ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

This week's cybersecurity bulletin covers multiple critical vulnerabilities and active attack campaigns threatening organizations.

• •PAN-OS CVE-2026-0300 buffer overflow in User-ID Authentication Portal being actively exploited to deploy EarthWorm and ReverseSocks5 malware
• •Meta's Incognito Chat processes AI inference in Trusted Execution Environment ensuring conversations remain inaccessible to Meta and WhatsApp
• •Schemata's military AI training platform exposed defense contractor data and user records through API endpoints lacking proper authorization checks
• •Anthropic's Mythos security scan of cURL found 4 false positives out of 5 reported vulnerabilities, with only one confirmed low-severity bug
• •Ongoing social engineering campaigns deploy ransomware and infostealer malware using phishing emails, weaponized file disguises, and fake update lures