CERT24ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
This weekly roundup covers, among other topics, an ATM jackpotting campaign, the use of blockchains to conceal malware instructions, AI-accelerated attacks, web-cache poisoning, active credentials exposed in public GitHub repositories, and code execution triggered by model inspection. It also describes exploitation of Samsung MagicINFO flaw CVE-2025-4632, followed by compilation of a cryptocurrency miner on the victim host, and the chaining of Zammad zero-days CVE-2026-102489 and CVE-2026-102490 against DIVD. Claims of a 22 TB Indian embassy leak and attribution of the alleged actor are described as unverified.