Mixed Cybersecurity Incidents and Announcements

This cluster aggregates unrelated security news: DCSync attacks, Operation STANDOFF malware, a Houston City College breach of 831,642 records, FFmpeg vulnerabilities, and PortSwigger's Burp AI tool announcement. No single narrative unifies these disparate incidents.

🕵️‍♂️ SonicWall SMA1000 (CVE-2026-15409): SSRF to Erlang RCE chained into automated DCSync from the appliance https:// hunt.io/blog/sonicwall-sma1000 -uk-council-attack

Active Directory certification flaw exploited publicly

A critical vulnerability (CVE-2026-54121, called "Certighost") in Windows Active Directory Certificate Services was publicly disclosed with exploit code just 10 days after Microsoft's patch. The flaw allows low-privileged domain users to impersonate Domain Controllers and compromise enterprise networks.