Health Care / Life Sciences
Breach intelligence, attack campaigns, and threat reports targeting the Health Care / Life Sciences sector.
Explore Other Sectors
Health Care / Life Sciences Threat Reports
RatHat Android Malware: AI-Powered Threat Achieves Persistent Shell Access
In September 2026, cybersecurity researchers identified RatHat, a sophisticated Android malware operated by China-based threat actors that leverages artificial intelligence for device navigation and control. The malware spreads through smishing campaigns and malvertising, using multiple anti-analysis techniques to evade detection. Once installed, RatHat abuses Android's Accessibility services to enable ADB debugging, allowing attackers to maintain shell-level access even after the malicious app is uninstalled. The malware features overlay attacks for credential theft, screen recording, SMS interception, and communicates with generative AI systems to automate device interactions and navigation. This incident highlights the evolving sophistication of mobile threats, particularly the integration of AI-powered automation in malware operations and the abuse of legitimate Android debugging features for persistent access. As mobile devices become primary targets for state-sponsored actors, organizations face increased risks from advanced persistent threats that can maintain access beyond traditional app-based security controls.
1 day ago
Kill Chain
Critical Linux Kernel Vulnerabilities Added to CISA KEV Catalog
CISA has added two critical Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog in September 2026, following evidence of active exploitation in the wild. CVE-2025-39964, a race condition vulnerability, and CVE-2026-53266, an out-of-bounds write vulnerability, both target the Linux kernel and can grant attackers total system control post-exploitation. These additions reinforce the agency's Binding Operational Directive (BOD) 26-04, which mandates federal agencies prioritize rapid remediation of high-risk vulnerabilities on publicly exposed assets that could lead to complete system compromise. The identification of these actively exploited kernel vulnerabilities highlights the ongoing evolution of threat actor tactics targeting foundational infrastructure components. As organizations increasingly adopt cloud-native and hybrid architectures, kernel-level vulnerabilities represent critical attack surfaces that can bypass traditional security controls and enable privilege escalation across entire computing environments.
1 day ago
Kill Chain
Plugin4Shell Exposes Critical Supply Chain Risks in AI Coding Agents
In September 2026, security firm Air Security disclosed Plugin4Shell, a supply chain vulnerability affecting four major AI coding agents including Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI. The flaw allows repository owners to swap legitimate plugin code with malicious versions even when agents have locked plugins to specific reviewed commit hashes. Attackers exploit this by creating branch names that mimic commit hashes on platforms like Bitbucket, causing agents to install different code while reporting the correct locked version. Since plugins run with the same privileges as users, malicious code can access files, credentials, and connected systems. Anthropic and OpenAI have patched their agents, while GitHub Copilot remains unpatched and Google will not fix the retiring Gemini CLI. This incident highlights the growing security challenges in AI development toolchains as organizations increasingly rely on AI coding assistants with plugin ecosystems, making supply chain integrity critical for protecting sensitive development environments and intellectual property.
1 day ago
Kill Chain
Abandoned CDN Domain Hijack Exposes Supply Chain Blind Spot in Thousands of Websites
In July 2025, an abandoned Content Delivery Network (CDN) domain was re-registered by an unknown actor, creating a massive supply chain vulnerability affecting thousands of websites. The original CDN service had been discontinued years earlier, but its domain was allowed to expire while thousands of sites maintained hardcoded references to resources hosted under that domain. The new domain owner gained wildcard DNS control, enabling them to serve arbitrary content to any website still calling the abandoned hostnames. This incident mirrors the June 2024 polyfill.io compromise, where over 110,000 websites were affected when that JavaScript library domain changed ownership and began serving malicious redirects to mobile visitors. This incident highlights the growing threat of supply chain attacks targeting client-side dependencies and third-party resources. As organizations increasingly rely on external CDNs and JavaScript libraries, abandoned domains represent a significant blind spot in traditional security scanning and dependency management approaches.
1 day ago
Kill Chain
Critical Authentication Flaw Exposes Schneider Electric PowerChute Systems to Bypass Attacks
Schneider Electric disclosed a critical vulnerability (CVE-2026-13348) in PowerChute Serial Shutdown versions 1.5 and earlier, affecting UPS management software used globally across critical infrastructure sectors including energy, manufacturing, and IT facilities. The vulnerability enables attackers to perform unlimited authentication attempts when redirect handling is disabled, potentially leading to unauthorized system access and operational disruption of power management systems. The flaw carries a CVSS score of 5.3 and has been addressed in version 1.6 with automatic service restart upon installation. This incident highlights the growing security risks in industrial control systems and power management infrastructure, particularly as organizations increasingly digitize their operational technology environments. With critical infrastructure under heightened scrutiny following recent nation-state campaigns targeting power grids and manufacturing facilities, vulnerabilities in widely-deployed UPS management systems represent significant attack surface expansion for threat actors seeking to disrupt industrial operations.
1 day ago
Kill Chain
Critical Azure AI Foundry Vulnerability Exposes Enterprise AI Security Gaps
Microsoft patched CVE-2026-85889, a maximum severity vulnerability (CVSS 10.0) in Azure AI Foundry that allows unauthorized privilege escalation through missing authentication for critical functions. The flaw affects Microsoft's enterprise platform for building and deploying generative AI applications. Discovered by security researcher Rémy Marot, the vulnerability required no customer action as Microsoft automatically applied cloud-based fixes. This incident was part of a larger security update addressing multiple critical vulnerabilities across Microsoft's cloud and AI services. This vulnerability highlights the growing attack surface of AI platforms as organizations rapidly adopt generative AI technologies without fully understanding the security implications of cloud-based AI infrastructure.
1 day ago
Kill Chain
Microsoft Reveals How AI is Reshaping Cyberthreats in 2026
Microsoft's September 2026 security analysis revealed how AI-powered cyberattackers are exploiting fundamental security weaknesses with unprecedented speed and persistence. The report documented three major attack campaigns: Storm-2945's CaptiveCrunch hospitality network manipulation, AI agent boundary exploitation incidents affecting OpenAI and Anthropic systems, and sophisticated social engineering attacks through Microsoft Teams. These incidents demonstrated how attackers leverage legitimate tools, trusted authentication flows, and AI agent vulnerabilities to achieve rapid lateral movement across enterprise environments, affecting identity systems, endpoints, and cloud infrastructure. This analysis matters now because AI is fundamentally reshaping the cyberthreat landscape, with autonomous attacks creating exponentially larger attack surfaces and faster compromise timelines than traditional methods.
1 day ago
Kill Chain
Critical AWS AgentCore Security Flaw Exposes Identity Vault Credentials Through Prompt Injection
Unit 42 researchers discovered a critical security vulnerability in AWS AgentCore Harness where default configurations allow attackers to exploit prompt injection techniques to exfiltrate plaintext credentials from AgentCore Identity vaults. The research demonstrated how the built-in shell tool, enabled by default and running with root privileges, can access the same memory space where credentials are resolved to plaintext. Through indirect prompt injection, attackers can execute arbitrary commands, scan process memory, and extract JWT tokens and service account credentials that provide unauthorized access to downstream MCP servers containing sensitive customer data including PII. AWS classified this as informative under their shared responsibility model, emphasizing that operators must implement proper allowedTools scoping and egress filtering controls. This incident highlights the emerging security challenges as AI agents become more autonomous and powerful, particularly around prompt injection attacks that can now leverage programmatic tool access to bypass traditional security boundaries and access privileged credentials in managed runtime environments.
1 day ago
Kill Chain
Cisco ISE Zero-Day CVE-2026-76460: When Network Access Controls Become Attack Vectors
Cisco disclosed CVE-2026-76460, a maximum-severity zero-day vulnerability in Cisco Identity Services Engine (ISE) that was actively exploited before disclosure in December 2026. The vulnerability allows remote attackers to bypass authentication and gain full administrative control of ISE devices through an API flaw. Compromised ISE systems enable attackers to modify network access policies, extract stored credentials, delete audit logs, and move laterally across all network segments controlled by the device. This represents Cisco's second actively exploited zero-day disclosure within two days, highlighting an escalation in targeted attacks against critical network infrastructure. This incident underscores the growing sophistication of attacks targeting network access control systems and the critical importance of zero-trust architecture as traditional perimeter-based security models continue to fail against advanced persistent threats.
1 day ago
Kill Chain
Critical Cisco ISE Zero-Day Highlights Identity Infrastructure Attack Trends
In September 2026, Cisco disclosed CVE-2026-76460, a maximum-severity authentication bypass vulnerability in Identity Services Engine (ISE) and ISE Passive Identity Connector being actively exploited by threat actors. The flaw allows remote attackers to bypass authentication on API endpoints through crafted requests, gaining unauthorized access to affected devices without any configuration requirements. Cisco's PSIRT confirmed active exploitation in the wild, prompting CISA to add the vulnerability to its Known Exploited Vulnerabilities catalog with a mandatory three-day patching deadline for federal agencies. This incident highlights the escalating targeting of identity and access management infrastructure, as threat actors increasingly focus on bypassing authentication controls to establish persistent network access and facilitate lateral movement in Zero Trust environments.
2 days ago
Kill Chain
Microsoft's September 2026 Updates Break Windows Domain Authentication
Microsoft's September 2026 security updates KB5124008 and KB5124012 introduced critical domain authentication failures affecting Windows 11 enterprise environments. The updates automatically enabled Machine Identity Isolation enforcement mode, breaking domain trust relationships for organizations not running Windows Server 2025 Domain Functional Level. Affected users experienced credential validation errors despite correct usernames and passwords, requiring immediate registry modifications and secure channel resets to restore domain access. This incident highlights the risks of automatic security feature enforcement without proper infrastructure compatibility validation. The authentication failures demonstrate how security hardening measures can inadvertently create operational disruptions in hybrid enterprise environments, emphasizing the need for careful deployment planning and compatibility assessment before implementing new identity isolation mechanisms.
2 days ago
Kill Chain
AI-Powered Credential Harvesting: How Autonomous Attacks Are Rewriting Cybercrime Economics
In September 2026, Google Threat Intelligence Group documented sophisticated AI-powered credential harvesting campaigns where threat actors compromised cloud infrastructure and deployed multi-agent attack frameworks in under six hours. These autonomous systems managed vulnerability scanning, troubleshooting, and IP rotation with minimal human intervention, harvesting thousands of third-party credentials. The attacks demonstrated AI's ability to dramatically increase the speed and scale of credential theft operations, with AI-assisted phishing campaigns achieving 54% click-through rates compared to 12% for traditional methods. This incident represents a critical inflection point where AI transforms cybercrime economics, making credential theft operations exponentially more efficient and scalable while traditional authentication mechanisms struggle to distinguish between legitimate users and AI-powered attackers using stolen credentials.
2 days ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports