Joel Traber AG

China spy chief points at US AI models in cyber threat warning

China's spy chief warns of US AI models as accelerators for cyberattacks and vulnerability discovery, raising the threat from state actors.

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

The report confirms that the critical VMware vCenter vulnerability is already actively exploited by ransomware gangs, which goes beyond a mere patch warning.

CVE-2026-91721

CVE-2026-91709

The report provides no insights beyond patch information, as neither active exploitation nor attacker TTPs are mentioned.

CVE-2026-91711

The report contains no indication of active exploitation, exploit code, or strategic context and therefore does not go beyond pure patch information.

CVE-2026-91710

This report contains no information beyond the patch details; there is no evidence of active exploitation or a public exploit.

CVE-2026-91715

The report contains no details beyond the patch information, in particular no indication of active exploitation or threat actors.

CVE-2026-91718

CVE-2026-91733

The report contains no information beyond the pure patch details indicating active exploitation or strategic context.

CVE-2026-91736

CVE-2026-91737

The alert contains no information on active exploitation, threat actors, or TTPs and therefore does not go beyond pure patch information.

BambooToken malware controls Windows and Linux systems via MQTT

This report shows that attackers are using MQTT as a C2 channel for cross-platform malware, which can evade conventional network monitoring.

CVE-2026-91716

Pure CVE description with no indication of active exploitation, proof-of-concept or attacker TTPs , it adds nothing beyond the patch information (update to 153.0.8010.47).

CVE-2026-91738

The report contains only the NVD description of the vulnerability, without indications of active exploitation, affected sectors, or strategic implications.

CVE-2026-91743

Beyond the pure patch information, the report provides no evidence of active exploitation or a public exploit; the 'High' rating rests solely on the Chromium severity assessment.

CVE-2026-91747

Beyond the patch information, the alert provides no indication of active exploitation, attacker TTPs, or affected sectors.