🚨 ACTIVE EXPLOITATION
- Hijacked Hotel Wi-Fi Delivers CornFlake RAT via Fake Browser Updates
Hijacked hotel Wi-Fi networks deliver CornFlake RAT through fake browser updates.- Targets hotel Wi-Fi users across multiple countries via captive portal gateways
- Attackers hijack DNS and redirect automatic connectivity checks to fake update pages
- CornFlake RAT captures webcam, microphone, keystrokes, screenshots, and steals credentials
- Payload delivered after user interaction; includes persistence and watchdog mechanisms
- Operation tracked as CaptiveCrunch, attributed to Storm-2945, linked to Russian SVR
📎 Coverage: thehackernews.com · 👁 via The Hacker News
🕵️ RESEARCH & DEEP DIVES
- Adobe Campaign Classic RCE Flaw CVE-2026-48449 Scores CVSS 10.0, No User Interaction Needed
CVE-2026-48449
Adobe patched a critical CVE-2026-48449 vulnerability in Campaign Classic allowing code execution without user interaction.- Applies to Adobe Campaign Classic (ACC) enterprise marketing automation platform
- Vulnerability CVE-2026-48449 allows arbitrary code execution without user interaction due to incorrect authorization
- Also fixes CVE-2026-48448, a high-severity SQL injection flaw enabling arbitrary file reads
- Affected versions fixed in ACC v7: 7.4.3 build 9398 for Windows and Linux
- No known exploitation of these flaws in the wild as of the advisory
📎 Coverage: thehackernews.com · 👁 via The Hacker News
🔓 CVEs & KEV
- Other: 20 CVEs (worst 8.8)