> TritonInfoSec News
Home / Sep 14, 2026 / Story
0
#5 BleepingComputer general September 13, 2026 at 14:26 UTC

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

By Bill Toulas

AI Summary

A China-aligned espionage group is actively exploiting CVE-2026-51990, a critical flaw in Tencent's Sogou Input Method for Windows, to deploy the GrayRabbit backdoor. The campaign targets Windows endpoints with a widely installed Chinese-language input application, expanding the attack surface beyond typical enterprise software vectors.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 78.0/100

# More from September 14

  1. 1
    Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data The Hacker News
  2. 2
    CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV The Hacker News
  3. 3
    Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent BleepingComputer
  4. 4
    BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days SecurityWeek
  5. 6
    OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers The Hacker News
  6. 7
    Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI The Record
  7. 8
    When the Whole Company Adopts AI: What It Does to Your SOC The Hacker News
  8. 9
    Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up SecurityWeek
  9. 10
    I fixed a tractor using John Deere’s self-repair service. Farmers aren’t sold on it. Ars Technica Security