Weekly Review: Helpdesk 0-Day, Forged Certificates, ShinyHunters Member Arrest, and Malware That Deceives AI
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
AI summary
An arbitrary file access vulnerability in Atlassian Data Center products, CVE-2026-21589 (CVSS 9.3), has been exploited in the wild, with attack activity appearing two hours after watchTowr published technical details. A new variant of the DarkSword iOS exploit toolkit, P7 DarkSword, can steal keychain and cryptocurrency wallet data on the device and supports two-way C2 communication. The FBI announced the arrest of a third ShinyHunters member and dismantled the Microscan and FishHub tools used by China-linked Flax Typhoon.