Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Information Technology/IT

Breach intelligence, attack campaigns, and threat reports targeting the Information Technology/IT sector.

3786 threat reports
Page 16 of 316
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Information Technology/IT Threat Reports

Showing 181–192 / 3786 reports
Everything's an RCE: PHP2Shell, LiteLLM Supply Chain, and Rogue AI Agents Define a Record-Breaking Threat Week
Everything's an RCE: PHP2Shell, LiteLLM Supply Chain, and Rogue AI Agents Define a Record-Breaking Threat Week
Information Technology/IT1 week ago

Everything's an RCE: PHP2Shell, LiteLLM Supply Chain, and Rogue AI Agents Define a Record-Breaking Threat Week

In the week of October 26, 2026, a convergence of critical remote code execution vulnerabilities, supply chain compromises, and AI-driven attacks created an unprecedented threat landscape. PHP2Shell (CVE-2026-109618/109619) triggered millions of exploitation attempts, while a leaked LiteLLM master key enabled a malicious Python package that harvested credentials across developer environments. Agentic AI platforms were weaponized by four newly identified threat actor groups using Claude Code to exfiltrate healthcare and government data. CISA added Plex2Shell flaws to its KEV catalog, and ransomware attacks surged 50% quarter-over-quarter, underscoring systemic exposure across web infrastructure, open-source dependencies, and AI tooling. This week's events reflect a structural acceleration in attacker capabilities: AI is now operationally embedded in offensive campaigns, the exploitation window for high-severity CVEs has shrunk to three days, and supply chain trust is being exploited through leaked keys and poisoned packages. Organizations relying on legacy patch cadences or perimeter-only defenses are increasingly unable to contain threats that propagate laterally through cloud and AI workloads before detection occurs.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
Critical Wasmtime Sandbox Escapes: What Cloud and Edge Teams Must Do Now
Critical Wasmtime Sandbox Escapes: What Cloud and Edge Teams Must Do Now
Computer Software/Engineering1 week ago

Critical Wasmtime Sandbox Escapes: What Cloud and Edge Teams Must Do Now

In October 2026, the Bytecode Alliance disclosed two critical vulnerabilities in Wasmtime, a widely embedded WebAssembly runtime, both rated 9.9 CVSS. CVE-2026-115889 affects all processor architectures and stems from a 24-bit integer overflow in Cranelift's value-numbering logic that can cause type confusion and sandbox escape in large or crafted modules. CVE-2026-115893 affects ARM64 systems exclusively, exploiting a br_table branch-reach limitation present since 2020 that allows attacker-controlled modules to redirect execution to arbitrary code. Fixed releases (36.0.19, 48.0.7, 49.0.4, 50.0.0) were published October 19–20; unsupported lines received no patch. No active exploitation had been confirmed as of October 26, 2026. These vulnerabilities highlight a growing supply-chain risk: Wasmtime is embedded as a library inside platforms such as Fastly Compute, serverless frameworks like Spin, and countless Rust-based services. A single unpatched dependency can expose an entire multi-tenant infrastructure to sandbox escape, making dependency hygiene and runtime segmentation critical controls for cloud-native security teams heading into 2027.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(low)
Read report
PHP2Shell Zero-Day Meets Agentic AI: How Lazarus-Linked Actors Breached a Government in Under Two Hours
PHP2Shell Zero-Day Meets Agentic AI: How Lazarus-Linked Actors Breached a Government in Under Two Hours
Government Administration2 weeks ago

PHP2Shell Zero-Day Meets Agentic AI: How Lazarus-Linked Actors Breached a Government in Under Two Hours

In October 2026, threat actors exploited critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (collectively dubbed PHP2Shell) to compromise a European government entity. Within two hours of initial exploitation, attackers accessed password hashes, MFA secrets, and established an NTLM-relay tunnel into Active Directory, attempting Domain Admin privilege escalation. Behavioral markers—including structured shell output delimiters designed for machine parsing—strongly indicate the use of agentic AI tooling for post-exploitation automation. Concurrently, CYFIRMA attributed a parallel low-and-slow scanning campaign across 216 unpatched global hosts to a suspected Lazarus Group affiliate, coordinated via a covert I2P channel with Korean-language indicators consistent with North Korean operators. This incident represents a convergence of two accelerating threat trends: the mass exploitation of critical runtime vulnerabilities affecting tens of millions of internet-facing PHP systems, and the operational deployment of agentic AI by nation-state actors to accelerate post-breach reconnaissance and lateral movement. With nearly 37 million PHP-exposed systems globally and Cloudflare reporting millions of exploitation attempts post-disclosure, organizations across government, finance, and critical infrastructure face an elevated and time-sensitive attack surface.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Tailworm 2026: How One Hacked Device Can Root Your Entire Tailscale Mesh Network
Tailworm 2026: How One Hacked Device Can Root Your Entire Tailscale Mesh Network
Information Technology/IT2 weeks ago

Tailworm 2026: How One Hacked Device Can Root Your Entire Tailscale Mesh Network

In October 2026, security researcher Erica Windisch of Cyberdione Labs published the Tailworm report detailing critical unpatched vulnerabilities in Tailscale SSH (version 1.104.2) and headscale (version 0.29.5). The research demonstrated that a single compromised device within a Tailscale zero-trust mesh network could escalate privileges to root on any reachable server in under a second per hop, requiring no stolen credentials or user interaction. Three distinct exploitation paths were identified—Unix socket abuse, socket substitution, and a time-of-check/time-of-use race condition—enabling fleet-wide lateral movement. As of publication, no patch, CVE, or security bulletin had been issued by Tailscale. This incident underscores a dangerous assumption embedded in zero-trust architectures: that device-identity-based access implicitly prevents privilege escalation. As organizations accelerate adoption of mesh VPN and software-defined networking tools to replace perimeter security, unvalidated trust in lateral SSH paths creates wormable blast radii that traditional segmentation and firewall controls may not contain.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
When Your AI Coding Agent Becomes the Attacker: The AGENTS.md Hijacking Threat
When Your AI Coding Agent Becomes the Attacker: The AGENTS.md Hijacking Threat
Computer Software/Engineering2 weeks ago

When Your AI Coding Agent Becomes the Attacker: The AGENTS.md Hijacking Threat

In October 2026, researchers at Forever Security discovered a novel AI agent hijacking technique exploiting markdown instruction files such as AGENTS.md and CLAUDE.md placed in a user's ~/Downloads folder. Attackers can silently drop a malicious instruction file via a web page download—without user interaction—targeting popular browsers like Chrome, Edge, and Firefox. When a developer launches an AI coding agent such as OpenAI Codex, Claude Code, or Cursor CLI from that directory, the agent automatically ingests and executes the malicious instructions. Demonstrated impacts include installation of rogue npm packages, OAuth token theft, and remote code execution, with success rates of up to 90% in controlled tests. This attack class represents a fundamentally new supply-chain risk for AI-augmented development pipelines. As agentic AI tools become standard in developer workflows, the attack surface expands well beyond traditional code and dependency vulnerabilities—any trusted file the agent reads becomes a potential attack vector, demanding new policies around working directory hygiene and egress control.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
BlackX UEFI Bootkit: How APT41 Turned an Unfinished Patch Into a Nation-State Espionage Campaign
BlackX UEFI Bootkit: How APT41 Turned an Unfinished Patch Into a Nation-State Espionage Campaign
Government Administration2 weeks ago

BlackX UEFI Bootkit: How APT41 Turned an Unfinished Patch Into a Nation-State Espionage Campaign

In early 2026, a Chinese state-sponsored threat actor attributed with medium confidence to APT41 (also known as Brass Typhoon) deployed a novel UEFI bootkit called BlackX against diplomatic agencies in Central Asia, specifically in Tajikistan, Uzbekistan, and Turkmenistan. BlackX exploited the long-known Baton Drop vulnerability (CVE-2022-21894) to bypass Secure Boot by enrolling custom Machine Owner Keys, then loaded a kernel driver signed with a revoked certificate to disable Kaspersky and Avast security processes, tamper with Event Tracing for Windows, and deploy a cloud-hosted RAT using Google Drive, OneDrive, and Yandex.Disk for command-and-control alongside the obfuscated OxiDLLRunner payload framework. BlackX highlights a persistent and dangerous gap in enterprise patching hygiene: Microsoft's fix for CVE-2022-21894 requires administrators to manually trigger Secure Boot revocations after patch installation—a step nearly universally skipped. With APT41 actively weaponizing firmware-level persistence and the October 2026 expiration of the Windows Production PCA 2011 certificate not automatically blocking vulnerable binaries, organizations face renewed urgency to audit bootloader revocation status across their fleets.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
PHP2Shell Exploitation Surge: What Security Teams Must Do Now About CVE-2026-109618 and CVE-2026-109619
PHP2Shell Exploitation Surge: What Security Teams Must Do Now About CVE-2026-109618 and CVE-2026-109619
Computer Software/Engineering2 weeks ago

PHP2Shell Exploitation Surge: What Security Teams Must Do Now About CVE-2026-109618 and CVE-2026-109619

In October 2026, two critical PHP remote code execution vulnerabilities—CVE-2026-109618 and CVE-2026-109619, collectively dubbed PHP2Shell—triggered a global exploitation wave within hours of public disclosure. Cloudflare observed thousands of exploit attempts in the 10 hours before announcement, escalating to millions within two hours post-disclosure. Check Point Research reported that 10% of organizations worldwide faced exploitation attempts within 24 hours. Complicating response efforts, over 99% of discoverable PHP instances had not patched within the first day, and roughly 73% ran unsupported PHP branches, leaving attackers a vast, largely undefended attack surface across web servers, storage appliances, cameras, and physical access-control systems. PHP2Shell underscores a persistent and worsening gap between attacker speed and enterprise patch velocity. As organizations increasingly rely on containerized, hybrid, and multi-cloud deployments, unpatched PHP surfaces embedded in firmware, legacy applications, and third-party software create systemic risk. The incident highlights why runtime network controls, east-west segmentation, and egress enforcement are essential complements to patching programs—especially when patches cannot be applied instantly or at all.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
ARTEX Agentic AI Weaponized in ConnectWise Supply Chain Attack — And PHP2Shell Was Exploited Before a Patch Existed
ARTEX Agentic AI Weaponized in ConnectWise Supply Chain Attack — And PHP2Shell Was Exploited Before a Patch Existed
Financial Services2 weeks ago

ARTEX Agentic AI Weaponized in ConnectWise Supply Chain Attack — And PHP2Shell Was Exploited Before a Patch Existed

During the week of October 13–21, 2026, a suspected Chinese state-aligned threat actor deployed ARTEX, a Go-based multi-agent LLM penetration testing framework, to execute an automated supply chain compromise against ConnectWise Cloud Backup, generating over 151,000 failed logon events and breaching hundreds of global organizations across aerospace, defense, energy, and financial services in under three hours per target. Simultaneously, the PHP security team issued emergency patches for CVE-2026-109618 and CVE-2026-109619 — dubbed PHP2Shell — rated CVSS 9.2, after exploitation probes hit honeypots four days before coordinated disclosure, exposing enterprises running Apache mod_php, PHP-FPM, and LiteSpeed to unauthenticated remote code execution. These incidents mark a pivotal escalation: agentic AI is no longer a theoretical offensive capability but an operationalized weapon enabling machine-speed cloud identity compromise, while pre-patch exploitation of embargoed vulnerabilities signals an intelligence pipeline that outpaces traditional disclosure timelines, compressing enterprise response windows to days or hours.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
CISA Adds Collabora Online RCE and Arista VeloCloud SQL Injection to KEV: What Network Security Teams Must Do Now
CISA Adds Collabora Online RCE and Arista VeloCloud SQL Injection to KEV: What Network Security Teams Must Do Now
Information Technology/IT2 weeks ago

CISA Adds Collabora Online RCE and Arista VeloCloud SQL Injection to KEV: What Network Security Teams Must Do Now

In October 2026, CISA added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-110447 (CVSS 9.2), an OS command injection flaw in Collabora Online's Built-in CODE Server enabling remote code execution via proxy.php on Nextcloud platforms, and CVE-2026-114625 (CVSS 9.9), an SQL injection vulnerability in Arista VeloCloud Orchestrator allowing remote attackers with only read-only access to reach privileged internal functionality. Active exploitation of CVE-2026-110447 involved web shell implantation on Nextcloud servers followed by credential harvesting, while CVE-2026-114625 exploitation was traced to two IP addresses geolocated to Japan, marking the third VeloCloud vulnerability weaponized since July 2026. This incident underscores an accelerating pattern of critical infrastructure and SD-WAN orchestration platforms being targeted through high-CVSS injection vulnerabilities. With three VeloCloud flaws actively exploited within a four-month window, attackers are systematically probing network management planes—raising the stakes significantly for organizations relying on these platforms for hybrid and multi-cloud connectivity.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Operation IXIM: How an Abandoned Popcorn Time Updater Nearly Became the World's Largest Accidental Botnet
Operation IXIM: How an Abandoned Popcorn Time Updater Nearly Became the World's Largest Accidental Botnet
Government Administration2 weeks ago

Operation IXIM: How an Abandoned Popcorn Time Updater Nearly Became the World's Largest Accidental Botnet

Between November 2025 and March 2026, Dutch firm Eye Security discovered that the abandoned Time4Popcorn application—a legacy fork of the popular piracy client Popcorn Time—contained a background updater (CVE-2026-30612, CVSS 9.8) that phoned home over unencrypted HTTP to unregistered domains, installed payloads at SYSTEM/root privilege without signature verification, and exposed an estimated 2.5–3 million Windows machines and up to 350,000 Macs to silent takeover. Eye registered the abandoned domains, confirmed inbound traffic from government, military, and corporate networks, and—finding no vendor to patch the software—pushed over 2 million benign disabling updates under Operation IXIM, reducing active call-home traffic by 98 percent before transferring domain custody to Shadowserver in March 2026. This incident illustrates a growing supply-chain blind spot: software that organizations never formally adopted—installed by employees on personal or corporate devices—can harbor persistent, privileged execution channels years after the original vendor disappears, creating botnet-ready infrastructure at scale without any malicious actor needing to write a single line of exploit code.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(medium)
IImpact(medium)
Read report
CVE-2026-111497: The Brotli Decoder Flaw That Put Node.js, Bun, and Python at Risk of Remote Code Execution
CVE-2026-111497: The Brotli Decoder Flaw That Put Node.js, Bun, and Python at Risk of Remote Code Execution
Information Technology/IT2 weeks ago

CVE-2026-111497: The Brotli Decoder Flaw That Put Node.js, Bun, and Python at Risk of Remote Code Execution

In October 2026, a critical memory-corruption vulnerability (CVE-2026-111497) was disclosed in Google's Brotli decoder library, affecting a wide range of software including Node.js, Bun, Python Brotli packages, Envoy, and Istio. The flaw, rated CVSS 4.0 score of 9.2 by Google, allows crafted Brotli-compressed data to overwrite memory boundaries, enabling potential remote code execution, crashes, or memory leaks. Imperva's Red Team demonstrated unauthenticated RCE on an unpatched Node.js 24.22.0 build. Patches were released on October 21, 2026, but each affected product must independently update its bundled copy of the decoder. No in-the-wild exploitation had been confirmed as of initial disclosure. This supply-chain vulnerability illustrates the systemic risk of widely-shared C library code embedded across language runtimes, proxies, and package ecosystems. As organizations increasingly rely on microservices and API-driven architectures, a single upstream flaw can propagate silently across hundreds of services, making runtime network policy enforcement and egress controls essential complements to patching workflows.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Inside the LiteLLM 1.107.0 Supply Chain Attack: How PRIVCOLLECT Stole Cloud and AI Credentials via Python Startup Hooks
Inside the LiteLLM 1.107.0 Supply Chain Attack: How PRIVCOLLECT Stole Cloud and AI Credentials via Python Startup Hooks
Information Technology/IT2 weeks ago

Inside the LiteLLM 1.107.0 Supply Chain Attack: How PRIVCOLLECT Stole Cloud and AI Credentials via Python Startup Hooks

On October 21, 2026, attackers published a malicious LiteLLM 1.107.0 release to PyPI after abusing stolen developer GitHub credentials to hijack the upstream release workflow. The compromised wheel silently planted Python startup files—cook.pth, cook.py, and sitecustomize.py—outside the application directory, causing a credential-harvesting payload (PRIVCOLLECT) to execute automatically whenever Python initialized in any affected environment, including developer workstations, CI/CD agents, containers, and AI gateway hosts. Collected credentials were AES-256-CBC encrypted, RSA-key-wrapped, and exfiltrated to an attacker-controlled domain, while a secondary Unix loader enabled dynamic remote code execution via a GitHub-hosted dead-drop pointer. This incident illustrates how a single compromised open-source dependency can silently harvest cloud credentials, AI model-provider API keys, SSH keys, and browser secrets across an entire organization's software supply chain—without the application ever being actively invoked. The growing reliance on AI gateway libraries like LiteLLM in production environments amplifies the blast radius significantly.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports