sec retweeted
Fresh @Mandiant and GTIG blog detailing zero day exploitation of CVE-2026-102764 in BeyondTrust Remote Support by 🇨🇳 nexus espionage actor ARMORY CASTLE (fka UNC5221).
cloud.google.com/blog/topics…
2
45
131
10,273
sec retweeted
‼️ ALERT - Exchange admins should review this now.
CVE-2026-96940 can allow an authenticated attacker to access other users’ mailboxes and read emails and attachments within the same organization.
Microsoft has issued out-of-band fixes.
Read: thehackernews.com/2026/10/mi…
17
78
250
67,748
sec retweeted
🚨 Cling hides C2 commands in STUN traffic as threat actors were observed attempting to exploit Realtek Jungle SDK flaw CVE-2021-35394. A subset of that activity delivered the botnet.
Read how Cling uses STUN for command-and-control, persistence, propagation, proxying, tunneling, and DoS: thehackernews.com/2026/10/re…
7
24
87
37,686
