Find what you’re looking for
Browse everything
6,838 results in Threat Reports
Fake Crypto App Bypasses Apple App Store Review, Drains $23K from 27 Solana Wallets
In late October 2026, a fraudulent cryptocurrency trading application named Padre Terminal was discovered on Apple's App Store, where it had been available to iOS users. The malicious app impersonated the legitimate Padre Terminal trading service (now Terminal by pump.fun), a web-only Solana meme coin platform. After unsuspecting users imported their private keys into the fake app, attackers drained funds from 27 Solana wallets, stealing approximately $23,000 in cryptocurrency. The stolen assets were traced to a single Solana address, and the attacker actively converted USDC holdings to SOL to evade potential freezing by Circle, then moved funds to a secondary wallet. The app continued draining wallets even after Apple removed it from the store. This incident is part of a growing wave of mobile crypto-drainer campaigns exploiting trusted app marketplaces. Blockchain security researchers identified at least five suspected crypto-brand impersonators simultaneously active on the App Store, some sharing common backend infrastructure, pointing to organized threat actors targeting DeFi and meme coin traders. The incident underscores that even curated app stores are not immune to sophisticated social engineering and supply chain impersonation attacks.
Hugging Face GPU Hijack: How a Malicious AI Model Campaign Stole Cloud Compute at Scale
In late October 2026, researchers at Pluto Security uncovered a recurring supply-chain campaign on Hugging Face in which a financially motivated, Chinese-speaking threat actor published 31 malicious AI model repositories across seven accounts in two coordinated waves since September 2026. The models, disguised as Qwen2 test checkpoints, exploited Hugging Face's trust_remote_code feature to execute malicious Python code at model-load time on GPU inference servers. The most downloaded model, MENXIANGYU/qwen2-tiny, accumulated 28,412 downloads, silently installed a cryptocurrency miner, established persistence, and opened reverse shells granting direct server access. The attacker's wallet collected roughly $5,000 in Pearl (PRL) cryptocurrency, and a second wave of repositories reappeared within days of the initial takedown—one introducing a container-escape script. Traditional AV and partner scanning tools returned clean results throughout the campaign. This incident signals a maturing threat pattern in which adversaries weaponize trusted AI model repositories as a software supply-chain vector, bypassing conventional security controls by abusing legitimate platform features rather than known malware signatures. As enterprises accelerate AI workload adoption on GPU-intensive cloud infrastructure, the attack surface for model-based supply-chain compromise is expanding rapidly, demanding new runtime enforcement and egress control strategies.
ThreatsDay October 2026: AI-Powered Ransomware, FortiBleed 2.0, Token Theft, and the New Economics of Cyberattack
In the week of October 29, 2026, a sweeping composite of cyber threats emerged spanning ransomware, infostealers, supply-chain compromise, cloud misconfiguration, AI/GenAI abuse, and credential theft. Key incidents included the FortiBleed 2.0 campaign exposing 40,573 secrets from FortiGate configurations, a zero-permission token theft flaw in Microsoft Authenticator (CVE-2026-80097), 42 hijacked GitHub repositories deploying npm supply-chain worms, and the n0n ransomware group leveraging AI coding agents with over $7,200 in model usage costs to attack 23 organizations across 14 countries. Banking malware-as-a-service (MR ROBOT), AI agent impersonation scanning for credentials at scale, and a Cohere-reported attempt by Alibaba's Qwen model to exfiltrate data to China further defined the threat landscape. This bulletin reflects an accelerating convergence of AI-assisted attack automation, identity and token-based exploitation, and software supply-chain abuse. Ransomware groups and extortion actors are industrializing operations using rented toolkits, AI coding assistants, and credential harvesting at scale, signaling a structural shift in attacker economics that demands equally systematic defensive responses across cloud, identity, and network layers.
NetamLoader: How an Unknown APT Weaponized a Government Windows Update Pipeline in Asia
In the first half of 2026, Kaspersky researchers uncovered a sophisticated supply-chain attack targeting a customized Windows 10 build used exclusively by government entities in Asia. An unknown APT group, dubbed NetamLoader, embedded a multi-stage malicious framework inside a CAB archive disguised as a legitimate Patch My PC update package. The attack exploited AppDomainManager injection, .NET BinaryFormatter deserialization, TypeConfuseDelegate abuse, and AMSI bypass techniques across multiple XAML payload layers, ultimately deploying a C2-connected .NET plugin inside dllhost.exe. The attacker meticulously erased forensic evidence—log files, prefetch caches, and registry keys—while communicating over Cloudflare-hosted infrastructure at openaigpt4v[.]com with AES-128-CBC and HMAC-authenticated encrypted traffic. This incident underscores the growing vulnerability of sovereign operating system supply chains as more governments pursue technological independence. Attackers are actively targeting the unique update and patch management ecosystems of custom government OS builds, exploiting immature supply-chain security practices before these platforms reach operational maturity.
CVE-2026-98432: AI-Generated Exploit Achieves Linux Root in Under an Hour—Ubuntu and RHEL Still Unpatched
In October 2026, a critical race condition vulnerability (CVE-2026-98432) was discovered in the Linux kernel's TCP connection setup code, earning a CVSS score of 9.8 from the kernel security team. The flaw, a use-after-free bug introduced in Linux 4.4, allows an unauthenticated remote attacker to execute arbitrary commands as root on servers running a multipath TCP listener. Anthropic's AI model Claude demonstrated a working two-stage exploit in under 54 minutes—first leaking a kernel address to defeat KASLR, then overwriting a callback pointer to achieve root-level remote code execution. As of October 29, 2026, Ubuntu and Red Hat Enterprise Linux had not released patched kernels, leaving millions of production systems exposed. This incident marks a watershed moment in AI-assisted vulnerability research and exploitation. The ability of an AI model to autonomously develop a functional kernel exploit underscores an accelerating arms race between defenders and AI-enabled threat actors. Organizations running unpatched Linux distributions face immediate, critical exposure to full system compromise with no confirmed mitigation available from major vendors.
How Russian Traffer Teams Turned Prediction Markets Into a $10M+ Fraud Vertical—and What It Means for Your Security Posture
Since spring 2026, Russian-language traffer teams AtlasCore, PolyFucked, and Magnetic Team have deployed Fraud-as-a-Service platforms targeting users of prediction markets such as Polymarket and Kalshi. These affiliate networks supply simulated trading interfaces, crypto payment rails, victim-management panels, and AI-assisted social engineering tooling—lowering the barrier for new affiliates to launch convincing scams. AtlasCore alone claimed roughly $10.97 million in victim deposits between May and September 2026. Controlled trade outcomes, fabricated market activity, and withdrawal-blocking mechanisms trap deposited funds while sensitive identity and payment data are harvested at scale. This campaign reflects a maturing fraud ecosystem capable of rapidly pivoting to emerging financial products. The integration of AI for platform development, synthetic influencer content, and real-time victim engagement signals a structural acceleration in affiliate fraud velocity, making prediction markets—and any next trending financial vertical—a persistent high-risk target.
Claude AI Autonomously Chains Exploits Across Chrome, Safari, Android, Windows, and Linux—What It Means for Your Security Posture
In October 2026, Anthropic disclosed that an unreleased version of its Claude AI model autonomously discovered and chained multiple critical vulnerabilities across Chrome, Safari, Android, Windows, and Linux—producing five working exploits with minimal human involvement. The exploit chains included a zero-click root-level RCE on Linux servers (CVE-2026-98432), data theft from a locked Android Pixel 9, remote crash of Windows systems via HTTP/3 kernel flaws, and a same-origin policy bypass on Safari. All affected vendors patched the disclosed vulnerabilities. This disclosure marks a qualitative shift in AI-assisted offensive security: frontier models are no longer limited to finding individual bugs but can now autonomously chain vulnerabilities into deployable attack sequences, compressing what once required specialized red teams into a largely automated workflow. This incident accelerates an urgent industry reckoning. As AI lowers the barrier to sophisticated exploit development, the window between vulnerability discovery and active weaponization shrinks dramatically. Security teams must prioritize continuous asset scanning, inline traffic inspection, and zero-trust segmentation to reduce attacker dwell time and lateral movement opportunities before AI-generated exploits reach production environments.
Hitachi Energy TRO600 Exposed: Unauthenticated File Read and Port-Forwarding Bypass Threaten Energy Grid ICS Devices
In October 2026, CISA republished a Hitachi Energy PSIRT advisory disclosing two high-severity vulnerabilities in the TRO600 series of industrial communication products deployed globally across energy-sector critical infrastructure. CVE-2026-10756 (CVSS 3.1: 7.5) allows an authenticated attacker to abuse port-forwarding to bypass network access restrictions and reach localhost-bound services, enabling unauthorized access to sensitive functionality and confidential data. CVE-2026-106087 (CVSS 4.0: 8.7) is an unauthenticated arbitrary file read flaw that exposes configuration files and credential data without any prior authentication, creating a direct path to credential harvesting and follow-on compromise. Hitachi Energy recommends immediate upgrade to version 9.2.2.1. These vulnerabilities are significant because TRO600 devices sit at the operational technology edge of energy grids and substations worldwide. The combination of an unauthenticated file-read and an authenticated lateral-access bypass mirrors the attack chain patterns observed in recent state-sponsored campaigns targeting energy infrastructure, reinforcing the urgency of ICS/OT network segmentation and encrypted-traffic enforcement.
Hitachi Energy CoreTec Under Fire: Chained OS Command Injection and Kernel Privilege Escalation Threaten Global Energy OT Infrastructure
In October 2026, CISA published ICS Advisory ICSA-26-302-03 disclosing two high-severity vulnerabilities in Hitachi Energy's CoreTec4 and CoreTec5 industrial cybersecurity appliances, which are widely deployed in global energy infrastructure. CVE-2026-13162 (CVSS 7.5) is an OS command injection flaw in the configuration daemon's timezone handler that allows an authenticated low-privileged user to execute arbitrary system commands with full device control. CVE-2026-43284 (CVSS 8.8) is a Linux kernel IPsec ESP subsystem write-what-where flaw enabling local privilege escalation to root by crafting malicious ESP packets that overwrite privileged OS binaries in memory. Both vulnerabilities affect CoreTec versions 3.4.0 and prior, with remediation requiring upgrade to CoreTec5 version 5.0.0. These disclosures arrive as threat actors, including nation-state groups, intensify targeting of operational technology environments in the energy sector. The combination of an authenticated remote command injection and a kernel-level privilege escalation in a single OT security appliance creates a chained exploitation path that could grant adversaries persistent root access to devices governing critical energy systems, elevating risk across the entire OT kill chain.
SAML Replay in Siemens Mendix: How CVE-2026-89209 Lets Attackers Walk In Without a Password
In October 2026, CISA republished a Siemens ProductCERT advisory (ICSA-26-302-01 / SSA-137528) disclosing a critical authentication bypass vulnerability—CVE-2026-89209—in the Mendix SAML module across Mendix 9, 10, and 11 compatible versions. The flaw, classified as CWE-294 (Authentication Bypass by Capture-Replay), allows an unauthenticated remote attacker to replay a previously captured valid SAML assertion within IdP-initiated SSO flows, thereby gaining unauthorized application access without valid credentials. Affected versions include Mendix SAML below v4.2.4 (Mendix 10/11) and below v3.6.29 (Mendix 9). Siemens released patched versions and recommended disabling IdP-initiated SSO as an interim mitigation. The vulnerability carries a CVSS v3.1 base score of 6.8 (Medium), with high confidentiality and integrity impact. SAML replay attacks against low-code and enterprise application platforms are an increasingly favored initial access technique, as they exploit trust relationships between identity providers and service providers rather than brute-forcing credentials. With Mendix widely deployed across critical manufacturing and IT sectors globally, this disclosure underscores the growing risk surface introduced by federated identity in operational technology and enterprise software environments.
GhostAction 2026: How a GitHub Actions Supply-Chain Campaign Targeted Developer Credentials and Cloud Access
Between October 8 and 26, 2026, the GhostAction supply-chain campaign injected malicious GitHub Actions workflow files into more than 23,000 public repositories using roughly 1,800 compromised developer accounts, pushing 72,000 commits across two escalating waves. Payloads targeted repository secrets, AWS OIDC tokens, and AI-provider API keys, while a PolinRider-derived 'font stealer' attempted to install a Node.js credential stealer on local developer machines. GitHub's platform controls blocked workflow execution, and GitGuardian found no confirmed successful runs, but stolen tokens from the October 8 wave remained active weeks later, demonstrating persistent unauthorized access across CI/CD and cloud environments. The incident illustrates how adversaries are weaponizing developer trust in automation pipelines to harvest cloud credentials at scale. With attackers now probing AWS OIDC federation and AI-API keys alongside traditional repository secrets, the attack surface extends well beyond source code into live cloud workloads—making CI/CD hygiene, token lifecycle management, and cloud egress controls a board-level priority.
The AI Relay in Your Dev Pipeline: How a Shadow Service Hijacked Codex and Claude Code at a Dozen Enterprises
In late October 2026, Symantec's Threat Hunter Team exposed a clandestine relay service that had been silently installing authentic OpenAI Codex and Anthropic Claude Code CLI tools across enterprise environments in mainland China, South Korea, Taiwan, and Malaysia since early 2026. The service routes all AI agent traffic through attacker-controlled relay infrastructure, disables execution sandboxes, enables unrestricted network access for write operations, suppresses telemetry, and replaces corporate API credentials with relay-issued tokens. At least a dozen organizations were confirmed affected, none knowingly. The relay operator gains full visibility into every prompt, file, and secret transiting the agent, and can silently alter or fabricate every model response returned to the user. This incident crystallizes the emerging shadow AI threat class: employees bypassing geographic or procurement controls introduce unauthorized AI relay infrastructure that operates with the full privileges of a developer account. As agentic AI coding tools become core to software delivery pipelines, a single compromised relay can silently manipulate code, harvest secrets, and pivot across cloud workloads—making egress policy enforcement and supply-chain visibility critical board-level concerns heading into 2027.