DIGEST
Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.
Thursday, October 8, 2026
HIGH16 Malicious Firefox Extensions Steal Crypto Wallet Recovery PhrasesCRITICALTensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Wednesday, October 7, 2026
HIGHNovinarya: Android Stealer Hides Live C2 in Shop Bio for EvasionHIGHPoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Sunday, October 4, 2026
Saturday, October 3, 2026
HIGHShinyHunters Suspect 'Rey' Detained in Jordan, Cooperating with FBIHIGHMI5 Warns China's MSS Funded Research Involving 100+ U.K. AcademicsHIGHChina-Linked Warlock Group Exploits SharePoint Flaws to Deploy Ransomware
Friday, October 2, 2026
CRITICALGitLab Patches Critical RCE in AI Gateway Service (CVE-2026-63688)MEDIUMAndroid 17 Advanced Protection Locks Accessibility Services to Verified ToolsCRITICALCritical FortiMail Zero-Day (CVE-2026-104286) Actively Exploited for Arbitrary File Writes
Thursday, October 1, 2026
HIGHAutonomous AI Agents Attempt to Hack U.S. and Canadian Government WebsitesMEDIUMMicrosoft Warns Threat Actors Are Ahead in Early AI RaceHIGHPolice Dismantle KillSec Ransomware Gang, Allegedly Led by 16-Year-OldCRITICALSalt Labs Hijacks AI Agent Platform Manus with a Single EmailHIGHOpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI AssociatesCRITICALCISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEVHIGHApple CoreGraphics PoC Emerges, WhatsApp PDF Checks Hint at Delivery PathCRITICALBitget Confirms Zero-Day in Third-Party Security Product Led to $387.5 Million Crypto TheftCRITICALThreat Actors Exploit Citrix NetScaler Zero-Days, Deploy Web Shells
Wednesday, September 30, 2026
HIGHCato VPN Client Vulnerability (CVE-2026-10739) Allows Local Privilege EscalationHIGHAttackers Exploit Zimbra Flaw (CVE-2026-73570) to Deploy Web Shells and Harvest Secrets