Weekly roundup: Helpdesk 0-day, forged certificates, ShinyHunters arrest, and malware that can fool AI
Start here
The Hacker News weekly review summarizes multiple security incidents: an arbitrary file access vulnerability in Atlassian Data Center products, CVE-2026-21589 (CVSS 9.3), has been exploited in the wild, with attack activity appearing two hours after watchTowr published technical details; a new variant of the DarkSword iOS exploit toolkit, P7 DarkSword, can steal keychain and cryptocurrency wallet data on the device and supports two-way C2 communication; the FBI announced the arrest of a third ShinyHunters member and dismantled infrastructure used by China-linked Flax Typhoon.
Generated by AI from reports · Updated 9 hr ago
Progress timeline
- The Hacker NewsWeekly Review: Helpdesk 0-Day, Forged Certificates, ShinyHunters Member Arrest, and Malware That Deceives AI
An arbitrary file access vulnerability in Atlassian Data Center products, CVE-2026-21589 (CVSS 9.3), has been exploited in the wild, with attack activity appearing two hours after watchTowr published technical details. A new variant of the DarkSword iOS exploit toolkit, P7 DarkSword, can steal keychain and cryptocurrency wallet data on the device and supports two-way C2 communication. The FBI announced the arrest of a third ShinyHunters member and dismantled the Microscan and FishHub tools used by China-linked Flax Typhoon.
Related discussion
Attention trend
New sources per day
- Oct 12New1 sources (1 outlets,0 accounts)
- Oct 13New0 sources (0 outlets,0 accounts)