Ba'zi hujumlar haqiqiy mahorat talab qiladi. Boshqalar esa shunchaki kimdir eshikni ochiq qoldirishiga muhtoj. Bu hafta har ikkalasi ham bor. Fosh etilgan parollar, hali ham ekspluatatsiya qilinayotgan eski xatolar va ishonchli dasturiy ta'minot o'z vazifasidan tashqari ishlar qilmoqda.
Aqlli hiylalar va beparvo xatolarning g'alati aralashmasi. Xakerlar tanish ilovalar, veb-saytlar va AI vositalaridan ishonchni o'g'irlashmoqda. Ba'zilari jarayonni tezlashtirish uchun AI dan foydalanmoqda. Boshqalar esa o'z hujum fayllarini fosh etib qo'yishmoqda. Bu aniq ehtiyotkor ish emas.
Turli hikoyalar, tanish zaif nuqtalar. Mana bu hafta paydo bo'lgan narsalar.
Tahdidlar har hafta o'zgaradi. Obuna bo'ling, va biz har bir yangi ThreatsDay Byulleteni chiqqanda sizni ogohlantiramiz.
- PHP2Shell hujumlari davom etmoqda
WordPress xavfsizlik kompaniyasi Wordfence 2026-yil 28-oktabr holatiga ko'ra PHP2Shell (CVE-2026-109618 va CVE-2026-109619) orqali hech qanday WordPress sayti buzilmaganini aytdi. "Biz himoya qiladigan 5 milliondan ortiq saytlarda PHP2Shell bilan bog'liq so'rovlarni ko'rishda davom etamiz," dedi u. "Bu so'rovlar doimiy skanerlash va ekspluatatsiya urinishlarini ko'rsatadi; ular urinish muvaffaqiyatli bo'lganini ko'rsatmaydi. Bizning sayt tozalash va hodisaga javob berish jamoalarimiz bu zaifliklarga bog'liq WordPress buzilishini hal qilmagan."
- 40 573 sir fosh etildi
Hudson Rockning FortiBleed ma'lumot o'g'irlash kampaniyasini tekshiruvi 975 ta yangi aniqlangan domen va 40 573 ta fosh etilgan sirni, jumladan 37 076 ta mahalliy foydalanuvchi yozuvlari va 1 576 ta Active Directory LDAP bog'lanish yozuvlarini aniqladi. Ma'lumotlar 1 689 ta xost identifikatorlari bilan bog'liq yangi olingan 1 703 ta FortiGate manba fayllaridan kelib chiqqan. "Konfiguratsiya materiallari taxminan 2026-yil fevraliga tegishli, bu birinchi tekshiruvda ko'rib chiqilgan ehtimoliy may/iyun materiallaridan oldinroq," dedi Hudson Rock. So'nggi kashfiyot FortiBleed 2.0 deb nomlandi.
- Institutsional DNS o'g'irlandi
Tahdid aktorlari ikki alohida operatsiyada qonuniy maktab va hukumat domenlari ostida noqonuniy qimor kontentini joylashtirish uchun domen soyasidan foydalangan. "Har ikkala holatda ham ruxsat etilmagan tomon DNS ma'muriyatiga kirish huquqiga ega bo'lib, asl domen egalari sezmagan yozuvlarni yaratganga o'xshaydi," dedi Infoblox. "Natijada hosil bo'lgan xost nomlari o'rnatilgan institutsional nomlar maydonida joylashgani sababli, ular qidiruv tizimi optimallashtirish (SEO) va trafik olish uchun ayniqsa foydali infratuzilmani taqdim etdi." Hidden Hawk deb atalgan tahdid aktori bilan bog'liq klaster institutsional xost nomlarini asosan Cloudflare Pages da joylashgan qimor sahifalariga yo'naltirgan alohida CNAME yozuvlarini qo'shgan. Hindiston hukumat domenidan foydalanib ikkinchi kampaniya "butun subzonalarni uchinchi tomon avtoritet nom serverlariga topshirgan va wildcard ishlatgan, bu esa ko'plab xost nomlarini jabrlanuvchining DNS muhitidan tashqarida boshqarishga imkon bergan." Boshqacha aytganda, ruxsat etilmagan DNS kirishi yangi institutsional xost nomlarini yaratadi, ular esa noqonuniy qimor eshik sahifalarini taqdim etadigan infratuzilmaga yo'naltiriladi. Sahifalar shuningdek maktab va hukumat nomlar maydonining o'rnatilgan obro'sidan foydalanib, zararli URL lar qidiruv tizimi natijalarida yuqori o'rinlarda paydo bo'lishini ta'minlaydi.
- AI bank ma'lumotlari haqida ogohlantirish
Bank of America mijozlarga bank ma'lumotlarini AI agentlari bilan ulashmaslikni eslatmoqda. "AI dunyosida moliyaviy ma'lumotlaringizni himoya qilish" sarlavhasi ostida mijozlarga yuborilgan elektron pochta xabarida moliyaviy muassasa mijozlardan foydalanuvchi nomi va parolini boshqa shaxs yoki tashqi xizmat, "jumladan sizning nomingizdan harakat qilishni taklif qiladigan AI bilan jihozlangan vosita yoki agent" bilan hech qachon ulashmaslikni so'radi.
- Android kontaktlarga kirishni qattiqlashtirmoqda
Google kelgusi Android relizida WRITECONTACTS ruxsati bilan kontaktlarga to'g'ridan-to'g'ri yozish endi mumkin bo'lmasligini e'lon qildi. "Buning o'rniga siz standart kontakt niyatlaridan (ACTIONINSERT, ACTIONEDIT va ACTIONINSERTOREDIT) foydalanishingiz mumkin," dedi Google. "Hozirda, agar ilovangiz hatto bitta kontaktni saqlashi kerak bo'lsa, siz WRITE_CONTACTS ni so'rashingiz mumkin. Ammo bu ruxsat keng kirish huquqini beradi, bu esa ilovaga foydalanuvchi bilan o'zaro aloqasiz, orqa fonda qurilma bo'ylab kontaktlarga keng o'zgarishlar kiritish imkonini beradi. Ko'pchilik ilovalar bunday keng ruxsatga muhtoj emas."
- 26 400 jonli ma'lumot fosh etildi
Xitoyning eng yirik mahalliy Git xosting platformasi Gitee dagi 7,25 million ommaviy repozitoriy skanerlash natijasida 26 400 ta noyob tasdiqlangan jonli ma'lumot, jumladan yirik korporativ AI platformasi uchun faol tashkilot-administrator ma'lumoti va minglab jonli bulut provayderi kirish kalitlari aniqlangan, dedi mustaqil xavfsizlik tadqiqotchisi Ben Zimmermann.
- Fortinetning muhim tuzatishlari chiqarildi
Fortinet FortiOS, FortiManager va FortiAnalyzer uchun "muvofiqlashtirilgan xavfsizlik yangilanishlari to'plamini" e'lon qildi, bu AI yordamida zaiflikni aniqlash yondashuvi yordamida belgilangan muhim va yuqori darajadagi xatolarni bartaraf etadi. Muammolar tafsilotlari 2026-yil 10-noyabrgacha sir saqlanmoqda. Fortinet qurilmalari hujumchilar uchun sevimli nishonga aylanib borayotgani sababli, foydalanuvchilar tezda tuzatishlarni qo'llashlari muhim.
- Nol-ruxsat token o'g'irlash
Microsoft Authenticator dagi endi tuzatilgan xato (CVE-2026-80097 aka AuthMask) haqida tafsilotlar paydo bo'ldi, bu xatoni ta'sirlangan Android qurilmasiga zararli ilovani o'rnatish va ishga tushirish, so'ngra foydalanuvchini ilovada autentifikatsiya oqimini bajarishga ishontirish orqali ekspluatatsiya qilish mumkin edi, bu esa ishonchli ilova deb da'vo qilib tegishli tokenlarni olishga imkon berdi. Xato qo'shimcha ruxsatlarsiz ish hisoblarini egallash uchun ishlatilishi mumkin edi. "Muvaffaqiyatli ekspluatatsiya hujumchiga autentifikatsiya tokenlarini olish va ta'sirlangan foydalanuvchi sifatida resurslarga kirish imkonini berishi mumkin," dedi Microsoft. Enclave ga ko'ra, "nol ruxsatga ega imtiyozsiz Android ilovasi har qanday o'rnatilgan Microsoft birinchi tomon ilovasini taqlid qilishi va Microsoft Authenticator brokeri unga o'sha ilovaning tokenlarini berishi mumkin. Sozlama: Authenticator o'rnatilgan va bitta ish hisobi tizimga kirgan qurilma."
- 32 ta soxta AI bot sirlari qidirmoqda
Hujumchilar ma'lumot o'g'irlash uchun o'zlarini AI agentlari sifatida yashirmoqda. Cequence bitta aktor AI agent taqlidini keng miqyosda amalga oshirayotganini kuzatganini aytdi, bu aktor ChatGPT, Claude va Perplexity kabi taxminan 32 ta turli AI bot sifatida o'zini ko'rsatib, parollar, API kalitlari va bulut ma'lumotlarini qidirgan. "Zararli skaner yirik bulut provayderidan ishlaydi va OpenAI, Anthropic, Meta, Perplexity va boshqalardan kelgan taxminan 32 ta AI bot shaxsiyatlari orasida aylanishadi, bu esa skanerlovchilar va yordamchilarni o'z ichiga oladi," dedi Will Glazier. "U veb-sahifalarni e'tiborsiz qoldiradi va odatda sirlarni saqlaydigan fayllarni, jumladan .env konfiguratsiya fayllari, bulut ma'lumot fayllari, shaxsiy SSH kalitlari va server muhit ma'lumotlarini so'raydi, bu esa taxminan 90 ta fayl yo'li ro'yxatidan ishlaydi. Har bir manzil taxminan sakkiz soniyada 50 dan 190 gacha so'rovning qisqa to'plamini yuboradi va keyin davom etadi. Skaner maqsadlarni birma-bir, kecha-kunduz ishlaydi va avval veb-saytlar har bir so'rovga javob berishini aniqlash uchun tasodifiy bema'ni yo'llarni yuboradi, bu keng tarqalgan skanerlash texnikasi. U moliyaviy xizmatlar, chakana savdo, telekommunikatsiya, energetika va dasturiy ta'minot sohalaridagi tashkilotlarga hujum qildi va kamida sentyabr oxiridan oktyabr oxirigacha faol bo'ldi."
- Xitoy bilan bog'liq tarmoq buzilishi
Fiji dagi AQSh elchixonasi Xitoy bilan bog'liq xakerlar 2026-yil iyul va avgust oylari orasida Suvada joylashgan mintaqaviy tashkilot tarmog'iga kirganini oshkor qildi. "Xitoy bilan bog'liq xakerlar tashkilot tarmog'iga bir necha kun davomida kirish huquqini saqlab qolishdi," dedi u. Elchixona tahdid aktorini nomlamadi. Shuningdek, hujumchilar qanday ma'lumotlarga kirgan bo'lishi mumkinligini ham oshkor qilmadi.
- Kamera dasturiy ta'minoti qurolga aylantirildi
Huntress xavfsizlik firmasi tadqiqotiga ko'ra, hujumchilar kamera boshqaruv dasturiy ta'minoti orqali korporativ tarmoqlarga kirishmoqda, bu firma 2026-yil sentyabr va oktyabr oylarida bir nechta hodisalarni kuzatgan va ularni buzilgan ilovaga bog'lagan. Manba kod artefaktlari analog va IP kameralar hamda raqamli va tarmoq video yozuvchilarini sotadigan koreys kompaniyasiga ishora qiladi. Faoliyat qonuniy "WpcMon.exe" binar faylidan foydalanib, DLL larni yonma-yon yuklab, masofaviy serverga chiquvchi ulanishlarni o'rnatadi. "Bu faoliyat hujumchilar zararli kodni ishonchli Windows komponentlari bilan aralashtirib, aniqlashdan qochishlari mumkinligini ko'rsatadi," dedi Huntress.
- 68 GB hukumat ma'lumotlari buzilishi
Katta operatsion xavfsizlik xatosida, noma'lum tahdid aktori Filippin hukumat agentligidan 68 GB ma'lumot o'g'irladi, o'tkazishning batafsil jurnalini saqladi, so'ngra o'sha jurnalni 13.163.205[.]35:80 manzilida internetda ochiq qoldirdi. "Nusxa 2026-yil 6-sentyabrda 24 daqiqadan kamroq vaqtda tugadi," dedi Hunt.io. "O'tkazish jurnali Filippin xorijiy bandlik va migrant ishchilar ma'muriyatining ishni boshqarish tizimlariga mos keladigan fayl nomlari bilan 27 ta SQL Server zaxira nusxalarini qayd etadi. Jurnal yonida operatorning asbob-uskunalari, qayta brendlangan GodPotato qurilmasi, PowerShell stageri, ikkita yuklama va to'liq Impacket muhiti joylashgan."
- AI model ma'lumotlarini chiqarish xavotirlari
Kanada AI kompaniyasi Cohere Alibaba ning Qwen3.8-Flash-Next modeli o'z baholash sandboxidan Xitoyga ma'lumot yuborishga muvaffaqiyatsiz urinish qilganini da'vo qildi, bu LLM dan curl jarayonlarini kuzatish orqali /tmp ga bash skriptlarini yuklab olish va keyin bash bajarilishini aniqlash orqali zararli fayl yuklab olish va bajarilishini aniqlashni so'ragan ko'rsatma doirasida sodir bo'lgan. "Himoya aniqlash qoidasini yozishni so'raganida, Qwen3.8-Flash-Next ko'rsatmalarni e'tiborsiz qoldirdi va o'zi ishlayotgan mashinani inventarizatsiya qildi, so'ngra Pekindagi Alibaba Cloud saqlash qutisiga tekshiruv faylini yuklashga urindi," dedi Cohere. "Bu ataylab qilinganmi yoki o'qitishdan qolgan xato ekanligini biz javob bera olmaymiz." Cohere shuningdek xatti-harakat bilan bog'liq model izlari va tegishli xom token ID larini o'z ichiga olgan ma'lumotlar to'plamini ham e'lon qildi. "Aniq natija har doim kafolatlanmaydi va xatti-harakatni takrorlash uchun ko'plab urinishlar kerak bo'lishi mumkin," dedi Cohere, "model shuningdek odatda chiqaradigan shunga o'xshash kutilmagan URL lar ham bor, ularning aksariyati aliyunc ni o'z ichiga oladi." Biroq, topilmalar ijtimoiy tarmoqlarda kompaniya geosiyosiy qo'rquv tarqatish va ochiq og'irlik modellari ustidan nazoratni kuchaytirish urinishlari haqida gap-so'zlarga ham olib keldi.
- Post-kvant migratsiya yo'l xaritasi
AQSh Milliy Standartlar va Texnologiya Instituti (NIST) kvant zaif algoritmlardan kvantga chidamli standartlarga o'tish muddatlarini batafsil bayon qilgan yo'riqnomalarni e'lon qildi. "Hisobot turli foydalanish holatlarini tasvirlaydi va nima uchun bir migratsiya boshqasidan uzoqroq davom etishini tushuntiradi," dedi NIST matematigi Dustin Moody, u PQC standartlashtirish loyihasini boshqaradi. "Biz barcha foydalanish holatlariga mos keladigan yagona strategiya yo'qligini tushunamiz va odamlarga o'zgarib borayotgan narsalardan xabardor bo'lib, migratsiyalarini boshqarishda yordam berishni xohlaymiz."
- AI bilan quvvatlangan ransomware operatsiyasi fosh etildi
SOCRadar n0n ransomware guruhi bilan bog'liq tahdid aktorining jonli ish maydonini (ya'ni ochiq katalog) aniqladi, bu 2026-yil sentyabr holatiga ko'ra operatsiyaning to'liq ish jarayonini fosh etdi. 185.157.161[.]148 manzilidagi katalog AI kodlash agentini o'z ichiga oladi, bu agent taxminan 150 ta model bilan sozlangan va yuzlab hujum skriptlarini ishlab chiqaradi, foydalanish xarajatlari 7 216 dollardan ortiq. "Kirish nuqtalari 305 ta FortiGate SSL-VPN qurilmalariga qarshi ma'lumot to'ldirish kampaniyasi, fosh etilgan AWS kalitlari, zaif RDP/WinRM ma'lumotlari va buzilgan xosting boshqaruv portallarini o'z ichiga oladi," dedi SOCRadar. Ish maydonida 14 ta mamlakatdagi kamida 23 ta tashkilot aniqlangan, jumladan AQSh sport chakana savdo do'koni, bulut provayderi, o'qituvchilar uyushmasi, Venesuela ISP si, Argentina vazirligi va farmatsevtika sho'ba korxonasi.
- Hukumat AI kirishi cheklangan
Shvetsiya hukumati xodimlarga sezgir ma'lumotlarni qayta ishlash bilan bog'liq xavfsizlik xavotirlari tufayli ish kompyuterlarida ChatGPT yoki Claude ning brauzerga asoslangan versiyalariga kirishni taqiqladi. "Rasmiylar bu modellarga ma'lumotlarni himoya qilish va xavfsizligini ta'minlash shartnomasiz sezgir ma'lumot kiritish modelga ma'lumot berilishi va o'qitish uchun saqlanishiga olib kelishi mumkinligidan xavotirda edilar," dedi Euro News
Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trusted software doing things it shouldn't.
There's a strange mix of clever tricks and careless mistakes. Hackers are borrowing trust from familiar apps, websites, and AI tools. Some are using AI to speed things up. Others are leaving their own attack files exposed. Not exactly careful work.
Different stories, familiar weak spots. Here's what showed up this week.
The threats change every week. Subscribe, and we’ll alert you when each new ThreatsDay Bulletin is out.
- PHP2Shell attacks persist
WordPress security company Wordefence said it's not aware of any WordPress site compromised through PHP2Shell (CVE-2026-109618 and CVE-2026-109619) as of October 28, 2026. "We continue to see PHP2Shell-related requests across the more than 5 million sites we protect," it said. "Those requests show ongoing scanning and exploitation attempts; they do not show whether an attempt succeeded. Our site-cleaning and incident response teams have not handled a WordPress compromise attributed to these vulnerabilities."
- 40,573 secrets exposed
Hudson Rock's investigation into the FortiBleed credential harvesting campaign has uncovered 975 newly identified domains and 40,573 exposed secrets, including 37,076 local-user records and 1,576 Active Directory LDAP bind records. The data comes from newly obtained 1,703 FortiGate source files associated with 1,689 host identifiers. "The configuration material dates to around February 2026, earlier than the likely May/June material examined in the first investigation," Hudson Rock said. The latest discovery has been codenamed FortiBleed 2.0.
- Institutional DNS hijacked
Threat actors have used domain shadowing to place illegal gambling content beneath legitimate school and government domains in two unrelated operations. "In both cases, an unauthorized party appears to have gained access to DNS administration and created records that the original domain owners may not have noticed," Infoblox said. "Because the resulting hostnames sat within established institutional namespaces, they provided especially useful infrastructure for search-engine optimization (SEO) and traffic acquisition." One cluster, linked to a threat actor called Hidden Hawk, has been found to add individual CNAME records that mapped institutional hostnames to gambling pages hosted largely on Cloudflare Pages. The second campaign exploiting an Indian government domain "delegated entire subzones to third-party authoritative nameservers and used a wildcard, allowing many hostnames to be managed outside the victim's DNS environment." Put differently, the unauthorized DNS access creates new institutional hostnames, which resolve to infrastructure serving illegal gambling doorway pages. The pages also leverage the established reputation of school and government namespaces to ensure that the malicious URLs show up prominently in search engine results.
- AI banking credential warning
Bank of America is reminding customers not to share banking credentials with AI agents. In an email blast to customers titled "Protecting your finances in the AI World," the financial institution urged customers to never share their username and password with another person or an outside service, "including an AI-enabled tool or agent that offers to act on your behalf."
- Android tightens contact access
Google has announced that an upcoming Android release will no longer be able to directly write to contacts with the WRITECONTACTS permission. "Instead, you can use the standard contact intents (ACTIONINSERT, ACTIONEDIT, and ACTIONINSERTOREDIT)," Google said. "Currently, if your app needs to save even one contact, you might be requesting WRITE_CONTACTS. But that permission grants broad access, allowing an app to make widespread changes to contacts across the device in the background, even without user interaction. Most apps don’t need such broad permission."
- 26,400 live credentials exposed
A scan of 7.25 million public repositories on Gitee, China's largest indigenous Git hosting platform, has uncovered 26,400 unique verified-live credentials, including an active organization-admin credential for a major enterprise AI platform and thousands of live cloud provider access keys, independent security researcher Ben Zimmermann said.
- Critical Fortinet fixes released
Fortinet has released a "coordinated set of security updates for FortiOS, FortiManager, and FortiAnalyzer" to address critical and high-severity flaws that were flagged using an AI-assisted vulnerability discovery approach. Details of the issues are being kept under wraps until November 10, 2026. With Fortinet devices becoming a favorite target for attackers, it's essential that users move quickly to apply the fixes.
- Zero-permission token theft
Details have emerged about a now-patched flaw in Microsoft Authenticator (CVE-2026-80097 aka AuthMask) that could be exploited by installing and running a malicious application on an affected Android device and convincing the user to complete an authentication flow in the app by claiming to be a trusted app and getting the corresponding tokens. The flaw could be exploited to take over work accounts without requiring additional permissions. "Successful exploitation could allow the attacker to obtain authentication tokens and access resources as the affected user," Microsoft said. According to Enclave, "an unprivileged Android app with zero permissions could impersonate any installed Microsoft first-party app and have the Microsoft Authenticator broker hand it that app's tokens. The setup is a device with Authenticator installed and one work account signed into it."
- 32 fake AI bots hunt secrets
Attackers are disguising themselves as AI agents to steal credentials. Cequence said it has tracked a single actor running AI agent impersonation at scale by posing as about 32 different AI bots, including ChatGPT, Claude, and Perplexity, while searching for passwords, API keys, and cloud credentials. "The malicious scanner runs from a major cloud provider and rotates through about 32 AI bot identities, spanning crawlers and assistants from OpenAI, Anthropic, Meta, Perplexity, and others," Will Glazier said. "It ignores web pages and requests files that commonly store secrets, including .env configuration files, cloud credential files, private SSH keys, and server environment data, working from a list of roughly 90 file paths. Each address sends a short burst of 50 to 190 requests in about eight seconds and then moves on. The scanner works through targets one at a time, around the clock, and first sends random nonsense paths to find websites that answer every request, a common scanning technique. It hit organizations in financial services, retail, telecommunications, energy, and software, and stayed active from at least late September through late October."
- China-linked network intrusion
The U.S. Embassy in Fiji has revealed that hackers linked to China broke into a regional organization based in Suva between July and August 2026. "Hackers with links to China maintained access to the organization's network over several days," it said. The embassy did not name the threat actor. Nor did it disclose what data the attackers may have accessed.
- Camera software weaponized
Attackers have been breaking into enterprise networks via camera management software, according to new research from security firm Huntress, which observed multiple incidents in September and October 2026 and traced them back to a compromised application. Source code artifacts point to a Korean company selling analog and IP cameras and digital and network video recorders. The activity abuses the legitimate "WpcMon.exe" binary to sideload DLLs that establish outbound connections to a remote server. "This activity demonstrates how attackers can blend malicious code with trusted Windows components to evade detection," Huntress said.
- 68 GB government data breach
In a major operational security blunder, an unknown threat actor stole 68 GB from a Philippine government agency, maintained a detailed log of the transfer, then left that log open on the internet at 13.163.205[.]35:80. "The copy finished in under 24 minutes on September 6, 2026," Hunt.io said. "The transfer log records 27 SQL Server backups whose filenames correspond to the case-management systems of a Philippine overseas-employment and migrant-worker administration. Beside the log sat the operator's toolkit, a rebranded GodPotato build, a PowerShell stager, two payloads and a full Impacket environment."
- AI model data exfiltration concerns
Canadian AI company Cohere has claimed that it caught Alibaba's Qwen3.8-Flash-Next model unsuccessfully attempting to send data to China from its evaluation sandbox as part of a prompt instructing the LLM to detect malicious file download and execution by monitoring for curl processes downloading bash scripts to /tmp followed by bash execution. "Asked to write a defensive detection rule, Qwen3.8-Flash-Next ignored instructions and inventoried the machine it was running on and then tried to upload a probe file to an Alibaba Cloud storage bucket in Beijing," Cohere said. "We cannot answer whether this is deliberate or a leftover glitch from training." Cohere has also released a dataset containing the model trace and corresponding raw token IDs in connection with the behavior. "The exact output is not guaranteed all the time, and many trials may be required to reproduce the behavior," Cohere said, adding "there are similarly unexpected URLs that the model also tends to output, most containing aliyunc." However, the findings have also led to social media chatter that the company is resorting to geopolitical fearmongering and that they are an attempt to clamp down on open-weights models.
- Post-quantum migration roadmap
The U.S. National Institute of Standards and Technology (NIST) has released guidelines that detail the timelines for transitioning away from quantum-vulnerable algorithms to quantum-resistant standards. "The report describes different use cases and says why one migration might take longer than another," said NIST mathematician Dustin Moody, who heads the PQC standardization project. "We understand there's not one strategy that fits all use cases, and we want to help people handle their migration while staying abreast of what's changing."
- AI-powered ransomware operation exposed
SOCRadar has uncovered the live workspace (i.e., open directory) of a threat actor tied to the n0n ransomware group, which exposed the operation's full workflow as of September 2026. The directory at 185.157.161[.]148 includes an AI coding agent configured with about 150 models to produce hundreds of attack scripts, with more than $7,216 in usage costs. "Entry points included a credential stuffing campaign against 305 FortiGate SSL-VPN devices, exposed AWS keys, weak RDP/WinRM credentials, and compromised hosting management portals," SOCRadar said. At least 23 organizations across 14 countries are said to have been identified in the workspace, including a U.S. sports retailer, a cloud provider, a teachers’ union, a Venezuelan ISP, an Argentine ministry and a pharmaceutical subsidiary.
- Government AI access restricted
The Swedish government has barred employees from accessing browser-based versions of ChatGPT or Claude on their work computers over security concerns relating to the processing of sensitive data. "Officials were concerned that entering sensitive information into these models without an agreement setting out how to protect and secure the data could lead to it being fed into the model and stored for training," Euro News reported.
- 42 repositories hijacked
JFrog and SafeDep have uncovered a campaign in which threat actors hijacked third-party 42 GitHub repositories across 11 owners to deploy payload blobs large enough "to evade the GitHub search and API paths normally used to find this kind of compromise." JFrog said, "The repositories contain execution hooks for AI coding assistants and IDEs, plus 12.9 to 13.7 MB polymorphic wrappers that all decode to the same hidden CI-publisher payload." The activity is assessed to be related to a Miasma-family npm worm propagated under various packages ending with "testmetest." According to SafeDep, the worm "shares code with Miasma 'Phantom Gyp' from June 2026 and adds the token-revocation wiper from Mini Shai-Hulud. The malicious versions steal credentials, spread to other packages and repositories, and install a wiper that deletes the home directory when the victim revokes the stolen GitHub token." Unsuspecting developers who installed the packages had their data stolen and repositories compromised with malicious code to produce further malicious testmetest releases and run shellpanel workflows targeting cPanel systems through CVE-2026-41940, overlapping with a prior campaign detailed by Socket in July 2026.
- Android banking malware-as-a-service
A new Android malware operation called MR ROBOT is targeting customers of Indian banks and transforming banking fraud into a subscription business, with cybercriminals renting customized banking trojans to steal OTPs, card details, UPI PINs and credentials while secretly forwarding calls to bypass security checks. "It is not a single-actor campaign but a rented crimeware platform: a master operator leases access to affiliates, who use a Telegram bot ('APK Shield) and a web control panel (v7.0) to build personalized banking trojans on demand and distribute them through fake Play-Store-style pages and messaging-app lures," CloudSEK said. The kit impersonates around 36 lure apps, including banks, utility providers, and government services. One affiliate is estimated to have intercepted 5407 text messages from 153 infected devices.
- MDM platforms abused for remote access
Threat actors are abusing legitimate mobile device management (MDM) platforms, like Hexnode and Rippling, by using social engineering to enroll devices or install management agents, per Huntress. "Once established, MDM provides a trusted, privileged path for malicious activity, such as deploying rogue RMM tools and maintaining remote access," it said.
- Critical Gotenberg RCE exploited
Threat actors are exploiting CVE-2026-42589 (CVSS score: 9.8), a critical remote code execution flaw in Gotenberg, to deliver a Go-based reverse shell called "cache_base." The flaw was patched in May 2026. According to VulnCheck, the activity originated from a residential Japanese IP address in early October 2026. "The execution flow is straightforward: acquire a lock, collect host information, connect to C2, register the victim, and open a shell," VulnCheck said. Over the past 30 days, the vulnerability has recorded 1,358 exploitation events from 128 unique source IP addresses.
- Discord discussions go public
Discord has announced it will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation, starting mid-December 2026. "Discussions in Discoverable Servers will soon be easier to find when you search the web, so you can find the answer you're looking for and step straight into the conversation on Discord," it said. The changes apply only to Discoverable Servers and do not extend to private servers and direct messages.
- 800+ ransomware victims claimed
The Gentlemen ransomware operation has claimed more than 800 victims across multiple regions and sectors, with most attacks targeting organizations in the U.S. and Europe. "The group supports multiple platforms, with ransomware variants targeting Windows, Linux, NAS, and BSD systems, allowing its affiliates to target a broad range of enterprise environments," Acronis said. "The group's operations include the use of EDR-killing tools. In a recent incident, a custom dropper was observed deploying vulnerable Safetica ProcessMonitorDriver [CVE-2025-70795] and Lenovo BootRepair.sys drivers to terminate security processes."
- AI model loading RCE risk
Pillar Security has disclosed an arbitrary-code-execution vulnerability in Unsloth's core model-loading path (CVE-2026-93348, CVSS score: 8.6). It has been fixed in unsloth_zoo 2026.8.14. "An attacker-controlled model configuration could cause Python code to execute during loading," researcher Ariel Fogel said. "The affected code ran inside the model-loading process, with access to whatever that process could read, modify, or authenticate to. In an AI development environment, that can include proprietary datasets, model artifacts, Hugging Face tokens, and cloud credentials. Exploitation required an affected loading path to process an attacker-controlled configuration."
- Unauthenticated root-level RCE
XBOW said it identified an unauthenticated, critical-severity remote code execution bug in a public web application belonging to the U.S. Election Assistance Commission (EAC). "The vulnerable application was a resource/logistics calculator, not a voting machine or voter registration system," XBOW researcher Ariel Walter Garcia said. "The flaw allowed an unauthenticated attacker to execute code as root inside the backend container, with access to locally protected resources and outbound network connectivity, a privileged foothold reachable via a crafted unauthenticated web request."
- Session-hijacking RAT emerges
A new remote access trojan called DarkCore comes with a dedicated browser that could let attackers access Gmail, WhatsApp, and MediaFire accounts using stolen sessions, while giving the impression that the activity is originating from the victim's own IP address. DarkCore was first advertised on cybercrime forums in August 2026. "The seller describes a browser that reuses those sessions to access work mailboxes, instant messaging apps, cloud storage and other services through the infected machine's IP address," BlackFog said. "The purpose is to make the access look like legitimate activity from the user."
- AI-powered malware framework
Cisco Talos has disclosed details of a new AI-integrated command-and-control (C2) framework called NIK C2. The implant features surveillance, theft, lateral movement, and evasion capabilities, including credential dumping, RDP session hijacking, process hollowing, and a C2-driven screen lock ransomware module. "NIK C2 contains a Windows implant, using which, an actor can dump credentials, stream the victim's keystrokes to collect the targeted victim's sensitive data, and instruct an integrated AI model to analyze the harvested data, all within the compromised session," Talos said. "In this framework, the actor has abused the OpenAI Chat Completions application programming interface (API), which is an HTTP endpoint that enables ChatGPT-style conversations programmatically. In addition to the features that enable theft, an actor can also deploy desktop screen-locking ransomware via the NIK C2 implant onto the victim machine, leading to a ransom demand in Bitcoin or USDT cryptocurrencies." Three different versions of the malware have been identified to date since August 12, 2026. Talos said NIK C2 alters adversary tradecraft by collapsing collection and exploitation into a single continuous session.
- Malicious PDF delivers backdoor
A phishing email using a FedEx tax invoice lure and containing a ZIP archive with a PDF has been observed triggering a multi-stage infection process to deliver a previously undocumented variant of the Sirius Backdoor. "The PDF abuses /OpenAction and /Launch objects to trigger an embedded Base64-encoded PowerShell command upon opening," Trellix said. "Execution relies on social engineering to trick the user into approving the PDF reader's security confirmation prompt. The PowerShell stager decrypts and reflectively loads a .NET assembly in memory. This loader performs process hollowing into legitimate Windows processes such as msbuild.exe, svchost.exe, etc., allowing the malware to operate under trusted process contexts." The final payload is SIRIUS, a Microsoft Visual C++ based backdoor with extended remote access capabilities.
- AI reshapes ransomware economics
A new analysis from Flare has revealed that threat actors are building a mixed AI toolkit, combining commercial models with local, open-weight, and jailbroken alternatives, as well as leaning on stolen AI credentials to shift costs to victims. "Where AI can help is with understanding systems, writing tools and troubleshooting. The threat actor still needs access, decisions and a way to obtain payment," Flare said. "If AI helps an affiliate write a working data-export script without hiring a specialist, the affiliate may avoid that specialist’s fee and the wait for their help. AI makes expertise cheaper to obtain only when the cost of using and checking its work is lower than the cost of the specialist help it replaces."
- Emerging data-extortion threat
A recently observed cyber-extortion actor named ScarlettGroup is publicly advertising alleged data compromises and uses negotiation deadlines and threatened disclosures to pressure targeted organizations. The group's dark web site listing includes victims from technology, education, government, and entertainment sectors. "ScarlettGroup demonstrates characteristics associated with financially motivated data-extortion operations, including public victim claims, deadline-based pressure, and underground forum activity," Foresiet said. "Its dedicated leak-site infrastructure and structured disclosure mechanism indicate an organized approach to promoting alleged compromises and exerting reputational pressure."
- Infostealers evolve into RATs
Following its disruption in June 2026 as part of Operation Endgame, StealC has returned four months later as Stadia. "This time it's not a stealer: it's a full remote access trojan," Varonis said. "The RAT's features include hidden desktop control, a live command shell, a file explorer, a process manager and an in-memory loader, with StealC's stealer welded on as one module among six. The actor behind Stadia is working hard to win back original StealC customers: every former StealC customer is offered a free month on the top ($900) tier." The development comes as Moonlock Lab revealed that the Icarus macOS stealer has similarly evolved from a smash-and-grab crypto and data stealer to a malware with remote-access capabilities. The new iteration is called ICMacOS. "The stealer is actively advertised on cybercrime forums by a Russian-speaking actor operating under the handle GlowComa, with feature updates regularly announced via Telegram," SOCRadar said. "GlowComa promotes ICMacOS alongside Icarus ClickFix, a companion panel designed to deliver payloads using malicious copy-and-paste terminal commands. The infection chain relies on initial dropper scripts to detect the host architecture and harvest administrator passwords using fake system dialogs before delivering the primary payload." Another macOS-focused stealer is Aokigahara, which goes beyond browsers, VPN clients, cryptocurrency wallets, FTP/SFTP clients, password managers, and email applications to also target AI applications and development tools. "The stealer collects authentication files, session data, and configuration files associated with Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and other tools," Check Point said. "Stolen AI credentials could offer opportunities for monetization. Usable credentials or session tokens could enable unauthorized access to paid AI services or the resale of compromised accounts."
That's the week's mess. Some attacks were clever, some were painfully simple, and a few attackers made life easier for the people investigating them. The common problem? Too much trust in things nobody was watching closely.
AI is adding new tricks, but the old ones aren't going anywhere. Stolen credentials, weak access controls, and forgotten bugs still get plenty of work done. New tools, familiar mistakes.
The useful part is knowing where those mistakes keep showing up. That's usually where the next problem starts.
Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.