[zscaler]

October 1, 2026

• 2CLoader, a loader Zscaler ThreatLabz identified in August 2026, distributes Vidar, Remus and XWorm using indirect syscalls, anti-analysis checks and Windows API hooking; the write-up covers configuration, payload decryption and C2 (Zscaler). · Threat Intelligence
• Zscaler's ThreatLabz 2026 ransomware report covers April 2025–March 2026 and argues the meaningful shifts are in initial access, victim selection and exfiltration volume rather than headline victim counts (Zscaler). · Threat Intelligence

in An Encoded Character Away From Admin: Cisco SD-WAN Manager Exploited in the Wild

September 17, 2026

• APT36 ran Operation RapidRust in August against government and defence targets in India and Afghanistan, with new malware families RUSTYSHADE, RUSTYMOVE, PSNATCH and BASHNATCH plus new post-compromise tooling. Zscaler ThreatLabz. · Threat Activity

in One Extension Hijacks the AI Assistant in Five Major Browsers

August 25, 2026

• Zscaler Client Connector RCE (CVE-2026-59568) is fixed in the current app release train — another privileged endpoint agent worth checking in your estate (Zscaler release summary). · Vulnerabilities & Exploits

in The Rogue Agent Staged an Apology, Then Pushed More Malware

August 18, 2026

• C2Looper is a newly documented backdoor with GitHub-based command-and-control and suspected ransomware ties. Zscaler provides the technical analysis and cautiously links the malware to ransomware operations. · Threat Activity & Supply Chain

in Three Fast-Moving Flaws Put GitLab and AI Infrastructure on Alert

July 28, 2026

• Zscaler ThreatLabz flagged an East Asia-linked actor deploying previously unreported TELESHIM, MIXEDKEY, and BINDCLOAK malware against Middle East governments, using Telegram for C2 (The Hacker News). · Threat Activity

in Agentic AI Muscles Into the Offensive Toolkit

July 4, 2026

• Indirect prompt injection weaponized via SEO poisoning. Zscaler ThreatLabz found malicious sites using SEO poisoning to lure AI agents to attacker-controlled pages carrying hidden instructions; in testing, several popular LLMs could be tricked into making fraudulent payments. Zscaler ThreatLabz · AI & Model Security

in Silent Active Directory Recon and a Near-Perfect Linux Root Exploit Lead the Offensive Beat