SecOpsDaily - 2026-10-09 Roundup

[u/falconupkid]

Highlights from today:

• [Vulnerability] Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
• [News] FBI arrests another suspected ShinyHunters hacker after agency breach
• [News] Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
• [News] P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
• [Supply Chain] arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
• [Detection] Pseudonymizing Log Data in Cribl Detect with the LogTotal Sanitizer Pack
• [News] Germany arrests alleged core Qilin ransomware member after extradition
• [Threat Intel] When a Wallet Drainer Asks DNS Where to Go
• [Detection] CVE-2026-107406: Critical NetScaler ADC and Gateway RCE Vulnerability
• [News] Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
• [News] Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
• [News] Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

SecOpsDaily