Vital Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 Extra Tales

Hudson Rock’s investigation into the FortiBleed credential harvesting marketing campaign has uncovered 975 newly recognized domains and 40,573 uncovered secrets and techniques, together with 37,076 local-user data and 1,576 Lively Listing LDAP bind data. The information comes from newly obtained 1,703 FortiGate supply information related to 1,689 host identifiers. “The configuration materials dates to round February 2026, sooner than the doubtless Might/June materials examined within the first investigation,” Hudson Rock mentioned. The most recent discovery has been codenamed FortiBleed 2.0.

Risk actors have used area shadowing to put unlawful playing content material beneath reputable college and authorities domains in two unrelated operations. “In each circumstances, an unauthorized social gathering seems to have gained entry to DNS administration and created data that the unique area house owners could not have seen,” Infoblox mentioned. “As a result of the ensuing hostnames sat inside established institutional namespaces, they offered particularly helpful infrastructure for search-engine optimization (search engine optimization) and site visitors acquisition.” One cluster, linked to a menace actor referred to as Hidden Hawk, has been discovered so as to add particular person CNAME data that mapped institutional hostnames to playing pages hosted largely on Cloudflare Pages. The second marketing campaign exploiting an Indian authorities area “delegated whole subzones to third-party authoritative nameservers and used a wildcard, permitting many hostnames to be managed exterior the sufferer’s DNS setting.” Put in another way, the unauthorized DNS entry creates new institutional hostnames, which resolve to infrastructure serving unlawful playing doorway pages. The pages additionally leverage the established fame of faculty and authorities namespaces to make sure that the malicious URLs present up prominently in search engine outcomes.

Financial institution of America is reminding clients to not share banking credentials with AI brokers. In an e mail blast to clients titled “Defending your funds within the AI World,” the monetary establishment urged clients to by no means share their username and password with one other particular person or an outdoor service, “together with an AI-enabled instrument or agent that provides to behave in your behalf.”

Google has introduced that an upcoming Android launch will now not have the ability to straight write to contacts with the WRITE_CONTACTS permission. “As a substitute, you should use the usual contact intents (ACTION_INSERT, ACTION_EDIT, and ACTION_INSERT_OR_EDIT),” Google mentioned. “Presently, in case your app wants to save lots of even one contact, you is likely to be requesting WRITE_CONTACTS. However that permission grants broad entry, permitting an app to make widespread adjustments to contacts throughout the system within the background, even with out consumer interplay. Most apps don’t want such broad permission.”

A scan of seven.25 million public repositories on Gitee, China’s largest indigenous Git internet hosting platform, has uncovered 26,400 distinctive verified-live credentials, together with an energetic organization-admin credential for a significant enterprise AI platform and hundreds of reside cloud supplier entry keys, impartial safety researcher Ben Zimmermann mentioned.

Fortinet has launched a “coordinated set of safety updates for FortiOS, FortiManager, and FortiAnalyzer” to deal with crucial and high-severity flaws that have been flagged utilizing an AI-assisted vulnerability discovery strategy. Particulars of the problems are being stored below wraps till November 10, 2026. With Fortinet gadgets turning into a favourite goal for attackers, it is important that customers transfer shortly to use the fixes.

Particulars have emerged a couple of now-patched flaw in Microsoft Authenticator (CVE-2026-80097 aka AuthMask) that might be exploited by putting in and working a malicious software on an affected Android system and convincing the consumer to finish an authentication move within the app by claiming to be a trusted app and getting the corresponding tokens. The flaw might be exploited to take over work accounts with out requiring extra permissions. “Profitable exploitation might enable the attacker to acquire authentication tokens and entry assets because the affected consumer,” Microsoft mentioned. In line with Enclave, “an unprivileged Android app with zero permissions might impersonate any put in Microsoft first-party app and have the Microsoft Authenticator dealer hand it that app’s tokens. The setup is a tool with Authenticator put in and one work account signed into it.”

Attackers are disguising themselves as AI brokers to steal credentials. Cequence mentioned it has tracked a single actor working AI agent impersonation at scale by posing as about 32 totally different AI bots, together with ChatGPT, Claude, and Perplexity, whereas looking for passwords, API keys, and cloud credentials. “The malicious scanner runs from a significant cloud supplier and rotates by means of about 32 AI bot identities, spanning crawlers and assistants from OpenAI, Anthropic, Meta, Perplexity, and others,” Will Glazier mentioned. “It ignores net pages and requests information that generally retailer secrets and techniques, together with .env configuration information, cloud credential information, non-public SSH keys, and server setting knowledge, working from an inventory of roughly 90 file paths. Every handle sends a brief burst of fifty to 190 requests in about eight seconds after which strikes on. The scanner works by means of targets one after the other, across the clock, and first sends random nonsense paths to search out web sites that reply each request, a typical scanning method. It hit organizations in monetary providers, retail, telecommunications, vitality, and software program, and stayed energetic from not less than late September by means of late October.”

The U.S. Embassy in Fiji has revealed that hackers linked to China broke right into a regional group based mostly in Suva between July and August 2026. “Hackers with hyperlinks to China maintained entry to the group’s community over a number of days,” it mentioned. The embassy didn’t identify the menace actor. Nor did it disclose what knowledge the attackers could have accessed.

Attackers have been breaking into enterprise networks by way of digicam administration software program, in accordance with new analysis from safety agency Huntress, which noticed a number of incidents in September and October 2026 and traced them again to a compromised software. Supply code artifacts level to a Korean firm promoting analog and IP cameras and digital and community video recorders. The exercise abuses the reputable “WpcMon.exe” binary to sideload DLLs that set up outbound connections to a distant server. “This exercise demonstrates how attackers can mix malicious code with trusted Home windows elements to evade detection,” Huntress mentioned.

In a significant operational safety blunder, an unknown menace actor stole 68 GB from a Philippine authorities company, maintained an in depth log of the switch, then left that log open on the web at 13.163.205[.]35:80. “The copy completed in below 24 minutes on September 6, 2026,” Hunt.io mentioned. “The switch log data 27 SQL Server backups whose filenames correspond to the case-management techniques of a Philippine overseas-employment and migrant-worker administration. Beside the log sat the operator’s toolkit, a rebranded GodPotato construct, a PowerShell stager, two payloads and a full Impacket setting.”

Canadian AI firm Cohere has claimed that it caught Alibaba’s Qwen3.8-Flash-Subsequent mannequin unsuccessfully trying to ship knowledge to China from its analysis sandbox as a part of a immediate instructing the LLM to detect malicious file obtain and execution by monitoring for curl processes downloading bash scripts to /tmp adopted by bash execution. “Requested to put in writing a defensive detection rule, Qwen3.8-Flash-Subsequent ignored directions and inventoried the machine it was working on after which tried to add a probe file to an Alibaba Cloud storage bucket in Beijing,” Cohere mentioned. “We can not reply whether or not that is deliberate or a leftover glitch from coaching.” Cohere has additionally launched a dataset containing the mannequin hint and corresponding uncooked token IDs in reference to the habits. “The precise output is just not assured on a regular basis, and plenty of trials could also be required to breed the habits,” Cohere mentioned, including “there are equally sudden URLs that the mannequin additionally tends to output, most containing aliyunc.” Nonetheless, the findings have additionally led to social media chatter that the corporate is resorting to geopolitical fearmongering and that they’re an try and clamp down on open-weights fashions.

The U.S. Nationwide Institute of Requirements and Know-how (NIST) has launched tips that element the timelines for transitioning away from quantum-vulnerable algorithms to quantum-resistant requirements. “The report describes totally different use circumstances and says why one migration may take longer than one other,” mentioned NIST mathematician Dustin Moody, who heads the PQC standardization venture. “We perceive there’s not one technique that matches all use circumstances, and we wish to assist folks deal with their migration whereas staying abreast of what is altering.”

SOCRadar has uncovered the reside workspace (i.e., open listing) of a menace actor tied to the n0n ransomware group, which uncovered the operation’s full workflow as of September 2026. The listing at 185.157.161[.]148 contains an AI coding agent configured with about 150 fashions to provide a whole bunch of assault scripts, with greater than $7,216 in utilization prices. “Entry factors included a credential stuffing marketing campaign towards 305 FortiGate SSL-VPN gadgets, uncovered AWS keys, weak RDP/WinRM credentials, and compromised internet hosting administration portals,” SOCRadar mentioned. At the very least 23 organizations throughout 14 international locations are mentioned to have been recognized within the workspace, together with a U.S. sports activities retailer, a cloud supplier, a lecturers’ union, a Venezuelan ISP, an Argentine ministry and a pharmaceutical subsidiary.

The Swedish authorities has barred workers from accessing browser-based variations of ChatGPT or Claude on their work computer systems over safety considerations regarding the processing of delicate knowledge. “Officers have been involved that coming into delicate info into these fashions with out an settlement setting out how you can shield and safe the information might result in it being fed into the mannequin and saved for coaching,” Euro Information reported.

JFrog and SafeDep have uncovered a marketing campaign by which menace actors hijacked third-party 42 GitHub repositories throughout 11 house owners to deploy payload blobs giant sufficient “to evade the GitHub search and API paths usually used to search out this type of compromise.” JFrog mentioned, “The repositories comprise execution hooks for AI coding assistants and IDEs, plus 12.9 to 13.7 MB polymorphic wrappers that every one decode to the identical hidden CI-publisher payload.” The exercise is assessed to be associated to a Miasma-family npm worm propagated below numerous packages ending with “testmetest.” In line with SafeDep, the worm “shares code with Miasma ‘Phantom Gyp’ from June 2026 and provides the token-revocation wiper from Mini Shai-Hulud. The malicious variations steal credentials, unfold to different packages and repositories, and set up a wiper that deletes the house listing when the sufferer revokes the stolen GitHub token.” Unsuspecting builders who put in the packages had their knowledge stolen and repositories compromised with malicious code to provide additional malicious testmetest releases and run shellpanel workflows focusing on cPanel techniques by means of CVE-2026-41940, overlapping with a previous marketing campaign detailed by Socket in July 2026.

A brand new Android malware operation referred to as MR ROBOT is focusing on clients of Indian banks and remodeling banking fraud right into a subscription enterprise, with cybercriminals renting custom-made banking trojans to steal OTPs, card particulars, UPI PINs and credentials whereas secretly forwarding calls to bypass safety checks. “It’s not a single-actor marketing campaign however a rented crimeware platform: a grasp operator leases entry to associates, who use a Telegram bot (‘APK Protect) and an online management panel (v7.0) to construct personalised banking trojans on demand and distribute them by means of faux Play-Retailer-style pages and messaging-app lures,” CloudSEK mentioned. The package impersonates round 36 lure apps, together with banks, utility suppliers, and authorities providers. One affiliate is estimated to have intercepted 5407 textual content messages from 153 contaminated gadgets.

Risk actors are abusing reputable cellular system administration (MDM) platforms, like Hexnode and Rippling, by utilizing social engineering to enroll gadgets or set up administration brokers, per Huntress. “As soon as established, MDM gives a trusted, privileged path for malicious exercise, similar to deploying rogue RMM instruments and sustaining distant entry,” it mentioned.

Risk actors are exploiting CVE-2026-42589 (CVSS rating: 9.8), a crucial distant code execution flaw in Gotenberg, to ship a Go-based reverse shell referred to as “cache_base.” The flaw was patched in Might 2026. In line with VulnCheck, the exercise originated from a residential Japanese IP handle in early October 2026. “The execution move is simple: purchase a lock, gather host info, connect with C2, register the sufferer, and open a shell,” VulnCheck mentioned. Over the previous 30 days, the vulnerability has recorded 1,358 exploitation occasions from 128 distinctive supply IP addresses.

Discord has introduced it would enable search engines like google to index discussions in Discoverable Servers and make them accessible on the net to customers exterior the platform with out an account or invitation, beginning mid-December 2026. “Discussions in Discoverable Servers will quickly be simpler to search out while you search the net, so you could find the reply you are on the lookout for and step straight into the dialog on Discord,” it mentioned. The adjustments apply solely to Discoverable Servers and don’t lengthen to non-public servers and direct messages.

The Gents ransomware operation has claimed greater than 800 victims throughout a number of areas and sectors, with most assaults focusing on organizations within the U.S. and Europe. “The group helps a number of platforms, with ransomware variants focusing on Home windows, Linux, NAS, and BSD techniques, permitting its associates to focus on a broad vary of enterprise environments,” Acronis mentioned. “The group’s operations embody using EDR-killing instruments. In a latest incident, a customized dropper was noticed deploying susceptible Safetica ProcessMonitorDriver [CVE-2025-70795] and Lenovo BootRepair.sys drivers to terminate safety processes.”

Pillar Safety has disclosed an arbitrary-code-execution vulnerability in Unsloth’s core model-loading path (CVE-2026-93348, CVSS rating: 8.6). It has been fastened in unsloth_zoo 2026.8.14. “An attacker-controlled mannequin configuration might trigger Python code to execute throughout loading,” researcher Ariel Fogel mentioned. “The affected code ran contained in the model-loading course of, with entry to no matter that course of might learn, modify, or authenticate to. In an AI improvement setting, that may embody proprietary datasets, mannequin artifacts, Hugging Face tokens, and cloud credentials. Exploitation required an affected loading path to course of an attacker-controlled configuration.”

XBOW mentioned it recognized an unauthenticated, critical-severity distant code execution bug in a public net software belonging to the U.S. Election Help Fee (EAC). “The susceptible software was a useful resource/logistics calculator, not a voting machine or voter registration system,” XBOW researcher Ariel Walter Garcia mentioned. “The flaw allowed an unauthenticated attacker to execute code as root contained in the backend container, with entry to regionally protected assets and outbound community connectivity, a privileged foothold reachable by way of a crafted unauthenticated net request.”

A brand new distant entry trojan referred to as DarkCore comes with a devoted browser that might let attackers entry Gmail, WhatsApp, and MediaFire accounts utilizing stolen periods, whereas giving the impression that the exercise is originating from the sufferer’s personal IP handle. DarkCore was first marketed on cybercrime boards in August 2026. “The vendor describes a browser that reuses these periods to entry work mailboxes, prompt messaging apps, cloud storage and different providers by means of the contaminated machine’s IP handle,” BlackFog mentioned. “The aim is to make the entry appear like reputable exercise from the consumer.”

Cisco Talos has disclosed particulars of a brand new AI-integrated command-and-control (C2) framework referred to as NIK C2. The implant options surveillance, theft, lateral motion, and evasion capabilities, together with credential dumping, RDP session hijacking, course of hollowing, and a C2-driven display screen lock ransomware module. “NIK C2 accommodates a Home windows implant, utilizing which, an actor can dump credentials, stream the sufferer’s keystrokes to gather the focused sufferer’s delicate knowledge, and instruct an built-in AI mannequin to investigate the harvested knowledge, all inside the compromised session,” Talos mentioned. “On this framework, the actor has abused the OpenAI Chat Completions software programming interface (API), which is an HTTP endpoint that allows ChatGPT-style conversations programmatically. Along with the options that allow theft, an actor also can deploy desktop screen-locking ransomware by way of the NIK C2 implant onto the sufferer machine, resulting in a ransom demand in Bitcoin or USDT cryptocurrencies.” Three totally different variations of the malware have been recognized so far since August 12, 2026. Talos mentioned NIK C2 alters adversary tradecraft by collapsing assortment and exploitation right into a single steady session.

A phishing e mail utilizing a FedEx tax bill lure and containing a ZIP archive with a PDF has been noticed triggering a multi-stage an infection course of to ship a beforehand undocumented variant of the Sirius Backdoor. “The PDF abuses /OpenAction and /Launch objects to set off an embedded Base64-encoded PowerShell command upon opening,” Trellix mentioned. “Execution depends on social engineering to trick the consumer into approving the PDF reader’s safety affirmation immediate. The PowerShell stager decrypts and reflectively hundreds a .NET meeting in reminiscence. This loader performs course of hollowing into reputable Home windows processes similar to msbuild.exe, svchost.exe, and so forth., permitting the malware to function below trusted course of contexts.” The ultimate payload is SIRIUS, a Microsoft Visible C++ based mostly backdoor with prolonged distant entry capabilities.

A brand new evaluation from Flare has revealed that menace actors are constructing a combined AI toolkit, combining industrial fashions with native, open-weight, and jailbroken alternate options, in addition to leaning on stolen AI credentials to shift prices to victims. “The place AI will help is with understanding techniques, writing instruments and troubleshooting. The menace actor nonetheless wants entry, choices and a strategy to acquire cost,” Flare mentioned. “If AI helps an affiliate write a working data-export script with out hiring a specialist, the affiliate could keep away from that specialist’s price and the wait for his or her assist. AI makes experience cheaper to acquire solely when the price of utilizing and checking its work is decrease than the price of the specialist assist it replaces.”

A not too long ago noticed cyber-extortion actor named ScarlettGroup is publicly promoting alleged knowledge compromises and makes use of negotiation deadlines and threatened disclosures to stress focused organizations. The group’s darkish site itemizing contains victims from know-how, training, authorities, and leisure sectors. “ScarlettGroup demonstrates traits related to financially motivated data-extortion operations, together with public sufferer claims, deadline-based stress, and underground discussion board exercise,” Foresiet mentioned. “Its devoted leak-site infrastructure and structured disclosure mechanism point out an organized strategy to selling alleged compromises and exerting reputational stress.”

Following its disruption in June 2026 as a part of Operation Endgame, StealC has returned 4 months later as Stadia. “This time it is not a stealer: it is a full distant entry trojan,” Varonis mentioned. “The RAT’s options embody hidden desktop management, a reside command shell, a file explorer, a course of supervisor and an in-memory loader, with StealC’s stealer welded on as one module amongst six. The actor behind Stadia is working onerous to win again authentic StealC clients: each former StealC buyer is obtainable a free month on the highest ($900) tier.” The event comes as Moonlock Lab revealed that the Icarus macOS stealer has equally developed from a smash-and-grab crypto and knowledge stealer to a malware with remote-access capabilities. The brand new iteration known as ICMacOS. “The stealer is actively marketed on cybercrime boards by a Russian-speaking actor working below the deal with GlowComa, with characteristic updates repeatedly introduced by way of Telegram,” SOCRadar mentioned. “GlowComa promotes ICMacOS alongside Icarus ClickFix, a companion panel designed to ship payloads utilizing malicious copy-and-paste terminal instructions. The an infection chain depends on preliminary dropper scripts to detect the host structure and harvest administrator passwords utilizing faux system dialogs earlier than delivering the first payload.” One other macOS-focused stealer is Aokigahara, which works past browsers, VPN shoppers, cryptocurrency wallets, FTP/SFTP shoppers, password managers, and e mail purposes to additionally goal AI purposes and improvement instruments. “The stealer collects authentication information, session knowledge, and configuration information related to Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and different instruments,” Test Level mentioned. “Stolen AI credentials might supply alternatives for monetization. Usable credentials or session tokens might allow unauthorized entry to paid AI providers or the resale of compromised accounts.”