Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
#Twitch
https://socket.dev/blog/malicious-twitch-browser-extension
Remote
The Threat Codex
@threatcodex@infosec.exchange
mastodon 4.8.0-alpha.3+glitchThe Threat Codex is a website that tracks news articles on threat actors, malware families, vulnerabilities, and online services.
132 Followers
0 Following
50 Posts
Joined September 28, 2023
Website:
IDScan confirms breach tied to 153 million stolen driver’s licenses
#IDScan.net
https://www.bleepingcomputer.com/news/security/idscan-confirms-breach-tied-to-153-million-stolen-drivers-licenses/
Tracking BigBear 2.0 Evilginx2 Phishing Campaign
#BigBear2.0
https://www.cloudsek.com/blog/tracking-bigbear-2-0-evilginx2-phishing-campaign
ShinyHunters claims breach of Florida DMV, threatens data leak
#ShinyHunters
https://cyberinsider.com/shinyhunters-claims-breach-of-florida-dmv-threatens-data-leak/
CJP protests: India tells GitHub to block Bitchat app, Jack Dorsey leaks notice
#Bitchat #GitHub
https://www.indiatoday.in/technology/news/story/cjp-protests-india-tells-github-to-block-bitchat-app-jack-dorsey-leaks-notice-2955199-2026-07-24
CVE-2026-59873: Decompression DoS Via Unlimited Input In node-tar, 90M Weekly Downloads Affected
#CVE_2026_59873
https://www.ox.security/blog/cve-2026-59873-decompression-dos-via-unlimited-input-in-node-tar-90m-weekly-downloads-affected/
Update Chrome now to protect against an actively exploited vulnerability
#CVE_2026_87491
https://www.malwarebytes.com/blog/bugs/2026/09/update-chrome-now-to-protect-against-an-actively-exploited-vulnerability
Hugging Face discloses breach linked to autonomous AI agent
#HuggingFace
https://www.bleepingcomputer.com/news/security/hugging-face-breach-autonomous-ai-agent-system-internal-datasets-credentials/
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
#CVE_2026_20079 #CVE_2026_20316 #UAT_12197 #UAT_11823 #CyclopsBlink #UAT_11988
https://blog.talosintelligence.com/fmc-ongoing-exploitation/
Zoom warns of critical account takeover vulnerability
#Zoom #CVE_2026_53412
https://www.bleepingcomputer.com/news/security/zoom-warns-of-critical-account-takeover-vulnerability/
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
#SharkVacuumCleaners
https://www.malwarebytes.com/blog/news/2026/07/shark-vacuum-flaw-exposes-cameras-home-maps-and-wi-fi-passwords
CVE-2025-25249 Exploitation Delivers PivotC2, a FortiGate Post-Exploitation RAT
#CVE_2025_25249 #PivotC2
https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/
Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
#CVE_2026_85046 #UTA0560 #JungleBamboo #GRIMWEDGELoader #LONGTALE
https://www.volexity.com/blog/2026/09/09/mind-the-patch-gap-multiple-chinese-threat-actors-chain-0-day-exploits-in-chrome-windows/
CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls
#CVE_2026_0310
https://socprime.com/blog/cve-2026-0310-analysis/
Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
#Cl0p #CVE_2026_12569
https://ransom-isac.org/blog/clop-windchill-flexplm-exploitation/
Dolphin X Stealer Targets 300+ Apps and Profiles Users with AI
#Kontraktnik #DolphinXStealer
https://www.varonis.com/blog/dolphin-x-stealer
A Shell Is Worth a Thousand Images: Bing Images RCEs
#CVE_2026_32194 #CVE_2026_32191 #CVE_2026_21536
https://xbow.com/blog/bing-images-rce-vulnerabilities
Alleged Russian cyber spy in Boston case previously worked for Kaspersky, source says and documents show
#Kaspersky #VoidBlizzard
https://www.reuters.com/world/alleged-russian-cyber-spy-boston-case-previously-worked-kaspersky-source-says-2026-07-15/
Europol-led action against nihilistic violent extremist network "The Com"
#TheCom
https://www.europol.europa.eu/media-press/newsroom/news/europol-led-action-against-nihilistic-violent-extremist-network-com
Check and Protect: Analysis of Telegram Phishing Operation Targeting Exiled Activist
#Telegram #NGO
https://resident.ngo/lab/writeups/check-and-protect-analysis-of-telegram-phishing-operation-targeting-exiled-activist/
Gray Rabbits and the Tale of a One-Click Backdoor
#CVE_2026_51990 #UNC3569 #GRAYRABBIT
https://www.gendigital.com/blog/insights/research/one-click-backdoor-sogou
Not Every Fox is Silver: Inside an AtlasRAT loader chain
#AtlasRAT
https://asec.ahnlab.com/en/94704/
Hackers abuse Notepad++ plugins to stealthily install malware
#APT44 #Notepad++ #CVE_2025_56383
https://www.bleepingcomputer.com/news/security/hackers-abuse-notepad-plus-plus-plugins-to-stealthily-install-malware/
More than 100,000 fake stores are out to steal your card details
#DoppelCart
https://www.malwarebytes.com/blog/scams/2026/09/more-than-100000-fake-stores-are-out-to-steal-your-card-details
Healthcare giant Abbott probes two cyber incidents amid extortion claims
#ShinyHunters
https://www.malwarebytes.com/blog/data-breaches/2026/07/healthcare-giant-abbott-probes-two-cyber-incidents-amid-extortion-claims
Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit
#TA488 #CVE_2026_42897 #OWAReaper
https://www.proofpoint.com/us/blog/threat-insight/cleaning-out-inboxes-ta488-comes-outlook-another-half-click-exploit
Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
#ServiceNow #CVE_2026_6875
https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html
FrigidStealer Explained: macOS Infostealer and Gatekeeper Bypass
#FrigidStealer #TA2727
https://www.picussecurity.com/resource/blog/frigidstealer-explained-macos-infostealer-and-gatekeeper-bypass
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
#CVE_2026_75650
https://thehackernews.com/2026/09/adobe-patches-magento-zero-day.html
CVE-2026-86218: Active Exploitation of N-able N-central: Critical Pre-Auth Remote Code Execution (RCE) Vulnerability
#N_central #CVE_2026_86218
https://arcticwolf.com/resources/blog/cve-2026-86218/
TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development
#TuxBotV3Evolution
https://unit42.paloaltonetworks.com/tuxbot-v3-evolution-iot-botnet/
ExfilSquad hackers leak info of over 100,000 UK police officers, staff
#ExfilSquad
https://www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/
ClaudeBleed Reopened: Browser Extensions Can Still Push Claude for Chrome to Read Your Gmail - Manifold Security
#Claude
https://www.manifold.security/blog/claude-for-chrome-extension-bypass
CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers
#CVE_2026_42533
https://securityaffairs.com/195674/hacking/cve-2026-42533-critical-nginx-bug-could-turn-http-requests-into-server-takeovers.html
CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
#CVE_2026_75650 #AdobeCommerce
https://www.akamai.com/blog/security-research/2026/sep/cve-2026-75650-stylesmuggler-adobe-commerce-magento
US charges alleged operators of Russian bulletproof hosting service
#AS206728MediaLandLLC
https://www.bleepingcomputer.com/news/security/us-charges-alleged-russian-bulletproof-hosting-service-operators/
Russia accuses Telegram founder of aiding terrorism, seeks international arrest
#Telegram
https://therecord.media/russia-telegram-durov-arrest
Co-Founder of Controversial Spyware Firm Had Israeli Diplomatic Passport
#NSOGroup #Pegasus
https://www.occrp.org/en/project/the-pegasus-project/co-founder-of-controversial-spyware-firm-had-israeli-diplomatic-passport
TAG-195 Upgrades MaaS Ecosystem with Modular Tools
#TAG_195 #TinyEgg #ChonkyChicken
https://www.recordedfuture.com/research/tag-195-evolves-maas-ecosystem
CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks
#CVE_2026_67276
https://socprime.com/blog/cve-2026-67276-mikrotik-routeros-ssh-zero-day/
Inside ‘Project Lily’: The Humans Reading Your ChatGPT Chats
#ChatGPT
https://www.404media.co/inside-project-lily-the-humans-reading-your-chatgpt-chats/
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
#CVE_2026_85706
https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild/
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
#7_Zip #CVE_2026_14266
https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign
#Packagist #GitHub #cPanel #CVE_2026_41940
https://socket.dev/blog/github-actions-abuse-powers-cpanel-and-whm-exploitation
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
#CVE_2026_16232
https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/
Popular travel app used by 23M lets anyone spy on users, including soldiers
#Polarsteps
https://cybernews.com/security/polarsteps-travel-app-exposes-users-soldiers/
Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days
#BlueMoon #TA412 #CVE_2026_85046 #CVE_2026_85880 #GemStone #UNK_LateNight #UNK_DoubleCheck #UNK_QuietRacket
https://www.proofpoint.com/us/blog/threat-insight/once-bluemoon-multiple-state-aligned-threat-actors-rapidly-adopt-novel-exploit
An alignment assessment of recent cybersecurity incidents
#Claude
https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
#NightDragon #FlyingEagleFramework
https://hunt.io/blog/flying-eagle-android-rat-170-servers-night-dragon
Detecting and countering misuse of AI: September 2026
#GTG_20006 #PowerChrome #WUEngine #ShadowC2 #MiniPlasma #GiftDrop #GTG_50014 #GTG_10007 #GTG_50021
https://www.anthropic.com/threat-intelligence-report-september-2026