Cybersecurity briefing, 2026-10-09

FortiMail exploitation leads the briefing, with attackers actively using a critical path-traversal flaw against exposed mail gateways.

• Fortinet FortiMail path traversal is actively exploited
• PoeLLM turns exposed AI servers into scouts
• Tensorlake npm worm steals cloud secrets
• UAC-0099 keeps MATCHBOIL alive in Ukraine
• Midnight Mimosa shipped inside cheap Android phones
• Registry Hijack Minted Valid Google Certificates
• FortiBleed shifts into firewall lockout
• ASOS breach turned customer alerts into pressure
• Tenable patch closes a path to domain controller SYSTEM
• Atlassian File-Read Flaw Draws Live Probing
• Citrix NetScaler flaw keeps the front door exposed
• U.S. seizes Flax Typhoon’s control domains
• 16 Firefox Extensions Impersonate Wallets to Steal Seeds
• AWS AgentCore Harness exposes credentials through agent tools
• MonsterCloud case turns into criminal fraud charges
• JPCERT ties Japanese leaks to Metabase SQL injection
• U.S. puts a $10 million bounty on Zhang Yu
• Forescout Finds PQC Bottleneck in Medical Hardware
• Integrity Technology Group framed as China’s cyber-services hub

Recent editions

• Thursday, October 8, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories
• Wednesday, October 7, 2026: PoeLLM turns exposed AI servers into scouts · 20 stories
• Tuesday, October 6, 2026: ClingSTUN Switched From Discovery to Active Exploitation · 19 stories
• Monday, October 5, 2026: Rejetto HFS Cookie Forgery Opens Remote Code Execution · 19 stories
• Sunday, October 4, 2026: Acronis Reframes RMM Security Around Recovery · 3 stories
• Saturday, October 3, 2026: Acronis Reframes RMM Security Around Recovery · 13 stories
• Friday, October 2, 2026: Acronis Reframes RMM Security Around Recovery · 19 stories