Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A Chinese-speaking threat actor has exploited a stack-based buffer overflow vulnerability (CVE-2026-7273) in Zyxel GS1900 switches, compromising 996 devices across 48 countries since August 17, 2026. The vulnerability allows unauthenticated attackers to execute OS commands via crafted HTTP requests....
On September 22, 2026, Cisco Talos released CAIRN, an open-source toolkit designed to hunt, classify, and track AI-integrated malware. The first documented malware analyzed with CAIRN is CLOSEDQUORUM, a Windows implant that autonomously delegates command-and-control decisions to commercial large lan...
A network of over 100 fraudulent websites has emerged, selling unverified AI subscriptions priced up to $2,000 annually. These sites utilize a $249 website toolkit and feature polished designs, including genuine Google sign-in screens, which mislead users into believing they are purchasing legitimat...
