✨ No need to do from scratch. Deploy a Validated Containment Architecture built for your AI platform. →Deploy a Validated Containment Architecture for your AI platform. →A Validated Containment Architecture for your AI platform. →Validated Containment Architectures are here. →Contain Threats NowExplore✨
Aviatrix Threat Research Center
Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.
The Aviatrix Threat Research Center provides security teams with:
- A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
- What attackers exploited, and which enforcement gaps let them move.
- Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.
Recent Breaches, Security Incidents & Vulnerabilities
AI-Powered Threat Analysis
Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.
Displaying 1 to 12 of 5467
Iranian Mabna Institute Hackers Sanctioned for Critical Infrastructure Breaches
In August 2026, the U.S. Treasury sanctioned five Iranian cyber actors affiliated with the Tehran-based Mabna Institute and Iran's Ministry of Intelligence and Security (MOIS) for conducting extensive compromises of U.S. critical infrastructure entities since late 2023. The threat actors successfully breached and exfiltrated data from energy companies, defense contractors, healthcare institutions, IT companies, and financial institutions, while also targeting local, state, and federal government offices in summer 2024. The group demonstrated dual motivations of state espionage and personal financial gain, with blockchain analysis revealing $16.8 million in cryptocurrency transactions across 30 wallets. This incident highlights the escalating cyber warfare between Iran and the U.S. following military strikes in February 2026, with Iranian threat actors increasingly targeting critical infrastructure as a form of asymmetric warfare. The emergence of coordinated hacktivist ecosystems and the blending of state-sponsored espionage with financially motivated cybercrime represents a significant evolution in nation-state threat actor behavior.
8 hours ago
Kill Chain
Zimbra's Critical RCE Flaw Highlights the New Reality of Emergency Patching
In August 2026, CISA issued a three-day emergency patching directive for CVE-2026-73570, a critical remote code execution vulnerability in Zimbra Collaboration Suite. The flaw allows unauthenticated attackers to execute arbitrary commands on servers with SNMP notifications enabled through specially crafted SMTP requests. Active exploitation was reported by Poland's CERT Polska, prompting the accelerated response timeline. Successful attacks provide access to email communications, calendars, contacts, and organizational intelligence that can facilitate follow-on attacks. This incident exemplifies the shrinking window between vulnerability disclosure and active exploitation, driven by AI-enabled exploit development that reduces the time from patch analysis to working exploits from weeks to mere days.
15 hours ago
Kill Chain
How Frontier AI Models Are Forcing a Vulnerability Management Revolution
The emergence of Frontier AI models like Anthropic's Mythos has fundamentally disrupted traditional vulnerability management practices by enabling machine-speed identification of zero-day flaws and automated exploit chaining. Organizations previously relying on CVSS scores, EPSS rankings, and CISA's KEV list now face an accelerated threat landscape where vulnerabilities are weaponized faster than legacy patching cycles can address them. This paradigm shift demands immediate transformation of vulnerability management programs toward exposure management frameworks that assess true organizational risk beyond traditional scoring metrics. The revolution requires automated patch deployment strategies, ring-based testing methodologies, and critical stakeholder conversations about uptime requirements versus security imperatives in an era of AI-driven exploit development. This transformation represents a critical inflection point as cybersecurity programs must evolve from reactive, siloed approaches to proactive, integrated vulnerability and patch management ecosystems capable of matching AI-driven threat velocity.
15 hours ago
Kill Chain
How 24 Malicious npm Packages Turned Trusted Mirrors into Phishing Infrastructure
In August 2026, cybersecurity researchers discovered a sophisticated supply chain attack involving 24 malicious npm packages that exploited unpkg mirrors to host fake Cloudflare CAPTCHA pages. The threat actors embedded HTML files within npm packages that, when accessed through mirrors like unpkg.com, rendered convincing phishing pages designed to trick users into malicious actions. The campaign initially redirected victims to typosquat Microsoft login domains before pivoting to abuse KeyVal, a legitimate key-value store service, as a dead drop resolver to dynamically control redirection targets. This incident highlights the evolving threat landscape where attackers increasingly abuse legitimate infrastructure and trusted domains to bypass security controls. Supply chain attacks continue to surge as organizations struggle with securing third-party dependencies, while threat actors demonstrate growing sophistication in leveraging trusted services for malicious infrastructure, making detection and prevention more challenging for traditional security tools.
16 hours ago
Kill Chain
Mirage2FA Campaign Exposes Critical Gaps in Traditional MFA Security
The Mirage2FA phishing-as-a-service campaign targeted over 4,500 organizations across the US and EU from 2024 to 2026, exploiting Microsoft 365 login flows to bypass two-factor authentication. Using adversary-in-the-middle (AiTM) techniques, attackers stole passwords and session cookies, achieving a 48% compromise rate among targeted email addresses. The campaign primarily affected US-based companies in technology, manufacturing, and education sectors, with attackers gaining authenticated access to Microsoft 365 sessions and SSO-connected services, enabling account impersonation and data theft. This incident highlights the evolving threat landscape where traditional MFA is insufficient against sophisticated phishing operations that steal active sessions rather than just credentials, demonstrating the urgent need for phishing-resistant authentication methods and enhanced session management controls.
16 hours ago
Kill Chain
Critical Code Injection Flaw in Marimo Notebooks Exposes AI Development Environments
In August 2026, Marimo addressed a critical code injection vulnerability (CVE-2026-75149) in its notebook software that allowed attackers to execute malicious Model Context Protocol (MCP) commands through specially crafted notebooks. The flaw, scoring 8.7-8.8 on CVSS scales, enabled arbitrary command execution as local subprocesses when victims opened malicious notebooks in edit mode, requiring no authentication but needing user interaction. Marimo patched the vulnerability in version 0.23.15 by implementing configuration allowlisting to treat notebook metadata as attacker-controlled content. This incident highlights the growing security risks in AI development environments as organizations increasingly adopt notebook-based workflows for machine learning and data science projects. With the rise of collaborative AI development and shared notebook repositories, similar supply chain attacks targeting development tools are becoming more prevalent.
16 hours ago
Kill Chain
CISA Red Team Assessment Exposes Critical Gap Between Strong and Weak SOC Operations
CISA conducted simultaneous red team assessments at two organizations in August 2026, revealing stark differences in defensive capabilities. Both organizations suffered full domain compromise and sensitive business system access, but Organization A failed to detect any malicious activity while Organization B rapidly identified and contained threats within 2-20 minutes. The assessments exposed critical gaps in cloud security, Active Directory configurations, and incident response processes across both critical infrastructure entities. This incident highlights the growing sophistication of identity-based attacks and the urgent need for organizations to mature their cloud security postures as threat actors increasingly target hybrid environments and exploit authentication mechanisms like Entra ID and AWS IAM.
16 hours ago
Kill Chain
Critical NVIDIA NemoClaw Vulnerability Enables AI Model Hijacking Through Web Browsers
In August 2026, Oasis Security disclosed a critical vulnerability in NVIDIA NemoClaw that allows malicious webpages to gain unauthenticated control over local Ollama AI model instances through DNS rebinding attacks. The vulnerability exploits NemoClaw's configuration that binds Ollama to all network interfaces (0.0.0.0:11434) on Windows and WSL systems, bypassing authentication and CORS protections. Attackers can poison AI model chat templates with hidden instructions that persist across conversations, effectively taking control of AI agents and their associated tools and permissions. NVIDIA partially addressed the issue in v0.0.35 for macOS and Linux, but Windows installations remain vulnerable with only warnings implemented. This vulnerability highlights the growing attack surface of AI infrastructure and the critical need for secure-by-default configurations in AI development frameworks, particularly as organizations rapidly deploy AI agents with access to sensitive systems and data.
16 hours ago
Kill Chain
AI-Enabled Malware in 2026: Separating Reality from Research Hype
Unit 42 researchers analyzed 405 AI-enabled malware samples between December 2024 and June 2025, discovering that only 12 samples (3%) reached production environments while 97% existed solely in research repositories and sandboxes. The study revealed that AI-enhanced threats like FunkSec ransomware, trojanized AI applications, and information stealers were successfully detected by existing security mechanisms without requiring novel detection approaches. All samples that attempted to reach customer environments were blocked by Palo Alto Networks products using behavioral analytics, sandbox analysis, and entropy detection. This research demonstrates the current reality of AI-powered cyber threats as threat actors increasingly integrate large language models into malware development cycles, accelerating iteration speeds and lowering barriers to entry while traditional security controls remain effective.
16 hours ago
Kill Chain
U.S. Treasury Launches 'Economic D-Day' Against Iranian Cyber Operations Targeting Critical Infrastructure
In January 2025, the U.S. Treasury Department sanctioned four Iranian hackers as part of an 'economic D-Day' campaign against Iran's cyber operations. The sanctioned individuals - Keyvan Fayyaz Ghareh Blagh, Saber Shahbazi Balujeh, Mohammad Reza Kadkhoda'i, and Mojtaba Ghal'eh-Kuhi - conducted sophisticated attacks against U.S. critical infrastructure since late 2023, successfully compromising and exfiltrating data from energy companies, defense contractors, healthcare institutions, IT companies, and financial institutions. These attacks were directed by Iran's Ministry of Intelligence and Security (MOIS), with hackers motivated by both state objectives and personal financial gain, leading some to also target Iranian domestic companies. This incident highlights the escalating cyber warfare between nation-states and the U.S. government's increasingly aggressive economic response to state-sponsored cyberthreats. The sanctions represent a significant shift toward treating cyber operations as acts of war requiring comprehensive economic retaliation rather than just cybersecurity countermeasures.
17 hours ago
Kill Chain
Critical Calix Router Flaw Exposes Millions of Home Networks to Internet Attackers
A critical unpatched vulnerability (CVE-2026-75501) in Calix GS7 XGS residential routers allows remote unauthenticated attackers to bypass NAT and firewall protections by creating arbitrary port-forwarding rules. The flaw affects EXOS/6.6.47 firmware and exposes the MiniUPnPd control endpoint on the WAN interface without authentication, enabling attackers to expose internal devices like cameras, NAS systems, and IoT appliances to the public internet with a single SOAP request. Major U.S. broadband providers including Cox Communications, Brightspeed, and ALLO deploy these vulnerable routers to residential customers. This vulnerability highlights the growing risk of perimeter-based security failures in an era where remote work and IoT adoption have expanded attack surfaces. With no vendor patch available and limited workarounds, this incident underscores the urgent need for zero-trust network architectures that don't rely solely on NAT and traditional firewall protections.
1 day ago
Kill Chain
Weedhack Malware Campaign Exploits Minecraft Community Through Advanced SEO Manipulation
In August 2026, cybersecurity researchers discovered that the Weedhack malware family continues to actively target Minecraft gamers through sophisticated SEO poisoning campaigns and fake gaming websites. The attackers created convincing replicas of legitimate Minecraft clients and tools, using platforms like Discord, MediaFire, and GitHub to distribute malicious JAR files. McAfee Labs detected over 6,300 attempts to access these malicious sites, which successfully outranked legitimate sources in search engine results. The malware establishes persistence by disabling Microsoft Defender, stealing sensitive data, and maintaining command and control communications. This incident highlights the growing sophistication of gaming-focused malware campaigns and the increasing use of AI-powered tools to create convincing fake websites. The success of these SEO poisoning techniques demonstrates how threat actors are adapting their distribution methods to exploit trusted platforms and search engine algorithms.
1 day ago
Kill Chain
Security Research & Insights
Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs
AI Trust Abuse: A Detection Engineer's Field Guide to Agent-Abuse Attacks
Aug 18, 2026
OpenAI Lost Control of Its Models. Then Anthropic Did Too. That Is Not a Coincidence.
Attackers Learned to Use AI. Now They Built Tools to Destroy It.
Market Perspectives
Market Perspectives offering expert commentary and select breach analysis from industry leaders
What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust
The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures
HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data
How CNSF Protects Cloud Workloads
Cloud attackers don’t rely on a single exploit — they rely on paths.
Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.
Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.
With CNSF, enterprises can:
- Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
- Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
- Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
- Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.
See Your Attack Paths. Close the Gaps with CNSF.
Blast radius starts where your enforcement stops.
Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.
Your assessment delivers:
The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.
The threat landscape has changed.
Has your question changed with it?
In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.
This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.
Contain the Blast Radius
See the attack paths already present in your environment — and where CNSF containment controls would break them.
