Date: September 30, 2026 | Author: Threat Research & Intelligence Team, Digital Spying
Category: Software Supply Chain / Open-Source Malware / Developer Security / Messaging Security
Tags: PhantomSub, npm, Supply Chain Attack, WhatsApp, Baileys, JavaScript, Node.js, Session Hijackin...
Date: September 30, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Email Security / Remote Code Execution / Vulnerability Research / Enterprise Threat Intelligence
Tags: Zimbra Collaboration Suite, CVE-2026-73570, Remote Code Execution, Command Inj...
Date: September 30, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Critical Infrastructure / Industrial Cybersecurity / AI Threats / Transport Security
Tags: Adif, Renfe, Rail Cybersecurity, Industrial Control Systems, Critical Infrastructure, AI A...
Cisco Catalyst SD-WAN Manager Under Active Siege: Critical API Authentication Bypass (CVE-2026-76504) Grants Full Remote Admin Access
Published on DigitalSpying.com | September 30, 2026
Author: DigitalSpying Threat Research Team
Threat Classification: Critical Zero-Day (CVSS ...
Date: September 30, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Network Infrastructure / Edge Security / Zero-Day Exploits / API Security
Tags: Cisco, Catalyst SD-WAN, CVE-2026-76504, Zero-Day, Authentication Bypass, CISA KEV, CWE-177, REST API,...
Enterprise Perimeter Zero-Day Emergency: Citrix NetScaler ADC & Gateway Pre-Auth RCE Flaws Exploited Globally (CVE-2026-88771 & CVE-2026-88772)
Date: September 30, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Perimeter Security / Zero-Day Vulnera...
Dual Citrix NetScaler Zero-Days Under Active Nation-State Siege: Unauthenticated RCE, WHIPSHOT Web Shells, and SLAPSHOT Tunnelers (CVE-2026-88771 & CVE-2026-88772)
Published on DigitalSpying.com | September 30, 2026
Author: DigitalSpying Threat Research Team
Threat Classifica...
Date: September 29, 2026 | Author: Threat Research & Intelligence Team, Digital Spying
Category: Cryptocurrency Security / Supply Chain Attacks / Incident Response / Financial Crime
Tags: Bitget, Crypto Heist, Supply Chain Attack, Zero-Day, Multi-Party Computation, Hot Wallets, Fina...
Date: September 29, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Incident Response / AI-Driven Cyberattacks / Threat Intelligence / Blue Team Forensics
Tags: DIVD, AI Agents, Autonomous Intrusion, Post-Exploitation, LLM Forensics, Blue Team, Mach...
Date: September 29, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: AI Ecosystem Security / Protocol Vulnerabilities / Identity Security / OAuth 2.0
Tags: Model Context Protocol, MCP, Anthropic, Python SDK, CVE-2026-52869, OAuth 2.0, Account Takeove...
Date: September 29, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: AI Safety & Alignment / Frontier Model Security / Network Sandboxing / Covert Channels
Tags: OpenAI, GPT-6.1 Astra, Reinforcement Learning, Sandbox Escape, DNS Tunneling, Egress Fil...
Date: September 29, 2026
Author: Threat Research & Intelligence Team, Digital Spying
Category: Advanced Persistent Threats (APT) / Nation-State Espionage / Malware Analysis
Tags: Star Blizzard, FSB Centre 18, SEABORGIUM, COLDRIVER, RedFlick, CosmicPulse, NOROBOT, Phishing, Wi...