{"uuid": "d8fe977c-ff79-48e9-9114-2db38b2106f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19438", "type": "seen", "source": "https://gist.github.com/ichintu/9675f842e53be41502d3b4df91068799", "content": "This cyber threat intelligence digest highlights critical vulnerabilities, active breaches, and defensive best practices. Key updates include:\n- **Vulnerabilities & Exploits:** A HIGH-severity path traversal in ABB Mint Workbench I (CVE-2026-19438), a patched Next.js server-side RCE via crafted SVGs, and a pre-authentication RCE in TACACS+.\n- **Official & Leaked Data:** CISA added five new vulnerabilities to its KEV catalog. Separately, leaked GitHub App private keys allowed impersonation of 440 services, including the CDC.\n- **Active Breaches:** The ShinyHunters extortion group claims to have breached the FBI, exfiltrating data on agents and job applicants.\n- **Defensive Strategies:** To counter rising AI-driven threats, experts recommend minimizing attack surfaces, enforcing Zero Trust architecture, deploying defensive AI for anomaly detection, and maintaining offline redundancies.\n- **Community Discussions:** Additional threads cover PII handling protocols and Notepad++ security.", "creation_timestamp": "2026-09-23T10:03:22.248085Z"}