Daily Recap, UAE faces an unprecedented surge of AI-powered cyberattacks—estimated at 500,000–700,000 daily—by state-linked actors using ChatGPT for recon, phishing, and deepfakes. Separately, a breach of the European Commission was claimed by ShinyHunters, and materials from FBI Director Kash Patel’s personal Gmail were published by Handala hackers. #ShinyHunters #EuropeanCommission
State & Breaches
- UAE faces an unprecedented surge of AI-powered cyberattacks—estimated at 500,000–700,000 daily—by state-linked actors using ChatGPT for recon, phishing and deepfakes while separate incidents include alleged data theft from the European Commission (claimed by ShinyHunters) and publication of materials from FBI Director Kash Patel‘s personal Gmail by Handala hackers – UAE AI Attacks, Commission Breach, Patel Email Hack
Phishing & Impersonation
- Attackers cloned CERT‑UA‘s website and sent password‑protected archives to deploy the Go RAT AGEWHEEZE via OVH-hosted WebSocket C2, prompting CERT‑UA to publish IOCs and mitigations – CERT‑UA RAT
Exploits & Vulnerabilities
- Active exploitation warnings include critical CVE-2026-21643 in FortiClient EMS, a WordPress Smart Slider 3 CVE-2026-3098 file-read flaw impacting ~500,000 sites, and reporting that Russian APT ‘Star Blizzard’ has adopted the DarkSword iOS exploit kit – FortiClient RCE, Smart Slider Flaw, Blizzard DarkSword
Updates & Patching
- Microsoft paused the optional Windows 11 preview update KB5079391 after installation failures returning error 0x80073712, delaying wider rollout until fixes and further testing – KB5079391 Pulled
Industry & Recap
- Dr. Priyanka Sunder discusses women leading cybersecurity, and the weekly threat research roundup is available for a concise recap of recent activity – Women in Cyber, Weekly Recap