⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More

This weekly cybersecurity recap covers active exploits, state-sponsored telecom intrusions, a legal sentencing, and emerging malware campaigns.

• •CVE-2026-3055, a critical Citrix NetScaler ADC/Gateway flaw (CVSS 9.3), is under active exploitation via memory overread when the appliance is configured as a SAML IDP
• •China-linked Red Menshen deployed BPFDoor kernel implants as dormant sleeper cells in global telecom backbone infrastructure, activated via magic packets to avoid visible connections
• •GlassWorm evolved to deliver a malicious Chrome extension that logs keystrokes, dumps cookies, captures screenshots, and uses a Solana blockchain memo as a hidden C2 channel
• •Russian TA551 operator Ilya Angelov was sentenced to 2 years for managing a botnet used in ransomware attacks tied to BitPaymer and IcedID affiliates