Sekoia uncovered weaponized GitHub proof-of-concept repositories that deliver the ChocoPoC Python RAT by hiding malicious behavior inside PyPI dependencies like frint and skytext. The campaign appears aimed at cybersecurity researchers and testers, and it abuses compromised accounts, multiple vulnerable products, and even Mapbox datasets to deploy and exfiltrate data. #ChocoPoC #Sekoia #GitHub #PyPI #frint #skytext #Mapbox #FortiWeb #React2Shell #MongoBleed #PANOS #IvantiSentry #CheckPointVPN #JoomlaSPPageBuilder

CISA has added CVE-2026-10520 in Ivanti Sentry to its Known Exploited Vulnerabilities catalog after reporting signs of exploitation, while Ivanti says the activity was only seen on honeypots. The flaw is a critical unauthenticated OS command injection issue that can lead to remote root code execution, and fixes are available in...

CISA ordered U.S. federal agencies to patch the actively exploited Ivanti Sentry flaw CVE-2026-10520 within three days after it was added to the KEV Catalog under BOD 26-04. Shadowserver reported widespread exploitation attempts and likely compromise of unpatched Internet-exposed Ivanti Sentry gateways. #CVE-2026-10520 #IvantiSentry #CISA #Shadowserver #BOD26-04

Fortinet, Ivanti, and SAP have issued urgent security updates for multiple critical flaws that could enable remote code execution, authentication bypass, and information disclosure. The affected products include FortiSandbox, Ivanti Sentry, and several SAP platforms, with no evidence yet of in-the-wild exploitation. #FortiSandbox #IvantiSentry #SAPNetWeaver #SAPCommerceCloud #SAPDataHub...