CERT24Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repository, and Cisco ExploitationLoading data…
CERT24Threat Observatory
Period

Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repository, and Cisco Exploitation

The Hacker News weekly recap covers multiple active or serious cybersecurity incidents. CVE-2026-42897 in on-premises Microsoft Exchange Server is being actively exploited in the wild, while the critical authentication-bypass flaw CVE-2026-20182 in Cisco Catalyst SD-WAN Controller was attributed to UAT-8616. Supply-chain attacks associated with TeamPCP compromised npm packages and harvested credentials and keys. A fake Hugging Face repository delivered an information stealer to Windows users, the critical Burst Statistics WordPress flaw was exploited in attacks, and Instructure reported a ransom agreement with ShinyHunters.

← Back to intelligence

Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repository, and Cisco Exploitation

The Hacker News weekly recap covers multiple active or serious cybersecurity incidents. CVE-2026-42897 in on-premises Microsoft Exchange Server is being actively exploited in the wild, while the critical authentication-bypass flaw CVE-2026-20182 in Cisco Catalyst SD-WAN Controller was attributed to UAT-8616. Supply-chain attacks associated with TeamPCP compromised npm packages and harvested credentials and keys. A fake Hugging Face repository delivered an information stealer to Windows users, the critical Burst Statistics WordPress flaw was exploited in attacks, and Instructure reported a ransom agreement with ShinyHunters.