🚨 ACTIVE EXPLOITATION
Attackers Exploit Critical MLflow SSRF Flaw to Steal Cloud Credentials
Attackers are exploiting a critical unauthenticated SSRF flaw in MLflow in the wild.- Internet-exposed MLflow Tracking Servers, especially cloud-hosted deployments, are affected.
- MLflow versions before 3.15.0 are vulnerable to CVE-2026-64849.
- The unauthenticated /api/2.0/mlflow/webhooks/{id}/test endpoint proxies requests and returns upstream responses.
- Attackers bypass URL validation through HTTP redirects or DNS rebinding to reach 169.254.169.254 and internal services.
- Observed targets include cloud metadata endpoints containing credentials, tokens, and secrets.
Critical Zimbra RCE Vulnerability Is Being Actively Exploited
Attackers are actively exploiting a critical remote-code-execution flaw in Zimbra Collaboration Suite.- Zimbra Collaboration Suite deployments running versions before 10.1.20 are affected.
- CVE-2026-73570 enables unauthenticated attackers to execute operating-system commands as the zimbra user.
- The flaw involves improper sanitization in SNMP notification processing when the zimbra-snmp package and SNMP notifications are enabled.
- Attackers exploit the issue by sending specially crafted SMTP requests to trigger command injection.
🕵️ RESEARCH & DEEP DIVES
NASA AIT-GUI Flaws Allowed Unauthenticated Spacecraft Commands
NASA's AIT-GUI flaws allowed unauthenticated attackers to issue spacecraft commands.- NASA/JPL deployments using the AMMOS Instrument Toolkit's AIT-GUI console were affected.
- AIT-GUI versions through 2.5.1 exposed spacecraft and instrument command functions; version 2.5.2 fixed the issue.
- Unauthenticated /cmd requests could relay arbitrary commands, while /script/run and /seq could execute scripts and command sequences.
- The server listened on 0.0.0.0, and missing CSRF protection allowed malicious websites visited by operators to submit cross-origin requests.
- The flaw was tracked as GHSA-p9r8-2q67-fp86 and rated CVSS 9.4.
Sources 📎 Coverage: infosecurity-magazine.com · 👁 via The Hacker NewsToxicPanda 2.0 Expands Android Banking Fraud With On-Device Attacks
Zimperium has documented expanded Android banking fraud involving ToxicPanda 2.0 and GoldDigger.- Android users of banking, financial, e-wallet, and cryptocurrency apps across 16 countries are affected.
- ToxicPanda 2.0 targets 349 financial applications and harvests PINs from more than 140 banking and cryptocurrency apps.
- The trojan uses Accessibility Services, overlays, and 167 remote commands to steal credentials and automate fraud.
- A dropper uses a fake WebView VPN prompt to block Google Play traffic before decrypting and installing the payload.
- Attackers deliver samples from AWS-hosted buckets and abuse Android Wireless Debugging with automated clicks for shell access.
CyberPanel Pre-Auth RCE Chain Enables Shell Access on Hosting Servers
Researchers disclosed a CyberPanel vulnerability chain enabling unauthenticated server-shell access.- CyberPanel web hosting control panels running versions earlier than 2.4.4 are affected.
- AI Scanner flaws CVE-2026-41473 and CVE-2026-41472 enable unauthenticated database writes and stored XSS.
- Attackers enumerate scan IDs through exposed debug APIs and submit forged scan results through callback endpoints.
- When an administrator views results, the XSS creates a privileged account that can abuse cron jobs to execute OS commands.
Manic Android malware relays stolen data through nearby infected devices
Manic Android malware steals data and relays it through nearby infected devices.- Manic targets Android users across Europe, with a primary focus on Ukraine.
- It targets at least 169 banking, government/eID, payment, crypto wallet, messaging, and authenticator apps.
- The malware uses transparent overlays and Android Accessibility to capture taps and credentials.
- It steals PINs, passwords, SMS codes, notifications, files, locations, and screen data.
- When C2 is unreachable, encrypted data moves over Wi-Fi Direct or Bluetooth through infected devices for up to four relay hops.
Sources 📎 Coverage: bleepingcomputer.com · 👁 via BleepingComputerAttackers Abuse Trusted Communication Channels for Identity Phishing
Attackers are using trusted business communication channels to steal identities and credentials.- Enterprise users of collaboration and workplace communication tools are targeted.
- Attackers impersonate colleagues and executives to steal credentials and access business data.
- Campaigns use email, voice calls, SMS and video meetings, including AI-cloned voices and faces.
- Kaspersky recorded 4,781,846 workplace-tool attack attempts from July 2025 through June 2026, including 2,658,283 abusing Zoom and 1,546,122 abusing Outlook.
- Device-code phishing abuses Microsoft's legitimate authorization flow to obtain tokens for email, OneDrive and Teams access.
ClearFake Uses WordlistLoader to Deliver Amatera Stealer to Windows Users
ClearFake is using WordlistLoader to deliver Amatera Stealer.- Windows users visiting compromised legitimate websites are targeted.
- Amatera Stealer, also known as ACR Stealer, steals sensitive data; version 4.3.3-alpha1 was observed.
- Fake CAPTCHA prompts use ClickFix social engineering to make victims paste commands into Windows Run.
- Commands use hidden conhost and cmd processes, remote WebDAV shares, and rundll32 to launch a DLL export.
- WordlistLoader rebuilds shellcode from a build-specific 256-word list, evades analysis by unhooking modules and bypassing ETW, and reflectively loads Amatera; observed domains include skybap[.]shop and aptisweb[.]com.
🔓 CVEs & KEV
CVE-2026-58083 — CVSS 8.4 — Use-after-free in kqueue copy-on-forkWhile the kernel was copying knotes duri...
CVE-2026-58087 — CVSS 7.8 — Heap out-of-bounds access in semctl(2)The GETALL and SETALL commands in semct...
CVE-2026-18917 — CVSS 7.8 — Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buf...
CVE-2026-58088 — CVSS 7.4 — Race condition in ELF core dump segment countingThe ELF core dump code counte...
🕵️ RESEARCH & DEEP DIVES
- ai-themed-malware-lures — Cyber Security News