ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

This ThreatsDay Bulletin reviews a range of active threats: Microsoft-signed driver abuse enabling kernel-level bypasses; a large Iran-linked academic data-theft campaign (Mabna) affecting thousands of accounts; malware distribution and DLL sideloading campaigns (Grandoreiro, ErrTraffic/ClickFix) delivering stealers and loaders; multiple critical RCE and prototype-pollution vulnerabilities (Gogs CVE-2026-52813, CircleCI unauth RCE, n8n CVE-2026-33696) and ICS/refrigeration controller flaws; creative C2 hiding and proof-of-concepts aided by AI-driven vulnerability discovery — collectively illustrating attackers exploiting trust, exposed systems, and weak defaults.