Sign in Subscribe
security

🔐 Security Pulse · 2026-08-30 16:00 UTC

⚡ TL;DR

APT-C-36 state-sponsored malware campaign targeting South America confirmed, posing active espionage risks 🔴🔴🔴 Overall threat level remains elevated due to multiple critical software vulnerabilities.

🔐 CYBER THREATS

  • Multiple critical GitLab vulnerabilities (CVE-2026-18252, CVE-2026-77801, CVE-2026-7487, CVE-2026-15387, CVE-2026-3035) affecting a wide range of versions risk unauthorized access and privilege escalation in DevOps environments 🟡🟡 [1] [2] [3] [4] [5].
  • CVE-2026-79619 in Linux OpenZFS allows unprivileged namespaces to gain host-level capabilities, potentially escalating container escape attacks 🔴 [6].
  • RustDesk remote desktop versions 1.3.9 to 1.4.9 have path traversal and speculative memory allocation flaws (CVE-2026-73102, CVE-2026-73108) enabling code execution and data breach 🟡🟡 [7] [8].
  • Rently Smart Home (20.1.0 and prior) exposed credentials that could let attackers retrieve PINs, threatening IoT home security 🟡 [9].
  • Google Cloud BigQuery's CData JDBC driver has improper input validation (CVE-2026-12717) that could enable data exfiltration on affected versions prior to 2026-05-01 🟡 [10].

🛡️ NATIONAL SECURITY

  • Espionage malware campaign in South America attributed to APT-C-36 detected in malware collections, evidencing ongoing state-sponsored espionage operations in the region 🔴🔴🔴.
  • No new military movements or critical infrastructure disruptions reported in the last 24h.

⚠️ RISK FLAGS

⚠️ The Linux OpenZFS CVE-2026-79619 vulnerability presents immediate risk of container breakouts in cloud and virtualized environments; mitigation urgent for cloud providers and enterprises using OpenZFS 🔴🔴 [6].

⚠️ Persistent unpatched GitLab vulnerabilities across multiple releases allow for privilege escalation and code injection attacks in CI/CD pipelines, elevating threat levels for organizations relying on this platform 🟡🟡 [1] [2] [3] [4] [5].

⚠️ Ongoing APT-C-36 espionage targeting South America underscores the need for heightened network monitoring and threat intelligence sharing in this region 🔴🔴🔴.

🧭 THREAT MOOD

Elevated 🟡🟡

The discovery of state-sponsored espionage malware combined with multiple critical vulnerabilities in widely used enterprise tools maintains an elevated threat environment, requiring urgent patching and continued vigilance.

📎 Sources

  1. CVE-2026-18252 GitLab has remediated an issue in GitLab EE aff… — @CVEnew
  2. CVE-2026-77801 GitLab has remediated an issue in GitLab CE/EE … — @CVEnew
  3. CVE-2026-7487 GitLab has remediated an issue in GitLab EE affe… — @CVEnew
  4. CVE-2026-15387 GitLab has remediated an issue in GitLab EE aff… — @CVEnew
  5. CVE-2026-3035 GitLab has remediated an issue in GitLab EE affe… — @CVEnew
  6. CVE-2026-79619 On Linux, several OpenZFS ioctl authorization c… — @CVEnew
  7. CVE-2026-73102 RustDesk versions 1.3.9 through 1.4.9 contain a… — @CVEnew
  8. CVE-2026-73108 RustDesk versions before 1.4.7 contain an uncon… — @CVEnew
  9. CVE-2026-75960 Rently Smart Home versions 20.1.0 and prior are… — @CVEnew
  10. CVE-2026-12717 An Improper Input Validation vulnerability in C… — @CVEnew

Educational & informational only — not financial advice. Markets carry risk; do your own research.
Serial 20260830-16-v55 · 2026-08-30 16:00 UTC · pulse.uzylab.com

Read next