AITM kit sample (inert / displayed as code)
phishing-kit
- Published: 8 months ago on February 20, 2026
- By: sectorx
- Last Modified: September 22, 2026 @ 2:23 am
- Filed Under: Malware and Behavior Analysis
Malwarebytes- How “123456” became the key to almost 9 million personal records October 12, 2026A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.
- Phishing emails are baiting your AI assistant October 12, 2026If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.
- A week in security (October 5 – October 11) October 12, 2026A list of topics we covered in the week of October 5 to October 11 of 2026
- How “123456” became the key to almost 9 million personal records October 12, 2026
- The Hacker News
- ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More October 12, 2026Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone do something about it. But speed is only part of the problem. A secure connection didn't always mean a safe […]
- Bring Your Own Agent: Your Employees' Assistants Are Already Logged In October 12, 2026The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty much every personal AI agent keep piling up. Regardless, the tech world is mesmerized by the capabilities […]
- Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports October 12, 2026Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said it was investigating reports of loss of funds from users in Southeast Asia who had purchased products from CryptoBilis. The incident is said to have […]
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch October 12, 2026Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests […]
- Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE October 12, 2026A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The
- ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More October 12, 2026