[zscaler]

August 25, 2026

• Zscaler Client Connector RCE (CVE-2026-59568) is fixed in the current app release train — another privileged endpoint agent worth checking in your estate (Zscaler release summary). · Vulnerabilities & Exploits

in The Rogue Agent Staged an Apology, Then Pushed More Malware

August 18, 2026

• C2Looper is a newly documented backdoor with GitHub-based command-and-control and suspected ransomware ties. Zscaler provides the technical analysis and cautiously links the malware to ransomware operations. · Threat Activity & Supply Chain

in Three Fast-Moving Flaws Put GitLab and AI Infrastructure on Alert

July 28, 2026

• Zscaler ThreatLabz flagged an East Asia-linked actor deploying previously unreported TELESHIM, MIXEDKEY, and BINDCLOAK malware against Middle East governments, using Telegram for C2 (The Hacker News). · Threat Activity

in Agentic AI Muscles Into the Offensive Toolkit

July 4, 2026

• Indirect prompt injection weaponized via SEO poisoning. Zscaler ThreatLabz found malicious sites using SEO poisoning to lure AI agents to attacker-controlled pages carrying hidden instructions; in testing, several popular LLMs could be tricked into making fraudulent payments. Zscaler ThreatLabz · AI & Model Security

in Silent Active Directory Recon and a Near-Perfect Linux Root Exploit Lead the Offensive Beat