Aviatrix Threat Research Center
Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.
The Aviatrix Threat Research Center provides security teams with:
- A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
- What attackers exploited, and which enforcement gaps let them move.
- Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.
Recent Breaches, Security Incidents & Vulnerabilities
AI-Powered Threat Analysis
Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.
Displaying 469 to 480 of 5924
E4del and PINHOLE RATs Turn FTP Services Into Covert Communication Channels
Cybersecurity researchers have identified a sophisticated new campaign employing FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) named E4del and PINHOLE. The threat actors behind this campaign are exploiting legitimate FTP services to establish command-and-control infrastructure while blending seamlessly with regular network traffic. This novel technique allows attackers to maintain persistent access to compromised systems while evading traditional detection methods that focus on more conventional C2 communication channels. The campaign demonstrates advanced operational security awareness and represents a significant evolution in how threat actors establish and maintain covert communication channels. This incident highlights the growing trend of threat actors exploiting legitimate services and protocols for malicious purposes, making detection increasingly challenging for traditional security tools. As organizations continue to expand their digital infrastructure, the abuse of standard network services like FTP for covert communication channels represents a critical blind spot in many security monitoring strategies.
3 weeks ago
Kill Chain
How Frontier AI Models Are Forcing a Vulnerability Management Revolution
The emergence of Frontier AI models like Anthropic's Mythos has fundamentally disrupted traditional vulnerability management practices by enabling machine-speed identification of zero-day flaws and automated exploit chaining. Organizations previously relying on CVSS scores, EPSS rankings, and CISA's KEV list now face an accelerated threat landscape where vulnerabilities are weaponized faster than legacy patching cycles can address them. This paradigm shift demands immediate transformation of vulnerability management programs toward exposure management frameworks that assess true organizational risk beyond traditional scoring metrics. The revolution requires automated patch deployment strategies, ring-based testing methodologies, and critical stakeholder conversations about uptime requirements versus security imperatives in an era of AI-driven exploit development. This transformation represents a critical inflection point as cybersecurity programs must evolve from reactive, siloed approaches to proactive, integrated vulnerability and patch management ecosystems capable of matching AI-driven threat velocity.
3 weeks ago
Kill Chain
How 24 Malicious npm Packages Turned Trusted Mirrors into Phishing Infrastructure
In August 2026, cybersecurity researchers discovered a sophisticated supply chain attack involving 24 malicious npm packages that exploited unpkg mirrors to host fake Cloudflare CAPTCHA pages. The threat actors embedded HTML files within npm packages that, when accessed through mirrors like unpkg.com, rendered convincing phishing pages designed to trick users into malicious actions. The campaign initially redirected victims to typosquat Microsoft login domains before pivoting to abuse KeyVal, a legitimate key-value store service, as a dead drop resolver to dynamically control redirection targets. This incident highlights the evolving threat landscape where attackers increasingly abuse legitimate infrastructure and trusted domains to bypass security controls. Supply chain attacks continue to surge as organizations struggle with securing third-party dependencies, while threat actors demonstrate growing sophistication in leveraging trusted services for malicious infrastructure, making detection and prevention more challenging for traditional security tools.
3 weeks ago
Kill Chain
Mirage2FA Campaign Exposes Critical Gaps in Traditional MFA Security
The Mirage2FA phishing-as-a-service campaign targeted over 4,500 organizations across the US and EU from 2024 to 2026, exploiting Microsoft 365 login flows to bypass two-factor authentication. Using adversary-in-the-middle (AiTM) techniques, attackers stole passwords and session cookies, achieving a 48% compromise rate among targeted email addresses. The campaign primarily affected US-based companies in technology, manufacturing, and education sectors, with attackers gaining authenticated access to Microsoft 365 sessions and SSO-connected services, enabling account impersonation and data theft. This incident highlights the evolving threat landscape where traditional MFA is insufficient against sophisticated phishing operations that steal active sessions rather than just credentials, demonstrating the urgent need for phishing-resistant authentication methods and enhanced session management controls.
3 weeks ago
Kill Chain
Critical Code Injection Flaw in Marimo Notebooks Exposes AI Development Environments
In August 2026, Marimo addressed a critical code injection vulnerability (CVE-2026-75149) in its notebook software that allowed attackers to execute malicious Model Context Protocol (MCP) commands through specially crafted notebooks. The flaw, scoring 8.7-8.8 on CVSS scales, enabled arbitrary command execution as local subprocesses when victims opened malicious notebooks in edit mode, requiring no authentication but needing user interaction. Marimo patched the vulnerability in version 0.23.15 by implementing configuration allowlisting to treat notebook metadata as attacker-controlled content. This incident highlights the growing security risks in AI development environments as organizations increasingly adopt notebook-based workflows for machine learning and data science projects. With the rise of collaborative AI development and shared notebook repositories, similar supply chain attacks targeting development tools are becoming more prevalent.
3 weeks ago
Kill Chain
CISA Escalates Oracle HTTP Server Vulnerability to KEV Status After Active Exploitation
CISA has added CVE-2026-21962, an improper access control vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in, to its Known Exploited Vulnerabilities (KEV) Catalog following evidence of active exploitation in the wild. This vulnerability poses significant risks to federal enterprises and allows attackers to bypass authentication mechanisms, potentially leading to unauthorized system access and data compromise. The addition reinforces CISA's Binding Operational Directive (BOD) 26-04, which mandates federal agencies prioritize rapid remediation of high-risk vulnerabilities that grant total control of assets post-exploitation. This incident highlights the ongoing trend of state-sponsored and cybercriminal groups increasingly targeting enterprise web infrastructure vulnerabilities, particularly Oracle systems that are widely deployed across government and critical infrastructure sectors, making immediate patching and risk assessment essential.
3 weeks ago
Kill Chain
CISA Red Team Assessment Exposes Critical Gap Between Strong and Weak SOC Operations
CISA conducted simultaneous red team assessments at two organizations in August 2026, revealing stark differences in defensive capabilities. Both organizations suffered full domain compromise and sensitive business system access, but Organization A failed to detect any malicious activity while Organization B rapidly identified and contained threats within 2-20 minutes. The assessments exposed critical gaps in cloud security, Active Directory configurations, and incident response processes across both critical infrastructure entities. This incident highlights the growing sophistication of identity-based attacks and the urgent need for organizations to mature their cloud security postures as threat actors increasingly target hybrid environments and exploit authentication mechanisms like Entra ID and AWS IAM.
3 weeks ago
Kill Chain
Critical NVIDIA NemoClaw Vulnerability Enables AI Model Hijacking Through Web Browsers
In August 2026, Oasis Security disclosed a critical vulnerability in NVIDIA NemoClaw that allows malicious webpages to gain unauthenticated control over local Ollama AI model instances through DNS rebinding attacks. The vulnerability exploits NemoClaw's configuration that binds Ollama to all network interfaces (0.0.0.0:11434) on Windows and WSL systems, bypassing authentication and CORS protections. Attackers can poison AI model chat templates with hidden instructions that persist across conversations, effectively taking control of AI agents and their associated tools and permissions. NVIDIA partially addressed the issue in v0.0.35 for macOS and Linux, but Windows installations remain vulnerable with only warnings implemented. This vulnerability highlights the growing attack surface of AI infrastructure and the critical need for secure-by-default configurations in AI development frameworks, particularly as organizations rapidly deploy AI agents with access to sensitive systems and data.
3 weeks ago
Kill Chain
How Hostname Obfuscation Bypasses Cloud Security in SSRF Attacks
Attackers are increasingly using hostname obfuscation techniques to bypass IP-based blocklists in Server-Side Request Forgery (SSRF) attacks targeting cloud metadata services. Security researchers at SANS identified multiple methods where threat actors convert blocked IP addresses like 169.254.169.254 into resolvable hostnames using services like nip.io, sslip.io, and dynamic DNS tools such as 1u.ms. These techniques allow attackers to circumvent traditional IP filtering defenses and access sensitive cloud instance metadata, potentially leading to credential theft and privilege escalation in cloud environments. This attack vector represents a growing trend in cloud-native security evasion techniques, highlighting the inadequacy of simple blocklist-based defenses against modern SSRF exploitation methods targeting AWS, Azure, and GCP metadata services.
3 weeks ago
Kill Chain
AI-Enabled Malware in 2026: Separating Reality from Research Hype
Unit 42 researchers analyzed 405 AI-enabled malware samples between December 2024 and June 2025, discovering that only 12 samples (3%) reached production environments while 97% existed solely in research repositories and sandboxes. The study revealed that AI-enhanced threats like FunkSec ransomware, trojanized AI applications, and information stealers were successfully detected by existing security mechanisms without requiring novel detection approaches. All samples that attempted to reach customer environments were blocked by Palo Alto Networks products using behavioral analytics, sandbox analysis, and entropy detection. This research demonstrates the current reality of AI-powered cyber threats as threat actors increasingly integrate large language models into malware development cycles, accelerating iteration speeds and lowering barriers to entry while traditional security controls remain effective.
3 weeks ago
Kill Chain
Provenance Blockchain State Divergence: $500K DeFi Vulnerability Analysis
In March 2026, Trail of Bits discovered a critical vulnerability in Provenance Blockchain, a Cosmos SDK-based financial services platform, that allowed any user to grant themselves admin control over marker accounts without holding tokens. The bug affected 82 markers representing live financial assets worth approximately $500,000, including validator incentive funds and community grant programs. Exploitation required only two transactions: one to gain admin permissions through a flawed authorization check, and another to either mint new tokens or drain escrowed assets. This incident highlights the growing risks in blockchain application security as DeFi and tokenized assets become mainstream. State synchronization vulnerabilities in smart contract platforms represent a critical attack vector that can bypass traditional access controls.
3 weeks ago
Kill Chain
U.S. Treasury Launches 'Economic D-Day' Against Iranian Cyber Operations Targeting Critical Infrastructure
In January 2025, the U.S. Treasury Department sanctioned four Iranian hackers as part of an 'economic D-Day' campaign against Iran's cyber operations. The sanctioned individuals - Keyvan Fayyaz Ghareh Blagh, Saber Shahbazi Balujeh, Mohammad Reza Kadkhoda'i, and Mojtaba Ghal'eh-Kuhi - conducted sophisticated attacks against U.S. critical infrastructure since late 2023, successfully compromising and exfiltrating data from energy companies, defense contractors, healthcare institutions, IT companies, and financial institutions. These attacks were directed by Iran's Ministry of Intelligence and Security (MOIS), with hackers motivated by both state objectives and personal financial gain, leading some to also target Iranian domestic companies. This incident highlights the escalating cyber warfare between nation-states and the U.S. government's increasingly aggressive economic response to state-sponsored cyberthreats. The sanctions represent a significant shift toward treating cyber operations as acts of war requiring comprehensive economic retaliation rather than just cybersecurity countermeasures.
3 weeks ago
Kill Chain
Security Research & Insights
Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs
The Edge Device Isn't Your Last Line of Defense. It's Their First Target.
AI Trust Abuse: A Detection Engineer's Field Guide to Agent-Abuse Attacks
Aug 18, 2026
OpenAI Lost Control of Its Models. Then Anthropic Did Too. That Is Not a Coincidence.
Market Perspectives
Market Perspectives offering expert commentary and select breach analysis from industry leaders
What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust
The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures
HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data
How CNSF Protects Cloud Workloads
Cloud attackers don’t rely on a single exploit — they rely on paths.
Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.
Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.
With CNSF, enterprises can:
- Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
- Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
- Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
- Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.
See Your Attack Paths. Close the Gaps with CNSF.
Blast radius starts where your enforcement stops.
Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.
Your assessment delivers:
The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.
The threat landscape has changed.
Has your question changed with it?
In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.
This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.
Contain the Blast Radius
See the attack paths already present in your environment — and where CNSF containment controls would break them.
