Gambling Goblin

Chinese Actor Gambling Goblin Hijacks Brazilian Gov Sites Gambling Goblin campaign targeting government servers with Gambling Goblin malware

Chinese Actor Gambling Goblin Hijacks Brazilian Gov Sites

Do Son September 8, 2026

At a Glance Actor or group Suspected Gambling Goblin (linked to Earth Berberoka) Activity type SEO poisoning,...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-75650CVSS 10.0
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that...
Admin intel📅 Updated: Sep 8, 2026
CVE-2026-86218CVSS 10.0
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67278CVSS 6.3
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67279CVSS 6.9
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67281CVSS 8.7
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-86060CVSS 9.2
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character,...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67277CVSS 8.8
RouterOS accepts a \"related\" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67276CVSS 9.2
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized...
Admin intel📅 Updated: Sep 7, 2026