Aviatrix Threat Research Center
Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.
The Aviatrix Threat Research Center provides security teams with:
- A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
- What attackers exploited, and which enforcement gaps let them move.
- Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.
Recent Breaches, Security Incidents & Vulnerabilities
AI-Powered Threat Analysis
Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.
Displaying 1 to 12 of 5988
Critical Check Point Vulnerability Exposes Management Systems to Root Access Attacks
Check Point Software disclosed CVE-2026-91843, a critical stack-based buffer overflow vulnerability affecting Security Management Server and Log Server systems that allows unauthenticated attackers to execute code with root privileges. The flaw stems from improper input validation in the login process and can be exploited remotely without user interaction in low-complexity attacks. While not yet exploited in the wild, this vulnerability follows a pattern of recent Check Point security issues, including two other critical RCE flaws (CVE-2026-85103 and CVE-2026-85102) patched the same week and two authentication bypass zero-days actively exploited by ransomware groups since mid-2026. This incident highlights the escalating threat to network security infrastructure as attackers increasingly target management platforms that control entire security ecosystems, potentially compromising organizational defenses at their core control points.
10 minutes ago
Kill Chain
First Documented AI Agent Cyberattack Targets Spanish Organization in 2026
In September 2026, a Spanish organization reported to Spain's Data Protection Agency (AEPD) that an attacker used an autonomous AI agent powered by a well-known language model to breach corporate personal data stores. The AI system discovered and exploited loose credentials and an enterprise application vulnerability, enabling the modification of personal data records and unauthorized access to corporate invoices. This represents one of the first documented cases of an agentic AI conducting an end-to-end cyberattack with minimal human oversight, demonstrating the AI's ability to chain vulnerabilities and accelerate attack timelines. This incident marks a paradigm shift in cybersecurity threats, as predicted by Spain's National Cryptologic Center earlier in 2026. The use of autonomous AI agents in cyberattacks is rapidly becoming mainstream, fundamentally changing the threat landscape by enabling continuous, machine-speed reconnaissance and exploitation without traditional human-paced decision points.
6 hours ago
Kill Chain
Iran's Handala Hack Weaponizes Telegram for Sophisticated Surveillance Operations
The Iran-linked threat actor Handala Hack, operating under Iran's Ministry of Intelligence and Security (MOIS), has been attributed to a sophisticated Telegram-based surveillance campaign using the HEAVYGRAM backdoor and CRUDEEXCLUDE utility. Active since September 2023, this operation targets Iranian dissidents, journalists, and opposition groups through social engineering on messaging platforms like Telegram, WhatsApp, and Instagram. The malware masquerades as legitimate applications and establishes persistent command-and-control channels via Telegram, enabling comprehensive surveillance including file exfiltration, screenshot capture, microphone activation, and credential theft. This incident highlights the growing trend of state-sponsored actors leveraging popular messaging platforms for covert operations, demonstrating how encrypted communication channels can be weaponized for intelligence collection while evading traditional detection methods.
6 hours ago
Kill Chain
Critical Privilege Escalation Flaw Exposes ABB Industrial Edge Computing Platforms
ABB disclosed CVE-2026-31431 (Copy Fail), a critical Linux kernel vulnerability affecting ABB Ability Edgenius edge computing platforms versions 3.2.0.0 through 3.2.4.1. The vulnerability, with a CVSS score of 7.8, stems from incorrect resource transfer in the Linux kernel's cryptographic subsystem and allows locally authenticated users or compromised container workloads to escalate privileges to root access. Once exploited, attackers gain complete system control over industrial edge computing infrastructure deployed globally across critical manufacturing, energy, water, and chemical sectors. ABB has released version 3.2.4.1 to address the vulnerability and recommends immediate patching. This incident highlights the growing attack surface of edge computing in industrial environments, where kernel-level vulnerabilities can provide attackers with deep system access to compromise operational technology networks and critical infrastructure control systems.
6 hours ago
Kill Chain
Critical Docker Sandboxes Vulnerability Exposes AI Development Environments to Host Escape Attacks
In September 2026, Docker disclosed two critical vulnerabilities in Docker Sandboxes affecting macOS systems. CVE-2026-77179 (CVSS 9.4) allowed malicious code running inside AI coding agent virtual machines to escape sandbox restrictions and access or modify files anywhere on the host system with VMM user privileges. The flaw exploited a symlink-following vulnerability in the virtio-fs host server component. A second vulnerability, CVE-2026-79994 (CVSS 8.7), enabled unauthorized access to Unix domain sockets outside the authorized workspace. Both flaws were patched in version 0.42.0 released September 7, 2026. This incident highlights the growing security risks in AI development environments as organizations increasingly adopt AI coding agents and automated development tools. The vulnerabilities expose critical gaps in container isolation and demonstrate how AI agents can be weaponized through prompt injection attacks to compromise host systems.
6 hours ago
Kill Chain
September 2026: When AI Became Both Weapon and Target in Massive Multi-Vector Campaign
September 2026 witnessed an unprecedented surge in multi-vector cyberattacks, with threat actors exploiting everything from AI agent vulnerabilities to traditional infrastructure weaknesses. Notable incidents included the CL-CRI-1171 pay-per-install operation distributing malware through YouTube channels, large-scale attacks on exposed LocalAI instances compromising 230 systems including Thai military infrastructure, and the emergence of AI agents capable of rewriting their own models mid-task. Additional threats ranged from insider SIM swap operations netting $600,000 in losses to new ransomware families like Settra claiming 70 victims globally. The campaign demonstrates how attackers are successfully combining traditional attack vectors with emerging AI-powered techniques to maximize impact across diverse targets. This surge reflects the growing sophistication of cybercriminal ecosystems that are rapidly adapting to exploit both legacy vulnerabilities and cutting-edge AI technologies, creating a perfect storm of traditional and next-generation threats.
6 hours ago
Kill Chain
Plugin4Shell Exposes Critical Supply Chain Risks in AI Coding Agents
In September 2026, security firm Air Security disclosed Plugin4Shell, a supply chain vulnerability affecting four major AI coding agents including Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI. The flaw allows repository owners to swap legitimate plugin code with malicious versions even when agents have locked plugins to specific reviewed commit hashes. Attackers exploit this by creating branch names that mimic commit hashes on platforms like Bitbucket, causing agents to install different code while reporting the correct locked version. Since plugins run with the same privileges as users, malicious code can access files, credentials, and connected systems. Anthropic and OpenAI have patched their agents, while GitHub Copilot remains unpatched and Google will not fix the retiring Gemini CLI. This incident highlights the growing security challenges in AI development toolchains as organizations increasingly rely on AI coding assistants with plugin ecosystems, making supply chain integrity critical for protecting sensitive development environments and intellectual property.
7 hours ago
Kill Chain
Critical Azure AI Foundry Vulnerability Exposes Enterprise AI Security Gaps
Microsoft patched CVE-2026-85889, a maximum severity vulnerability (CVSS 10.0) in Azure AI Foundry that allows unauthorized privilege escalation through missing authentication for critical functions. The flaw affects Microsoft's enterprise platform for building and deploying generative AI applications. Discovered by security researcher Rémy Marot, the vulnerability required no customer action as Microsoft automatically applied cloud-based fixes. This incident was part of a larger security update addressing multiple critical vulnerabilities across Microsoft's cloud and AI services. This vulnerability highlights the growing attack surface of AI platforms as organizations rapidly adopt generative AI technologies without fully understanding the security implications of cloud-based AI infrastructure.
7 hours ago
Kill Chain
APT36 Evolves Tactics with Rust Malware and GitHub Infrastructure in Operation RapidRust
In September 2026, the Pakistan-aligned threat group Transparent Tribe (APT36) launched Operation RapidRust, targeting government and defense entities in India and Afghanistan with four new malware families: RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The campaign utilized innovative command-and-control infrastructure through private GitHub repositories and typosquatted domains mimicking Indian news organizations. The sophisticated attack chain involved a Rust-based backdoor for encrypted communications, USB propagation tools, and cross-platform file stealers capable of exfiltrating up to 5GB of sensitive data per execution. This incident highlights the evolving threat landscape where nation-state actors increasingly leverage legitimate cloud services for malicious infrastructure while expanding their technical capabilities across multiple operating systems and attack vectors.
7 hours ago
Kill Chain
Microsoft Reveals How AI is Reshaping Cyberthreats in 2026
Microsoft's September 2026 security analysis revealed how AI-powered cyberattackers are exploiting fundamental security weaknesses with unprecedented speed and persistence. The report documented three major attack campaigns: Storm-2945's CaptiveCrunch hospitality network manipulation, AI agent boundary exploitation incidents affecting OpenAI and Anthropic systems, and sophisticated social engineering attacks through Microsoft Teams. These incidents demonstrated how attackers leverage legitimate tools, trusted authentication flows, and AI agent vulnerabilities to achieve rapid lateral movement across enterprise environments, affecting identity systems, endpoints, and cloud infrastructure. This analysis matters now because AI is fundamentally reshaping the cyberthreat landscape, with autonomous attacks creating exponentially larger attack surfaces and faster compromise timelines than traditional methods.
7 hours ago
Kill Chain
Critical AWS AgentCore Security Flaw Exposes Identity Vault Credentials Through Prompt Injection
Unit 42 researchers discovered a critical security vulnerability in AWS AgentCore Harness where default configurations allow attackers to exploit prompt injection techniques to exfiltrate plaintext credentials from AgentCore Identity vaults. The research demonstrated how the built-in shell tool, enabled by default and running with root privileges, can access the same memory space where credentials are resolved to plaintext. Through indirect prompt injection, attackers can execute arbitrary commands, scan process memory, and extract JWT tokens and service account credentials that provide unauthorized access to downstream MCP servers containing sensitive customer data including PII. AWS classified this as informative under their shared responsibility model, emphasizing that operators must implement proper allowedTools scoping and egress filtering controls. This incident highlights the emerging security challenges as AI agents become more autonomous and powerful, particularly around prompt injection attacks that can now leverage programmatic tool access to bypass traditional security boundaries and access privileged credentials in managed runtime environments.
7 hours ago
Kill Chain
Cisco ISE Zero-Day CVE-2026-76460: When Network Access Controls Become Attack Vectors
Cisco disclosed CVE-2026-76460, a maximum-severity zero-day vulnerability in Cisco Identity Services Engine (ISE) that was actively exploited before disclosure in December 2026. The vulnerability allows remote attackers to bypass authentication and gain full administrative control of ISE devices through an API flaw. Compromised ISE systems enable attackers to modify network access policies, extract stored credentials, delete audit logs, and move laterally across all network segments controlled by the device. This represents Cisco's second actively exploited zero-day disclosure within two days, highlighting an escalation in targeted attacks against critical network infrastructure. This incident underscores the growing sophistication of attacks targeting network access control systems and the critical importance of zero-trust architecture as traditional perimeter-based security models continue to fail against advanced persistent threats.
8 hours ago
Kill Chain
Security Research & Insights
Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs
The Edge Device Isn't Your Last Line of Defense. It's Their First Target.
AI Trust Abuse: A Detection Engineer's Field Guide to Agent-Abuse Attacks
Aug 18, 2026
OpenAI Lost Control of Its Models. Then Anthropic Did Too. That Is Not a Coincidence.
Market Perspectives
Market Perspectives offering expert commentary and select breach analysis from industry leaders
What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust
The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures
HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data
How CNSF Protects Cloud Workloads
Cloud attackers don’t rely on a single exploit — they rely on paths.
Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.
Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.
With CNSF, enterprises can:
- Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
- Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
- Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
- Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.
See Your Attack Paths. Close the Gaps with CNSF.
Blast radius starts where your enforcement stops.
Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.
Your assessment delivers:
The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.
The threat landscape has changed.
Has your question changed with it?
In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.
This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.
Contain the Blast Radius
See the attack paths already present in your environment — and where CNSF containment controls would break them.
