OSINT / CyberSec report 07.10.2026 00:13

1. Critical Atlassian flaw CVE-2026-21589 rated 9.3 allows unauthenticated file reads across eight Data Center products, disclosed October 5 (The Hacker News).

2. Microsoft released out-of-band updates for Exchange Server flaw CVE-2026-96940 rated 8.8, enabling authenticated privilege escalation and mailbox access (The Hacker News).

3. Rejetto HFS servers are actively scanned for critical RCE flaw CVE-2026-61500 allowing session forgery and account takeover (BleepingComputer).

4. Blinder Tunnel, an Iran-nexus campaign, targets Iraqi critical infrastructure using fake Dubai Airports recruitment lures and GitHub C2 malware (Unit 42).

5. Cling botnet exploits Realtek Jungle SDK flaw and uses STUN servers for command-and-control, with active exploit attempts observed (The Hacker News).

6. Denmark reports attackers accessed CPR data for 8.8 million people via a private company account, exposing names and personal IDs (The Hacker News).

7. FBI removed an Accenture contractor after a patch failure led to a ShinyHunters breach exposing employee data (The Hacker News).

8. Ukraine grocery chain ATB confirmed a cyberattack with hackers posting extortion demands and threatening data leaks (The Record).

9. University of Illinois Chicago College of Medicine suffered a ransomware attack with information stolen from servers (The Record).

10. New ClickFix attack variant smuggles payloads through browser cache disguised as PNG files to bypass Windows run limits (The Hacker News).

11. Chinese threat group TA419 impersonates US officials for AI cyber espionage targeting think tanks and universities (Dark Reading).

12. South Korea probes bank breaches amid suspected AI-powered attacks after emergency FSC meeting (BleepingComputer).

13. Nikkei disclosed breaches of employee Microsoft and Google email accounts, with one used for phishing (BleepingComputer).

14. Dell warned customers to patch critical System Update flaw allowing root privilege escalation (BleepingComputer).

15. BigDiskBuster technique blocks Microsoft Defender updates while service runs, creating silent detection gap (Dark Reading).

16. Google paused OSS product bug bounty rewards after surge in invalid automated reports, effective October 1 (The Hacker News).

17. Alleged ShinyHunters member detained in Jordan and assisting FBI with investigations (The Record).

18. US and Australia warn of latest Citrix vulnerability after NetScaler advisory (The Record).