Critical Flaw in Tencent Software Targeted
Security researchers have discovered that threat actors, linked to a China-aligned espionage group, are actively exploiting a critical vulnerability (CVE-2026-51990) within the Tencent Sogou Input Method for Windows. The flaw allows attackers to drop the GrayRabbit backdoor, providing them with unauthorized access to compromised systems.
What you need to know:
- The Risk: This vulnerability serves as an entry point for persistent malware that can lead to data theft and system hijacking.
- The Action: Business owners should ensure all software, particularly third-party input tools, is updated to the latest version immediately.
- Watch Your Environment: Monitor your network for unusual outbound traffic patterns often associated with backdoor communications.