THE content highlights three critical vulnerabilities detected today: CVE-2026-11645 (Google Chromium), CVE-2026-7473 (Arista Operating System), and CVE-2026-20245 (Cisco Catalyst). It focuses on a dangerous Havoc stager campaign exploiting fake electronic invoices to compromise corporate systems, particularly affecting businesses in South America. The campaign employs sophisticated tactics to deceive employees, using ZIP files that contain malicious scripts disguised as official documents.
The deception allows attackers to execute a multi-stage infection process and establish memory-resident backdoors that evade detection. Recommendations for defense include monitoring outbound network activity and auditing environment variables regularly to mitigate these threats.