
TRUST#GRAFT is a sophisticated malware attack targeting authenticated WordPress administrator browser sessions. It uses JavaScript loaders that mimic Cloudflare verification screens to fingerprint browsers, harvest credentials, and profile environments. Upon detecting an active WordPress admin session, it extracts CSRF tokens and uploads a malicious plugin disguised as 'Web Media Optimizer.' The PHP backdoor persists by copying itself to the must-use plugins directory, injects remote JavaScript into public pages, provides token-gated admin access, and hides from standard plugin management interfaces. This attack leverages existing trusted sessions without authentication bypass and involves coordinated infrastructure across multiple domains.
In October 2026, the autonomous AI penetration-testing agent ARTEX was used by the Storm-0940 actor, linked to Chinese state interests, to target IT and software vendors. The attacks focused on identity providers such as Okta, Entra, and Cognito. Techniques included mapping applications via JavaScript bundles and source maps, probing authentication mechanisms, manipulating OAuth callbacks, password spraying, abusing account recovery endpoints, and testing tenant isolation. Sessions lasted 24-30 hours with automatic IP rotation upon blocking. The agent exhibited automated step chaining, output-based adaptation, and relentless iteration. Attacks involved coordinated bursts with unique user agents and rapid attempts targeting software engineers across many users.
MythicRatatoskr is a Go-based backdoor leveraging the Yggdrasil mesh network for encrypted, decentralized command and control communications. It was deployed in a coordinated attack involving UAC-0099 and Sandworm targeting a Ukrainian grain logistics company in mid-2025. The backdoor provides typical malicious capabilities such as command execution, file transfer, screenshot capture, and SOCKS5 proxying. The attack sequence included initial access via spearphishing, backdoor deployment, and a subsequent destructive data-wiping phase using SDelete via Active Directory Group Policy. This incident marks the first known use of Yggdrasil by state-aligned threat actors for C2 communications.
StealC malware has resurfaced as Stadia, a remote access trojan (RAT) that incorporates StealC's original code. Stadia extends capabilities beyond simple data theft to include hidden desktop control, live command shell, file management, process management, and in-memory loading. It communicates via plain HTTP to hardcoded IPs using RC4 encryption with Base64 encoding and persists through hidden scheduled tasks in randomized directories mimicking legitimate updaters. The operator targets former StealC customers with subscription offers. No official patches or fixes are available, and no known exploits in the wild have been reported.
Red Hat has issued a critical security update for the grafana-pcp plugin used in Red Hat Enterprise Linux 9.8 Extended Update Support. The update addresses three vulnerabilities: a denial of service via multiple ECH outer extension references (CVE-2026-97031), a denial of service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669), and man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943). These issues affect components of the golang crypto/tls, net/http, and crypto/x509 packages used by the plugin.
Between July and September 2026, a sophisticated campaign targeted Microsoft 365 accounts using adversary-in-the-middle attacks and token replay techniques. Attackers captured sign-in sessions via AiTM relays and replayed stolen tokens from IP addresses linked to a German hosting provider. The campaign compromised 79 organizations with 497 successful sign-ins amid over 200,000 failed attempts. Malicious actors registered rogue Entra devices, replaced victim MFA methods, and created hidden inbox rules to conceal their activities. The operation evolved through four phases, rotating IP addresses and employing scripted token and browser session replay techniques. Compromised accounts were used for business email compromise, including sending payroll-related emails to external contacts.
SiriusQT is a Windows Remote Access Trojan (RAT) distributed as Malware-as-a-Service since April 2026. It offers advanced capabilities including hidden VNC, credential theft, cryptocurrency wallet collection, clipboard monitoring, keylogging, process injection, and persistence. The malware uses custom encrypted command-and-control communication and has both native C++ and .NET loader variants. It is distributed primarily by a reseller named GhostKernel and targets victims in several European countries including the UK, Germany, France, Spain, Italy, and the Netherlands.
A critical security update has been released for Red Hat OpenShift Developer Tools - Openshift Jenkins 4.17. This update addresses multiple vulnerabilities identified by several CVEs, including CVE-2024-38827 and numerous others. Users of Openshift Jenkins 4.17 are recommended to upgrade to the latest version to mitigate these security issues. No detailed technical information or specific vulnerability descriptions are provided in the advisory.
