Find what you’re looking for

Help Desk Impersonation to Domain Takeover: Inside the ESC1 and ESC8 AD CS Attack Chain

In late October 2026, Microsoft Threat Intelligence documented two human-operated intrusions in which threat actors abused Microsoft Teams to impersonate IT help desk personnel, socially engineering users into granting remote desktop access via Quick Assist. Once inside, attackers staged portable Python, Bun, or Java runtimes, performed host and Active Directory reconnaissance, and exploited misconfigured Active Directory Certificate Services (AD CS) via ESC1 and ESC8 vulnerabilities. In Case 1, ESC1 template abuse yielded certificates for eight privileged accounts, enabling DCSync and subsequent data exfiltration via a renamed Rclone binary. In Case 2, PetitPotam coerced domain-controller NTLM authentication that was relayed to AD CS Web Enrollment (ESC8), converting a workstation foothold into a domain-controller Kerberos identity. These incidents highlight an accelerating pattern of identity-based intrusions that bypass traditional perimeter controls entirely. As organizations expand hybrid and cloud environments, misconfigured certificate infrastructure combined with social-engineering entry vectors represents a critical, underdefended attack surface that incident responders and security architects must prioritize immediately.

How a Fake Claude Code Extension Turned Developer Workstations Into SSH Backdoor Relays

On October 29, 2026, a tampered version of the Anthropic Claude Code extension (versions 2.1.312 and 2.1.313) was served via the Cursor IDE extension marketplace for approximately eleven hours. The injected JavaScript loader executed silently at module load time, collected host reconnaissance data, appended an attacker-controlled SSH public key, enabled the local SSH service, established a reverse SSH tunnel to a remote command-and-control server at 134.209.82.225, and installed platform-specific persistence mechanisms on macOS, Linux, and Windows. Microsoft Threat Intelligence confirmed that neither the Visual Studio Marketplace, npm, nor Anthropic's own systems were compromised; the attack was isolated to the Cursor marketplace supply chain. This incident illustrates how AI-branded developer tooling has become a high-value supply-chain target. As agentic AI coding assistants proliferate across enterprise developer workstations, adversaries are increasingly weaponizing trusted extension ecosystems to implant persistent backdoors, underscoring the urgency of extension vetting, egress controls, and zero-trust segmentation in developer environments.

Vapor Panda Used Agentic AI to Compromise 140 Targets in 11 Days—Here Is What That Means for Your Cloud Security

Beginning October 17, a China state-sponsored threat actor tracked by CrowdStrike as Vapor Panda deployed ARTEX—an agentic AI-powered penetration-testing framework paired with DeepSeek—to compromise approximately 140 of more than 200 targeted organizations across 14 countries in just 11 days. Targets spanned foreign ministries, defense and intelligence agencies, a European head-of-government office, and 19 U.S. organizations in pharmaceuticals, semiconductors, defense, nuclear, and financial sectors, as well as telecom providers in the United States, Belgium, and the Philippines. ARTEX enabled attack commands at rates exceeding 1,500 per hour—roughly 37 times the pace of traditional hands-on-keyboard intrusions—allowing simultaneous multi-target exploitation at near-zero marginal cost per victim. This campaign marks the first confirmed nation-state deployment of agentic AI at scale for offensive cyber operations. CrowdStrike reports agentic adversary attacks grew nearly threefold month-over-month, from roughly 45 incidents in September to 126 in October 2024 and climbing, signaling a structural shift in the speed, breadth, and economics of state-sponsored intrusion campaigns that defenders must urgently address.

Drupal Commerce Core Under Active Attack: What CVE-2026-118539 Means for Your E-Commerce Security

In October 2026, Drupal disclosed a critical access bypass vulnerability (CVE-2026-118539) in the Commerce Core module, affecting over 42,000 websites including Fortune 500 companies and research universities. The flaw, stemming from missing authorization controls on certain routes and entity fields, allows unauthenticated attackers to bypass access restrictions and financially impact e-commerce vendors. Drupal confirmed active exploitation in the wild and urged immediate upgrade to Commerce Core 3.3.13 or 8.x-2.41, alongside order audits. This follows a pattern of repeated critical Drupal flaws—including SQL injection and RCE vulnerabilities—being weaponized within days of disclosure. This incident reflects a broader surge in application-layer exploitation targeting widely deployed CMS and e-commerce platforms. Threat actors are systematically scanning for unpatched Drupal installations, and with ransomware groups previously abusing Drupal CVEs, the financial and reputational stakes for affected organizations are significant. Rapid patch cadence and runtime application controls have become non-negotiable for e-commerce operators.

CVE-2026-97229: Attackers Are Actively Exploiting GitLab's Maximum-Severity CI/CD RCE Flaw

In October 2026, CISA confirmed active exploitation of CVE-2026-97229, a maximum-severity (CVSS 10.0) remote code execution vulnerability in GitLab's CI/CD Regular Expression Compiler. Discovered by security researcher joaxcar and stemming from an integer overflow weakness, the flaw allows unauthenticated remote attackers to execute arbitrary code on GitLab servers via a specially crafted regular expression in pipeline configuration files. GitLab patched the issue in CE and EE versions 19.4.2, 19.3.5, and 19.2.8, while CISA added the CVE to its Known Exploited Vulnerabilities catalog and ordered federal agencies to remediate by Sunday under BOD 26-04. Nearly 2,800 internet-exposed GitLab instances remain potentially vulnerable. This incident is part of a broader pattern of GitLab vulnerabilities being weaponized in 2026, including a 2FA bypass and two additional critical RCE flaws patched earlier this year. The exploitation of DevSecOps platforms signals an escalating attacker focus on CI/CD supply chain infrastructure, where a single compromise can cascade into mass software supply chain breaches affecting downstream enterprise environments.

Trojanized Claude Code Extension Backdoored 5,000 Developer Machines via Cursor's Marketplace

On October 29, 2026, a trojanized version of Anthropic's Claude Code VS Code extension (v2.1.313) was distributed through Cursor's AI-powered code editor marketplace for approximately 11 hours, exposing up to 5,000 developers to malware. The malicious extension injected a JavaScript loader that silently collected system reconnaissance data—including Git email, hostname, and public IP—and attempted to install persistent SSH backdoors via macOS LaunchAgents or Windows scheduled tasks. Coding errors in the malware's SSH setup routines limited attacker access, but reconnaissance data was still transmitted to a remote server at 134.209.82[.]225. Cursor removed the extension, shut down its marketplace for auditing, and worked with the hosting provider to take the attacker's server offline. This incident underscores the growing threat of supply-chain attacks targeting AI-assisted developer tooling. As agentic AI tools become deeply embedded in software development workflows, adversaries are increasingly weaponizing trusted extension marketplaces to compromise developer endpoints at scale—making extension integrity verification and runtime behavioral monitoring critical priorities for security teams in 2026.

CVE-2026-98432: AI-Developed Exploit Achieves Remote Root on Unpatched Linux Servers in 53 Minutes

In October 2026, security researchers at Anthropic disclosed CVE-2026-98432, a critical use-after-free race condition in the Linux kernel's IPv4 TCP networking stack (CVSS 9.8) affecting kernel versions dating back to 4.4. The flaw is exploitable without authentication and, under conditions where a Multipath TCP (MPTCP) listener is active, enables full remote root code execution. Anthropic demonstrated that an unreleased Claude AI model developed a working exploit in approximately 53 minutes, bypassing KASLR to achieve arbitrary command execution as root. Widely deployed distributions including Ubuntu, RHEL, and Rocky Linux remain unpatched as of disclosure. This incident marks a watershed moment where AI-assisted offensive research accelerated exploit development against a critical infrastructure primitive—the Linux kernel itself. With Go 1.24 silently enabling MPTCP by default, the exposed attack surface is far larger than administrators realize, amplifying urgency across cloud-native, containerized, and hybrid environments running Linux workloads.

Trezor's Supply-Chain Wake-Up Call: A Hidden Cellular Implant Was Quietly Stealing Crypto Recovery Phrases

In October 2026, Trezor issued a warning after receiving a credible report that a Trezor Safe 5 hardware wallet purchased through Southeast Asian reseller CryptoBilis via Tokopedia contained a malicious hardware implant. An Indonesian buyer discovered an extra circuit board fitted with a cellular module and antenna inserted between the device's main board and screen. The implant was suspected of capturing the wallet recovery phrase displayed on screen and transmitting it over a mobile network. Trezor halted sales through CryptoBilis on October 9, 2026, and advised any affected users to immediately migrate assets to newly created wallets. The incident mirrors a confirmed implant attack on rival Ledger devices sold through the same reseller, where losses linked to a Singapore police advisory reached at least $3.5 million. This incident highlights a resurgence of sophisticated physical supply-chain attacks targeting high-value consumer hardware. As threat actors shift from software exploits to hardware-layer tampering, organizations and individuals relying on physical security devices face an expanded attack surface that traditional software-based defenses cannot address.

AI-Powered ARTEX: How Vapor Panda Turned Agentic LLMs Into a Weapon Against 200+ Global Organizations

Beginning October 17, 2026, the Chinese state-sponsored threat actor Vapor Panda (also tracked as Earth Estries) weaponized ARTEX, a Go-based agentic AI penetration-testing framework, to compromise or probe more than 200 organizations across foreign ministries, semiconductor firms, defense contractors, telecommunications providers, and financial institutions worldwide. Leveraging DeepSeek and a commercial LLM, ARTEX autonomously coordinated planner and worker agents to execute reconnaissance, credential spraying, SAML/XXE chaining, container escapes, and lateral movement—consuming roughly 1.4 billion input tokens in a single intrusion. Post-exploitation was confirmed at nine organizations, where the group deployed BLOODALCHEMY, a ShadowPad derivative, enabling persistent covert access at scale previously unachievable through manual operations. This campaign marks a qualitative shift in state-sponsored cyber espionage: agentic AI now allows a small operator team to run concurrent, multi-path intrusions across dozens of targets simultaneously. As ARTEX proliferates among multiple threat clusters, defenders must urgently reassess detection strategies, east-west segmentation, and egress controls designed for human-paced adversaries, not autonomous AI agents operating at machine speed.

CVE-2026-111585: When the Machine You're Helping Attacks You Back

In October 2026, TeamViewer disclosed CVE-2026-111585, a high-severity vulnerability (CVSS 8.8) affecting the TeamViewer Full Client on Windows, Linux, macOS, the Windows Portable edition, and the Android Remote Control app in all versions prior to 15.83. The flaw inverts the expected attacker-victim relationship: a malicious or compromised host machine can exploit a heap overflow in screen-size negotiation to crash—and on Windows, execute arbitrary code on—the connecting viewer's system. No authentication or additional user interaction beyond accepting the session is required, making exploitation trivially accessible in default configurations. The patch was released on October 29, 2026, with no known in-the-wild exploitation reported at disclosure. This vulnerability is significant because it weaponizes the trusted remote-access workflow itself, turning the helper into the target. As enterprises rely heavily on remote-support tooling for hybrid and distributed workforces, adversaries increasingly abuse or compromise managed endpoints to pivot upstream—making network-layer controls and anomaly detection around remote-access protocols more critical than ever.

Race to Exploit: How Attackers Launched 63,000 WordPress RCE Attempts in Under 24 Hours

On October 28, 2026, WordPress released version 7.1.4 to patch a high-severity unauthenticated remote code execution vulnerability affecting WordPress Core versions 4.7 through 7.1.3 (CVSS 8.1). The flaw stems from predictable, web-accessible staging paths used during full-package core upgrades, allowing attackers to interact with a staged WordPress installer during the brief update window. Within 24 hours of patch release, Wordfence blocked 62,969 exploitation attempts, with multiple threat actors polling vulnerable paths such as setup-config.php for up to 14.5 hours in an effort to win the race condition and achieve server-side PHP code execution. This incident underscores the growing trend of near-instant weaponization of disclosed vulnerabilities, where threat actors reverse-engineer patches within hours and launch coordinated, automated scanning campaigns at scale. The race-condition exploitation pattern and sustained polling behavior reflect increasingly sophisticated attacker automation targeting CMS platforms that underpin millions of business websites globally.

When Allies Become Attackers: Belarus APT FrostyNeighbor Deploys Wiper Against Ukrainian Critical Infrastructure

In Q2–Q3 2026, ESET researchers documented the first confirmed destructive cyberattack by a Belarus-aligned advanced persistent threat group, tracked as FrostyNeighbor (also known as UNC1151), against a Ukrainian manufacturing company critical to the country's transportation sector. The threat actor deployed Chisel, UltraVNC, Cobalt Strike, and a VBScript-based wiper distributed via Group Policy Objects, combining espionage-grade remote access tooling with destructive payload delivery. This escalation marks a strategic shift: a historically espionage-focused actor has crossed into destructive operations, acting as a force multiplier for Russian cyber objectives across the European theater. This incident signals a broader geopolitical realignment in offensive cyber operations. Belarus-linked groups are no longer operating as peripheral actors—they are increasingly executing campaigns that mirror Russian intelligence priorities, expanding the threat surface for NATO-adjacent nations, transportation networks, defense supply chains, and critical infrastructure operators across Europe.