ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20230 | SSRF in Cisco Unified Communications Manager Enables Root Escalation | 8.6 | 88% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | flare.io | plugin, or a supply chain compromise. Trusted tools abused Flare.io has disclosed details of FalkonC2, a commercial hacking too |
| domain | omtrdc.net | he captured information is delivered to the domain "lnkd.tt.omtrdc[.]net/rest/v1/delivery," after which they are redirected to the |
| domain | ztds.info | zTDS, in use since at least 2015, is publicly available at ztds[.]info. "Using zTDS, DriveSurge hijacks thousands of legitimate, |
From the original article
13 min read at thehackernews.com
The internet still feels held together with tape. Bad plugins, old bugs, fake tools, trusted apps doing shady things. Same mess, new wrapper.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.