May 06, 2026 · #48

Episode 48 — 06 May 2026 1. Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution Source: The Hacker News Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked as CVE-2026-0300, has been described as a case of unauthenticated remote code execution. It... 2. Student hacked Taiwan high-speed rail to trigger emergency brakes Source: Bleeping Computer A 23-year-old university student in Taiwan was arrested for interfering with the TETRA communication system used by the country's high-speed railway network (THSR). According to local media reports , the student halted four trains for 48 minutes on April 5 by using... 3. CloudZ malware abuses Microsoft Phone Link to steal SMS and OTPs Source: Bleeping Computer A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that hijacks the Microsoft Phone Link connection to steal sensitive codes from mobile devices. The malware was discovered in an intrusion that was active since... 4. Researchers report Amazon SES abused in phishing to evade detection Source: Bleeping Computer Cybersecurity firm Kaspersky reports that the Amazon Simple Email Service (SES) is being increasingly abused to send convincing phishing emails that can bypass standard security filters and render reputation-based blocks ineffective. Although the resource has been leveraged... 5. New stealthy Quasar Linux malware targets software developers Source: Bleeping Computer A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and credential-stealing capabilities. The malware kit is deployed in development and DevOps environments in npm, PyPI, GitHub, AWS, Docker, and... 6. China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions Source: The Hacker News A sophisticated China-nexus advanced persistent threat (APT) group has been attributed to attacks targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025. The activity is being tracked by Cisco Talos under... 7. Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries Source: The Hacker News Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of conduct-themed lures and legitimate email services to direct users to attacker-controlled domains and steal authentication tokens. The multi-stage campaign,... 8. Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia Source: The Hacker News The China-based cybercrime group known as Silver Fox (aka Monarch, SwimSnake, The Great Thief of Valley, UTG-Q-1000, and Void Arachne) has been linked to a new campaign targeting organizations in Russia and India with a new malware called ABCDoor. The activity involved using...