{"vulnerability": "CVE-2026-51990", "sightings": [{"uuid": "744d592a-bf6e-4938-9d09-4a198f02403f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv7gylfsk32x", "content": "CVE-2026-51990 in Sogou Input Method enabled one-click RCE via a crafted sgbiz: link. UNC3569 used the flaw in the wild to deploy the GRAYRABBIT backdoor; Tencent has patched it. #CVE202651990 #GRAYRABBIT #Tencent", "creation_timestamp": "2026-09-11T01:45:27.650198Z"}, {"uuid": "5f925903-2ae1-4f6e-ac7b-263c3d8ad3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3mvaad7oiu22w", "content": "Gen traced the payload to Alibaba Cloud in Hong Kong. A downloader dropped a malicious DLL and encrypted GRAYRABBIT, providing remote shell access, file transfer and module loading. Tencent fixed CVE-2026-51990, but Sogou still ships Chromium 80. The outdated browser remains a concern. #threatintel", "creation_timestamp": "2026-09-11T09:18:54.461848Z"}, {"uuid": "99ea2fce-f53f-4f1b-8901-fe7d3b250665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3mvaaddzh5c2w", "content": "Gen traced the payload to Alibaba Cloud in Hong Kong. A downloader dropped a malicious DLL and encrypted GRAYRABBIT, providing remote shell access, file transfer and module loading. Tencent fixed CVE-2026-51990, but Sogou still ships Chromium 80. The outdated browser remains a concern. #threatintel", "creation_timestamp": "2026-09-11T09:18:55.365058Z"}, {"uuid": "42431f03-1a44-44c9-b817-8b7ea8bed778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3mvaaddzh5d2w", "content": "Gen traced the payload to Alibaba Cloud in Hong Kong. A downloader dropped a malicious DLL and encrypted GRAYRABBIT, providing remote shell access, file transfer and module loading. Tencent fixed CVE-2026-51990, but Sogou still ships Chromium 80. The outdated browser remains a concern. #threatintel", "creation_timestamp": "2026-09-11T09:18:56.474579Z"}, {"uuid": "3911f07d-0777-4eb6-bd12-d4cce8d7e78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/117251911529981002", "content": "Gen Threat Labs discovered a critical remote code execution vulnerability (CVE-2026-51990) in Sogou Input Method. The vulnerability is actively exploited in the wild by the UNC3569 threat group to deploy the GRAYRABBIT backdoor through a crafted link. https://www.gendigital.com/blog/insights/research/one-click-backdoor-sogou", "creation_timestamp": "2026-09-11T10:23:07.108761Z"}, {"uuid": "4eac7ceb-b2e9-440f-b6b1-61a48aa8e1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mvadwdob2k2h", "content": "Gen Threat Labs discovered a critical remote code execution vulnerability (CVE-2026-51990) in Sogou Input Method. The vulnerability is actively exploited in the wild by the UNC3569 threat group to deploy the GRAYRABBIT backdoor through a crafted link. www.gendigital.com/blog/insight...", "creation_timestamp": "2026-09-11T10:23:22.808860Z"}, {"uuid": "e7447e0b-8407-46f3-b9f0-67cf211e244d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvagi4duei2g", "content": "\ud83e\udd16 China-linked UNC3569 exploited a Sogou Input Method flaw (CVE-2026-51990) to drop the GRAYRABBIT backdoor. Crafted link \u2192 unpatched Chromium 80, sandbox off. Tencent patched it (v16.3.0.3498). Gen Digital.\nhttps://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.html", "creation_timestamp": "2026-09-11T11:08:54.847563Z"}, {"uuid": "2a6e846a-9a6b-4ec0-a220-3c5d2881a635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvatu2ig6a2l", "content": "China-linked group UNC3569 abused a flaw in Sogou Input Method (CVE-2026-51990) to chain into a Chrome bug and drop the GRAYRABBIT backdoor. Update to Sogou v16.3.0.3498+. https://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.html", "creation_timestamp": "2026-09-11T15:08:14.068006Z"}, {"uuid": "c6750375-6b87-4357-9a4b-8eea5a1dba38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mvfsio5yik2g", "content": "Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor.", "creation_timestamp": "2026-09-13T14:27:19.106771Z"}, {"uuid": "cec3fcf6-66f8-4f39-8e24-ac84f0c241ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvft6tbeud2v", "content": "\u30cf\u30c3\u30ab\u30fc\u304cTencent\u30a2\u30d7\u30ea\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001GrayRabbit\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u5c55\u958b\n\n\u4e2d\u56fd\u3068\u95a2\u4fc2\u304c\u6df1\u3044\u30b9\u30d1\u30a4\u6d3b\u52d5\u30b0\u30eb\u30fc\u30d7\u306b\u95a2\u9023\u3059\u308b\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u3001Tencent\u306e\u300c\u635c\u72d7\u8f93\u5165\u6cd5\uff08Sogou Input Method\uff09\u300dWindows\u7248\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027(CVE-2026-51990)\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 \u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dGen Dig", "creation_timestamp": "2026-09-13T14:39:40.966066Z"}, {"uuid": "0bc0d0bb-e25f-4422-b140-4ae2e3c3f421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvfubgyoa22t", "content": "\ud83e\udd16 CVE-2026-51990 (critical): one-click RCE in Tencent's Sogou Input Method, exploited by UNC3569 to deploy GrayRabbit backdoor. Unsandboxed Chromium chain, fixed in v16.3.0.3498.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-13T14:59:02.386070Z"}, {"uuid": "8a938e66-a4b4-4ea9-a19d-afbfc7af2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mvfulvwlzq2j", "content": "CVE-2026-51990 in Tencent's Sogou Input Method for Windows is being exploited by China-aligned actors to deploy the GrayRabbit backdoor.", "creation_timestamp": "2026-09-13T15:04:53.833999Z"}, {"uuid": "6424fec7-d8f3-4693-9018-a622cff7f149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvfxzbkbhw2b", "content": "Tencent\u306eSogou Input Method for Windows\u306b\u8106\u5f31\u6027\uff08CVE-2026-51990\uff09\u304c\u3042\u308a\u3001\u4e2d\u56fd\u7cfb\u653b\u6483\u8005\u306b\u3088\u308aGrayRabbit\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u5c55\u958b\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-13T16:06:04.234300Z"}, {"uuid": "32677624-4d66-4299-931d-0326310bc8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvfyigrsf622", "content": "Sogou Input Method CVE-2026-51990 is being exploited to deploy the GrayRabbit backdoor on Windows \u2014 remove or isolate affected clients until vendor guidance is available. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-13T16:14:31.798754Z"}, {"uuid": "89a74a94-2d80-4136-92ea-df83fa358bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mvg6igchpr2e", "content": "\ud83d\udd12 Hackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in ...\n\nhttps://tinyurl.com/242jfs9u #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-09-13T18:01:53.530150Z"}, {"uuid": "c66cb88d-e46f-4678-b71d-76e36f8ea15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "content": "Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]", "creation_timestamp": "2026-09-13T19:00:41.904613Z"}, {"uuid": "948eb280-5dbd-40ba-a86b-746ac49e364f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvgpndnyuu26", "content": "\ud83e\udd16 China-aligned UNC3569 exploiting CVE-2026-51990, a critical one-click RCE in Tencent's Sogou Input Method for Windows, deploying the GrayRabbit backdoor.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-13T23:08:52.185883Z"}, {"uuid": "84c411c6-f60c-4c80-9c1d-a4dd2c3c9d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvgsniv5fs2z", "content": "Defend against the CVE-2026-51990 Sogou exploit. Discover how hackers use this one-click flaw to drop backdoors and how to secure your systems today.\n\n#CVE202651990 #SogouInputMethod #CyberSecurity #UNC3569 #InfoSec #EndpointSecurity #ThreatIntel", "creation_timestamp": "2026-09-14T00:02:38.960432Z"}, {"uuid": "17bc2e86-6cfd-4a3e-bf8e-63ee1326711d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "content": "Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]", "creation_timestamp": "2026-09-14T01:00:35.102663Z"}, {"uuid": "b38d98f7-89be-4925-b007-c8e8db6b5714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.370885Z"}, {"uuid": "46169bb2-ac8c-447a-b9ba-186f85920b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhabw3evq2i", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:06:42.379690Z"}, {"uuid": "10962387-8b74-4227-a02d-c183467828aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvhabwj2xn2k", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email BO CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #PotatoSecurity", "creation_timestamp": "2026-09-14T04:06:43.006856Z"}, {"uuid": "689684bb-fcf5-48ba-9cd1-facb36cc3511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhacnfvtx2e", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:07:06.877402Z"}, {"uuid": "98349b1e-c4bc-40bc-b049-8d0ebb225c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.124799Z"}, {"uuid": "20be35c7-7ea1-46da-a6da-57dfb9d236e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhagjon4q2j", "content": "2/ PHISHING & MALWARE: Microsoft details AI-assisted CEO fraud (1M+ emails, Aug 3-5) + passkey-themed attacks hijacking cloud accounts. UNC3569 exploits Tencent Sogou Input Method (CVE-2026-51990) \u2014 one-click RCE \u2014 to deploy GrayRabbit backdoor. Src: TheHackerNews, BleepingComputer", "creation_timestamp": "2026-09-14T04:09:17.164440Z"}, {"uuid": "9155bc54-f7a9-4a87-9105-799f05d3a5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvhhznyusb2q", "content": "CVE-2026-51990 is trending. Hype score 5, currently #5 on cvemon.\n\nCurrently trending CVE - Hype Score: 5\n\nhttps://cvemon.intruder.io/cves/CVE-2026-51990", "creation_timestamp": "2026-09-14T06:25:16.244461Z"}, {"uuid": "ddda9b84-2b22-44f2-a543-332943273d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 26 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 7 interactions\nCVE-2026-90561: 4 interactions\nCVE-2025-59287: 3 interactions\n", "creation_timestamp": "2026-09-14T06:59:12.737425Z"}, {"uuid": "074307c2-4ae2-4e84-b762-d526e846a002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/HackerNewscyber/3457", "content": "\u2708 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Sogou \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit\n\n\u00a9\ufe0f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0646\u062a\u0633\u0628 \u0628\u0647 \u06af\u0631\u0648\u0647 \u0647\u0645\u0633\u0648 \u0628\u0627 \u0686\u06cc\u0646 UNC3569 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-51990 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Sogou Input Method \u0634\u0631\u06a9\u062a Tencent \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062d\u0645\u0644\u0647 \u0628\u0627 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc Sogou \u0648 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0628\u062f\u0648\u0646 sandbox \u0627\u0632 Chromium\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u06cc\u06a9 \u0628\u06a9\u200c\u062f\u0648\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f\u0647\u0627\u060c \u0627\u06cc\u062c\u0627\u062f \u067e\u0648\u0633\u062a\u0647 \u0645\u0639\u06a9\u0648\u0633\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0627\u0631\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647: Tencent \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 16.3.0.3498 \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 \u06f2\u06f0\u06f2\u06f6 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0648\u062a\u0648\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc \u0647\u0645\u0686\u0646\u0627\u0646 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0641\u0627\u0642\u062f sandbox \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-14T07:00:04.456822Z"}, {"uuid": "43a58e24-d7aa-4c2e-99d3-ed4c614e2cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mvhlzz7pwo2e", "content": "\u26a0\ufe0f\ud83d\udc30  Tencent flaw deploys GrayRabbit\n\nCVE-2026-51990 enables RCE through Sogou Input Method; fixed in version 16.3.\n\n\ud83d\udd17 read more: www.bleepingcomputer...\n\n#ransomNews #cyberthreats #GrayRabbit \n", "creation_timestamp": "2026-09-14T07:37:03.732211Z"}, {"uuid": "d57f03ca-3eba-4363-bd26-d86384b939c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvhs65r4ku2i", "content": "\ud83e\udd16 CVE-2026-51990: a China-aligned espionage group exploits a critical flaw in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. Exploited in the wild.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-14T09:26:43.780606Z"}, {"uuid": "5a42b597-04f3-4367-b5cc-a383bcd850ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvhsn45rp22d", "content": "Hackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n#hackernews #news", "creation_timestamp": "2026-09-14T09:35:06.160243Z"}, {"uuid": "aeee5d71-1026-42f3-a3cb-9949b854e6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvi32jjcl322", "content": "CVE-2026-51990 in Sogou Input Method enables a one-click exploit that injects command-line arguments and uses an outdated, unsandboxed Chromium engine to execute system-level code.\n", "creation_timestamp": "2026-09-14T12:05:46.269421Z"}, {"uuid": "16595b58-7d73-4010-80b5-b19ca2948b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mvianj6ax32k", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: China-Linked Group Exploits CVE-2026-51990 in Sogou Input to Drop GrayRabbit\n\n#APT #ThreatIntel #CyberSecurity", "creation_timestamp": "2026-09-14T13:45:51.642321Z"}]}