ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Qilin and Settra are exploiting PAN-OS GlobalProtect flaw CVE-2026-0257, alongside new RATs and a DNS wallet drainer.
The Hacker News ThreatsDay roundup says ransomware groups Qilin and Settra are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Infoblox describes the Noir cryptocurrency drainer, which uses DNS TXT queries over public DNS-over-HTTPS to find a Cloudflare Pages pool and steal funds after wallet permissions are granted. Separate reports cover CikaBika Bot, KGB RAT, and BotHelper RAT, a multi-stage .NET tool with live screen surveillance. Google also announced broader Android scam detection, including Gemini Nano link checks.
86