[acr-stealer]

September 9, 2026

One Phone Call, Zero Clicks: A WeChat Worm Crossed iOS and Android

WeWorm, a zero-click worm on WeChat that spreads across iOS and Android without user interaction, has been reported to Tencent and mitigated. Microsoft released a record-breaking 974 patches on Patch Tuesday, including two actively exploited Windows privilege-escalation zero-days (CVE-2026-81963 and CVE-2026-85880), while Adobe shipped an emergency fix for StyleSmuggler (CVE-2026-75650), a Magento zero-day exploited since September 4. Chinese AI companies including DeepSeek, Alibaba, and MiniMax have been conducting industrial-scale model distillation of Claude, GPT, Gemini, and Grok since late 2024 via native APIs and gray-market proxies, according to NSA, CISA, and FBI. Check Point disclosed a prompt-injection vulnerability in ChatGPT Thinking mode that allowed planted instructions to redirect tasks to a hidden mailbox, read the victim's Gmail, and exfiltrate data across code-execution sandboxes.

July 19, 2026

• Microsoft warns of a surge in ACR Stealer attacks against customer systems (BleepingComputer); Blind Eagle's toolkit also continues its steady evolution per SpiderLabs (LevelBlue). · Threat Activity

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation

July 18, 2026

• New ClickFix variant uses on-the-fly WebAssembly and SVG steganography to serve fake verification pages (Unit 42); relatedly, ACR Stealer rides ClickFix "paste-into-Run" lures to steal browser tokens and Microsoft 365 / OneDrive / SharePoint files (The Hacker News). · Threat Activity

in A Pre-Auth RCE Lands in WordPress Core, Proof-of-Concept and All

July 17, 2026

Live SonicWall Exploitation, a New C2 Release, and AI Agents Tricked Into Running Attacker Commands

SonicWall SMA1000 SSL-VPN appliances are under broad-scale exploitation via CVE-2026-15409 leveraging public PoC code, with CVE-2026-56155 remaining unfixed despite July patches. Nighthawk 1.0 C2 released with cross-platform UI and improved evasion capabilities including CET-compatible call-stack masking. AI agents can be compromised through data injection attacks that corrupt trusted facts, enabling attackers to trick agents into executing commands or clicking malicious links without direct prompt injection. Scattered Spider members received 5.5-year sentences for the 2024 Transport for London ransomware attack affecting 7 million users.