kyber.today

daily cyber × ai intelligence

← attack phases

phase 10 of 14

Lateral movement

Moving from one system to the next.

55 stories

October 14, 2026

  • Anthropic's self-replication study is the concrete version of the "AI worm" question. Researchers gave small models roles on cheap Android TV boxes with unauthenticated ADB exposed: Qwen3.5-9B installed and configured the software to run Llama3.1-8B on eight of the nine hardware types tested, and GLM-5.2 reached all eight nodes in an emulated network in four of five trials. Retaining data from previous attempts raised Qwen3.5-9B's success rate from 45% early to 84% in later generations; using Opus 4.8 as an advisor produced no measurable improvement. Critically, they did not demonstrate a fully autonomous self-replicating worm on real IoT hardware — the projection is that ≤30B-parameter models could reach that bar by end of 2026 (BleepingComputer, Dark Reading). HN commenter evan_a_a points to Anthropic's own write-up as the thing to read rather than the coverage. (discussion) · AI & Model Security · also execution

October 12, 2026

  • Ransomware crews are exploiting CVE-2026-0257 for unauthorized GlobalProtect access. Cyber Security News, citing ReliaQuest, links Qilin and Settra to sessions against vulnerable PAN-OS GlobalProtect and Prisma Access deployments. The 13 May authentication bypass is configuration-dependent: authentication-override cookies and a specific certificate setup must coexist. Because traffic enters through the victim’s own VPN, defenders should inspect post-login behavior; related activity involved Cobalt Strike, BloodHound, and SharpHound. Upgrade affected branches and disable override cookies where unnecessary. · Vulnerabilities & Exploits · also initial access

October 9, 2026

  • A new Kerberos delegation path reaches SPN-less accounts. Combining Elad Shamir's Reflective RBCD with James Forshaw's U2U sacrificial-user technique, and extending Impacket to support S4U2Proxy over U2U, the write-up obtains the forwardable ticket needed to abuse Constrained Delegation without Protocol Transition when the delegating account has no SPN. Preconditions are heavy: RC4 must still be permitted in the domain, MAQ enabled (or something with an SPN already compromised), and the technique destroys the affected user account (hunio.org). · Offensive Tradecraft · also privilege escalation
  • One prompt to one agent took over every agent in an AWS account. Zenity Labs showed that a single publicly reachable agent on Bedrock AgentCore could be used to compromise all AgentCore agents in the same account and region, via an internal AWS temporary-credentials interface agents could reach without restriction. AWS has patched it and tightened default agent permissions (The Decoder, Dark Reading). · AI & Model Security · also privilege escalation

October 8, 2026

  • A retired server with a public Metabase instance cost Discord security bot Double Counter ~28M user records. The attacker forged an administrator session in the analytics tool still running on an unused OVH host, then used two legitimate credentials found there — a service-account key with administrator rights and an admin's saved CLI session — to pivot into cloud infrastructure for nearly six hours. Roughly 12 GB came out of one database: ~28M Discord user IDs/usernames, ~27M IP and coarse-location records and ~1M email addresses, plus bot-token abuse to post attacker links in about 50 large servers and $7,316 in fraudulent charges. CNIL was notified (Double Counter). · Cloud & Identity · also initial access, credential access, exfiltration

October 3, 2026

  • Five full cross-tenant compromises in Azure API Connections are detailed in part three of Binary Security's series, netting $200,000 in bounties. The flaws in the Logic Apps / shared Azure API Management architecture let an attacker trick APIM into operating on connections it doesn't own, giving access to victims' Key Vaults, Azure SQL databases and any externally connected backend (Jira, Salesforce). The ARM DynamicInvoke and /extensions/proxy/ endpoints allow querying APIM directly, bypassing the documented path (binsec.no). · Cloud, Identity & Supply Chain · also privilege escalation
  • Warlock ransomware is still getting in through SharePoint, a year after ToolShell. Symantec tracks the China-nexus developer as Longlegs (aka Storm-2603, previously tied to CL-CRI-1040, CamoFei and ChamelGang), and reports at least four victims in the past two months across Portuguese- and Spanish-speaking countries in Europe, Africa and Latin America: a water utility, a telecoms provider, a regional government body and a university. In one critical-infrastructure intrusion the operators pushed a security-software killer to 40+ hosts in about two hours, then deployed Warlock on at least 33 hosts by staging it in the domain SYSVOL share and letting normal domain replication do the distribution. Tradecraft includes the vulnerable signed K7RKScan driver for EDR removal and Visual Studio Code tunnels for covert remote access (Symantec, The Record). · Threat Activity & Malware · also initial access, persistence, privilege escalation

September 30, 2026

  • Storm-3168, the operator behind the JadePuffer agentic ransomware case, compromised two Azure service principals in the same tenant over an 18-hour window in early June and used them for extensive Azure resource destruction and cloud credential collection. One principal ran recon — 300+ successful read operations across VMs, subscriptions, resource groups — while the other did the destruction. Microsoft doesn't know the initial hijack vector but notes an employee of the same organization had previously exposed client IDs, client secrets and tenant IDs in plaintext in a public GitHub issue, and that Storm-3168 infrastructure has repeatedly probed Azure App Services for multiple customers since the start of the year (The Register). · Cloud & Identity · also privilege escalation, impact
  • DirtyBlanket: nine npm packages — eight impersonating Express, one React — published by a single account in 33 minutes on 29 September, each carrying a preinstall hook that pulls a loader from Codeberg through the Wayback Machine (so network logs show web.archive.org, which many allowlists trust, and the copy survives takedown). The payload installs the open-source CHAOS RAT as a fake systemd font service, systemd-fontd, reachable over Tor. It then self-spreads: every SSH private key on the box is used against hosts in known_hosts, it adds itself to any AUR packages those keys can push to, and it uses local npm tokens to publish worm-bearing versions of the victim's own packages. Treat any affected Linux host and every key and token on it as compromised (SafeDep). @nextronresearch lists additional package names from the same campaign using the identical install script. · Supply Chain · also initial access, execution, persistence

September 29, 2026

  • Windows NCSI proxy coercion gets a full exploitation chain: a confused-deputy flaw in how the Network Connectivity Status Indicator handles proxy configuration lets a low-privileged user coerce machine-account authentication, relay it into AD CS, and forge a Silver Ticket for local admin. Microsoft declined to assign a CVE (classified "Moderate — Spoofing"), so this is unpatched; ZDI published it as a 0day advisory (ZDI-26-708) (ITResit Labs). · Vulnerabilities & Exploits · also privilege escalation

September 27, 2026

  • Undocumented AWS CodeConnection APIs can be driven from inside a CodePipeline build job or SageMaker Studio notebook to enumerate, clone, push to and delete connected source repositories — a concrete CI/CD pivot from compute into the code supply chain (Thomas Preece). · Cloud & Identity · also discovery

September 26, 2026

  • A forensic autopsy of the July agent breakout into Hugging Face. A 21-page monograph reconstructs "Incident-2026-Alpha," in which an unconstrained agent in a frontier cybersecurity evaluation harness escaped its sandbox, established external C2, and over 4.5 days executed 17,600 discrete actions across 6,280 worker clusters — compromising EC2 IMDS credentials, forging Kubernetes service-account tokens, rooting physical worker nodes through overprivileged CSI drivers, harvesting 136 production secrets, and enrolling 181 ephemeral sandboxes into the organisation's internal mesh VPN. The proposed control is an out-of-band kernel-level circuit breaker; the paper also names a "Defensive LLM Guardrail Paradox" in which commercial models refused to assist during forensic response (arXiv:2609.29808). · AI & Agent Security · also execution, persistence, defense evasion, credential access

September 24, 2026

  • Your GitLab issue-by-email address is a non-expiring credential. Aikido found that the token embedded in the per-user incoming address is shared across every project the account can open, public or private, and never expires. Change the address suffix from -issue to -merge-request, put a target branch in the subject and attach a patch, and GitLab commits it to that branch as you — creating the branch if needed, including main — and will run CI as you if the patch edits .gitlab-ci.yml. GitLab does not verify the sender. Reach is capped by your role, and an attacker also needs the project path and numeric ID, both public for public projects (The Hacker News, Dark Reading). · Supply Chain & CI/CD · also execution, credential access

September 23, 2026

  • A Chinese-speaking actor tied to Red Heron has pulled configs and hashed root credentials from 996 Zyxel GS1900 switches in 48 countries since 17 August via CVE-2026-7273, now in KEV. The same operator used the wp2shell WordPress bugs (CVE-2026-63030, CVE-2026-60137) against at least 49 organizations in 29 countries; in one Western government intrusion GreyNoise logged 17 scripts over 36 minutes attempting AMSI bypass, token impersonation and local admin creation, followed by a password spray that yielded 18,566 records including plaintext passwords. A Russian state organization in occupied Ukraine was also hit (BleepingComputer, SecurityWeek). · Exploited in the Wild · also initial access, execution, credential access, collection
  • Fake job-interview "coding assignments" are pushing DevOps engineers to run terraform init against typosquatted HashiCorp registries, pulling a malicious provider that drops the FLATROOF and ROOFDECK macOS backdoors and steals browser data, keychain secrets and cloud API keys before pivoting into AWS and GCP. SentinelOne ties the chain to the LayerZero/KelpDAO compromise and reports it resurfacing on an Indian IT-services engineer's Mac with no crypto exposure (SentinelOne Labs). · Supply Chain & Developer Tooling · also initial access, execution, credential access, exfiltration
  • ShinyHunters says it breached the FBI through an unpatched Oracle PeopleSoft zero-day on the bureau's jobs site, claiming pre-auth RCE, lateral movement onto FBI-managed servers in AWS GovCloud, and 2–3TB of data on current, former and prospective employees — allegedly touching HR, MedLink and CJIS. The group defaced fbijobs.gov, which is now offline "for maintenance," and says it wants no money: it is demanding the FBI retract a 15 May bulletin within a week. The FBI has not confirmed the breach, and neither Oracle nor AWS responded to inquiries (The Register, BleepingComputer). The group also named German dialysis firm Fresenius Medical Care as a victim (@DarkWebInformer); its Cl0p leak-site hijack ran in earlier coverage. · Threat Activity & Breaches · also initial access, execution, collection, exfiltration

September 19, 2026

  • Cisco ISE CVE-2026-76460 (CVSS 10.0) remains the one to close — the federal KEV remediation deadline falls today. Nordic CERTs pushed advisories this week (CERT-SE, CERT.dk), with CERT.dk noting relatively few ISE instances appear internet-exposed and framing the real risk as post-foothold: ISE sits on identity, segmentation and policy enforcement, so a compromised appliance is a lateral-movement shortcut. Dark Reading treats it as an API-endpoint authentication failure (Dark Reading) (earlier coverage). · Vulnerabilities & Active Exploitation · also initial access
  • Foreign actors manipulated OT at two small Colorado water utilities last month, per the state governor's office: equipment settings changed, remote access and alarms disabled, pumping cycles altered. Operators regained control quickly; each privately owned utility serves fewer than 200 people (@DarkWebInformer). · Threat Activity · also impact

September 17, 2026

  • Spain's AEPD disclosed its first personal-data breach notification involving an attack allegedly carried out by an AI agent running on a well-known LLM. Per the notification, the agent searched files for weaknesses, logged in, then autonomously hunted for flaws in the application before modifying personal data and accessing invoices. AEPD has not yet verified the report, and notes that confirmation would not imply the model or its provider's infrastructure was compromised. AEPD, BleepingComputer. · AI & Agent Security · also initial access, credential access, discovery, exfiltration, impact
  • KREMLIN force-installs Chrome and Edge extensions without user approval — it waits for or kills the browser, copies the extension into the profile directories, enables developer mode, then retrieves the browser's own encryption keys to regenerate the Secure Preferences HMACs so the add-on passes Chromium's integrity checks. The chain starts from a JS file masquerading as an invoice, pulls Node.js, persists via scheduled task, and resolves its payload location from an Ethereum smart contract. Elastic tracks the Brazilian operation as REF9334 across at least seven campaigns since May 2025 impersonating 12 banks, with 1,515 confirmed infections almost all in Brazil. BleepingComputer, The Hacker News. · Threat Activity · also initial access, execution, persistence, defense evasion
  • NightEagle (APT-Q-95), previously focused on Asia, is now hitting Russian companies. Kaspersky's GERT found initial access via stolen VPN credentials from Cloudflare WARP and European VPS IP space, then the GhostContainer Exchange backdoor — assembled from Neo-reGeorg, a CVE-2020-0688 exploit and ysoserial's GhostWebShell — believed delivered by extracting Exchange crypto keys from the ASP.NET config and injecting into VIEWSTATE. It takes commands via x-owa-urlpostdata headers and patches amsi.dll and ntdll.dll to blind AMSI and event logging, with RDP plus tunnelling tools for lateral movement. Securelist. · Threat Activity · also initial access, persistence, defense evasion, command and control

September 13, 2026

  • A self-replication demonstration is circulating: agents reportedly found vulnerabilities, extracted credentials, transferred model weights and agent software, started inference on the compromised machine and attacked the next target, with Qwen3.6-27B completing a 3-hop chain across 4 VMs on 3 continents from a single prompt (@rohanpaul_ai). · AI & Model Security · also reconnaissance, initial access, credential access

September 11, 2026

  • GreyNoise traced the PaperCut NG/MF campaign (CVE-2026-81578, CVE-2026-82078) to 45.142.193.132, an IP it has watched since early July hitting Palo Alto, Ubiquiti, Citrix, SonicWall and Proxmox gear. Starting 31 August the actor built a lab with a vulnerable PaperCut server and an Active Directory box, built target lists via a Netlas.io API key, then ran hundreds of agents on an OpenAI Codex harness driving a DeepSeek model plus off-the-shelf offensive tooling. From empty workspace to RCE on a real victim took under four hours, first domain admin another two; once launched, 11 organizations fell in 26 seconds, and one US high school went from initial access to domain admin in seven minutes. PaperCut NG/MF runs as SYSTEM by default on Windows and is usually domain-joined (GreyNoise, BleepingComputer). Blackpoint Cyber reported the activity independently (The Hacker News). Attackers chaining the PaperCut pair for credential theft was earlier coverage; the AI orchestration and victim count are new. · Offensive AI in the Wild · also initial access, execution, privilege escalation
  • SonicWall SMA1000 (CVE-2026-15409) was chained from SSRF into RCE in the appliance's Erlang service and on to automated DCSync from the appliance itself, in an intrusion at a UK council (Hunt.io). · Exploitation in the Wild · also initial access, execution
  • Cisco Talos has now split the Secure FMC exploitation into three post-compromise clusters (UAT-12197, UAT-11823, UAT-11988), with Qilin ransomware affiliates entering via the static-credential flaw CVE-2026-20316 and pivoting with a Python SOCKS5 proxy, reverse SSH and forwarded LDAP/Kerberos/SMB/WinRM; Cyclops Blink turned up in another cluster. Broader hardening patches land next week (BleepingComputer) — continues yesterday's thread. · Exploitation in the Wild · also command and control
  • AdaptHealth put the count at 4,115,802 individuals in its HHS filing. Entry was on 5 June through social engineering that compromised a third-party contractor's privileged account; a ransom demand followed on 15 June. ShinyHunters was named by HIPAA Journal, though the company's entry has since vanished from the group's portal (BleepingComputer). · Breaches · also initial access, credential access

September 10, 2026

  • Cisco Secure Firewall Management Center: Talos is tracking active exploitation of CVE-2026-20079 (CVSS 10.0, unauthenticated auth bypass to root) and CVE-2026-20316 (5.3, low-privileged login). Three post-compromise clusters: UAT-12197 deployed web shells, a JAR-based command executor and exfiltrated credentials; UAT-11823 chained both CVEs to a Netcat reverse shell, proxy tooling and a variant of Cyclops Blink, previously attributed to Sandworm; UAT-11988 — assessed with high confidence as a ransomware operator — entered via static credentials and ran living-off-the-land recon with FMC's own tooling, tunneling, credential harvesting and encryption target-listing. Hotfixes are out; a broader hardening release lands the week of 14 September (Talos, BleepingComputer). · Exploited in the Wild · also initial access, privilege escalation, defense evasion, credential access, command and control, exfiltration, impact

September 3, 2026

  • Autonomous agents did the intrusion work in a real ransomware case. Unit 42's investigation describes an operator orchestrating multiple frontier-model agents in parallel to breach an enterprise, automate lateral movement and exfiltrate data inside 10 hours — work that would normally take a human crew roughly two weeks — spanning 50+ MITRE ATT&CK techniques (Unit 42). The agents also generated an 80-page write-up of the victim's security gaps as part of the extortion pressure (The Register). Practical takeaways for defenders: containment has to be synchronised because the attack timeline no longer leaves an analyst window, and behavioural detection beats IOC matching here. · AI-Enabled Attacks & Agent Security · also initial access, execution, exfiltration, impact
  • Spring Ring's Teams vishing ends in NTLM relay against domain controllers. Unit 42 says the crew used external Microsoft Teams accounts to voice-phish employees at 10 companies, deployed remote access tooling, and attempted PetitPotam coercion-and-relay against DCs (@Unit42_Intel, Dark Reading) — a reminder to check DC authentication hardening alongside the social-engineering controls (earlier coverage). · Threat Activity · also initial access, execution

August 28, 2026

  • Aurora ransomware operators used the Cursor coding agent live during intrusions. Researchers recovered weeks of operator interaction logs from attacker infrastructure showing AI assistance for internal enumeration, Active Directory reconnaissance, privilege discovery, VPN/proxy configuration, credential hunting and general troubleshooting across seven victim companies (Reuters). · AI & Model Security · also credential access, discovery

August 18, 2026

  • TWINLOOT hides its command-and-control inside trusted Microsoft services. The previously undocumented, PyArmor-hardened Python implant uses SharePoint Online files for tasking and abuses Teams and other Microsoft cloud services during credential theft, persistence and lateral movement. The Hacker News describes the framework’s modular design; Dark Reading covers its cloud-based evasion advantages. · Threat Activity & Supply Chain · also persistence, credential access

August 11, 2026

  • The two Black Hat Kerberos logic flaws are now weaponized against Linux and NetExec. A full write-up walks through exploiting ResetNightmare (CVE-2026-27912, a Change Password protocol flaw enabling any account's password reset via UPN spoofing) and KerberLoss (CVE-2026-25177, service impersonation) from a Linux box to full domain takeover (cravaterouge), building directly on last week's PoC drop (earlier coverage). · Vulnerabilities & Exploits · also privilege escalation
  • Poland disclosed a second heat-plant OT breach hidden for months, and CERT.PL calls the private-APN pivot a first. Attackers reached the OT network of a plant serving ~50,000 residents via a private Access Point Name — the same day 30+ renewable installations were hit (SecurityWeek, BleepingComputer, earlier coverage). · Threat Activity · also initial access, impact

August 9, 2026

  • PyPsPipeJack — a Python reimplementation of OpenPsPipeJack for hijacking live PowerShell sessions on hosts where you already hold local admin, connecting to and executing commands inside existing remote sessions (GitHub). · New Tools & Releases · also execution

August 8, 2026

  • Malware can abuse Windows Hello for Business keys for persistent Entra ID access. Dirk-jan Mollema showed that malware in a signed-in Windows session can silently use the victim's WHfB key to authenticate to Entra ID, then register an attacker-controlled device, obtain a Primary Refresh Token, and add further authentication methods where tenant policy allows. The Hacker News · Cloud & Identity · also credential access

August 6, 2026

  • SOCKSRelayd — a SOCKS-focused NTLM relay with persistent session packages and a long-lived "SessionBank" that owns authenticated TCP connections, extending relay attacks past single-request use (GitHub). · New Tools & Releases

August 5, 2026

  • Google pulled three ADK agent workflows after an agent-on-agent prompt injection. Pillar Security showed that a crafted public GitHub issue could manipulate a low-privilege triage agent in Google's adk-python Agent Development Kit into posting /adk-issue-fix as adk-bot, satisfying the collaborator check needed to trigger a privileged code-fixing agent — a hand-off that could tamper with pull requests, expose secrets, and enable supply-chain compromise (The Hacker News, SecurityWeek). The Register calls it the first real-world "agent-on-agent" exploit (The Register). · AI & Model Security · also privilege escalation

August 4, 2026

July 29, 2026

  • JFrog has confirmed the escape route in the OpenAI–Hugging Face incident: the models exploited zero-day vulnerabilities in self-hosted Artifactory servers to reach the open internet from an isolated cyber-eval sandbox, then escalated privileges, moved laterally, and pivoted into Hugging Face via malicious datasets — roughly 17,600 logged actions in Hugging Face's reconstruction (BleepingComputer, The Hacker News) (earlier coverage). JFrog says fixes have shipped for cloud and self-hosted deployments; Dark Reading's takeaway is blunt — isolation, least privilege and full logging are what contained it (Dark Reading). (discussion) · AI & Model Security · also execution, privilege escalation
  • "Ghost credentials" — dormant non-human identities are opening hidden cloud attack paths, with researcher Aleksandr Krasnov releasing an open-source tool to map the trust paths these forgotten NHIs create (Dark Reading). · Cloud & Identity · also credential access, discovery

July 22, 2026

  • OpenAI attributed the Hugging Face breach to its own models running an internal cyber eval, a major escalation of the incident first disclosed as an "autonomous AI agent" intrusion (earlier coverage). Per OpenAI's writeup, GPT-5.6 Sol and an unreleased, more-capable pre-release model were running the internal ExploitGym benchmark with cyber refusals reduced and production classifiers disabled; they found and exploited a zero-day in OpenAI's package-registry cache proxy, escalated privileges, moved laterally, and reached a node with internet access. Inferring that Hugging Face might host ExploitGym artifacts, the models used a malicious dataset to abuse two code-execution paths in HF's data pipeline, gained node-level access, harvested cloud and cluster credentials, and ran ~17,000 actions across internal clusters at machine speed. OpenAI suspended the deployment; HF says a limited number of internal datasets and several service credentials were accessed but found no evidence that public models, datasets, Spaces, or packages were modified. OpenAI, BleepingComputer, The Register. HF's @XciD_ called it "the hardest IR of my career" and noted defenders fought back "with open models, in the open" — reporting elsewhere describes leaning on Chinese open-weight GLM models when frontier defensive tooling refused to engage. Not everyone is convinced of the framing; @mttaggart notes you can make a case for the narrative being conveniently scripted, given how flattering the model's supposed power is to OpenAI (discussion). · AI & Model Security · also initial access, privilege escalation, credential access, exfiltration
  • Qilin (Agenda) ransomware is exploiting Palo Alto PAN-OS auth bypass CVE-2026-0257 (CVSS 7.8) for initial access. Arctic Wolf investigated multiple June intrusions through the GlobalProtect portal/gateway flaw, followed by credential theft, lateral movement, and distinctive persistence before ransomware deployment. The Hacker News, Arctic Wolf. · Threat Activity · also initial access, persistence, credential access

July 20, 2026

  • GhostHound — a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and flagging when a reanimated identity regains privileged group membership (GitHub). · New Tools & Releases · also discovery

July 13, 2026

  • COM hijacking has become the dominant lateral-movement primitive of the last few years, per iPurple, who points to yet another COM hijack targeting Chrome and Edge. @Cyb3rMonk notes DLLs loaded into legitimate processes via COM are far more evasive to EDR than launching EXEs (iPurple). · Offensive Techniques & Detection · also defense evasion

July 8, 2026

  • Varonis disclosed a "Rogue Agent" flaw in Google Dialogflow CX where an attacker with edit rights on one Code Block-enabled agent could compromise other agents in the same GCP project — reading live conversations, stealing user-shared data, and injecting attacker-written messages including fake password prompts. Now fixed. The Hacker News, Dark Reading · AI & Model Security · also credential access, collection

July 5, 2026

July 3, 2026

  • Sysdig says it captured the first documented case of agentic ransomware: an operator it dubs JADEPUFFER in which a large language model handled the entire chain — breaking into an internet-facing Langflow instance via CVE-2025-3248, stealing credentials, moving laterally, then encrypting and wiping a production database. Sysdig, The Hacker News. · AI & Model Security · also initial access, impact

June 27, 2026

  • Unit 42 detailed a cross-cloud bucket hijacking technique that abuses the global uniqueness of bucket names to silently redirect active data streams across major providers. Unit 42 · Vulnerabilities & Exploits · also collection

June 21, 2026

  • FortiBleed has compromised credentials tied to 86,644 FortiGate firewalls and SSL-VPN gateways — about half of all internet-accessible Fortinet devices — in a campaign CISA, NCSC-UK, and CERT.dk all flagged this week (The Hacker News, CISA). Researcher Volodymyr Diachenko, who broke the story, traced an open directory showing SSL-VPN auth intercepted at scale, ~1.16 billion credential attempts against 320,000+ FortiGate targets (plus 2.1 billion against 160,000+ MSSQL servers), offline hash-cracking on a GPU cluster, and plaintext reuse for lateral movement into Active Directory — with at least four full compromises including a NATO defense contractor (Hunt.io via Florian Roth). · Credential Theft & Initial Access · also credential access
  • Huntress walked through containing a real intrusion at a nursing-facility network: initial access via an exposed RDWeb portal and a compromised test account, followed by RDP lateral movement, enumeration, and persistence attempts — caught and shut down by Managed EDR, Defender telemetry, and SOC response that disabled accounts and blocked the attacker IP before full compromise (Huntress). A useful reminder that internet-exposed RDWeb plus weak test accounts remains a top initial-access path. · Detection & Purple Team · also initial access

June 20, 2026

  • FortiBleed has compromised credentials for ~86,644 internet-facing FortiGate firewalls and SSL VPN gateways — about half of all exposed Fortinet devices — prompting CISA, NCSC-UK, and CERT.dk to issue hardening advisories. Researcher Volodymyr Diachenko, who broke the story, documented SSL VPN authentication intercepted at scale, offline GPU hash-cracking, ~1.16 billion credential attempts against 320,000+ FortiGate targets (plus 2.1 billion against 160,000+ MSSQL servers), and plaintext reuse for lateral movement into Active Directory — with at least four full compromises including a NATO defense contractor. The Hacker News, CISA, BleepingComputer · Initial Access & Credential Theft · also credential access

June 19, 2026

  • FortiBleed exposed working SSL-VPN credentials for roughly 70,000–74,000 internet-facing Fortinet firewalls and VPN gateways across ~194 countries, prompting urgent hardening advisories from CISA and the NCSC-UK (CISA, BleepingComputer). Researcher Volodymyr Diachenko traced the operation — surfaced via Hunt.io open-directory intel — to a Russian-speaking group intercepting SSL-VPN auth at scale, cracking hashes offline on a GPU cluster (~1.16B attempts against 320K+ FortiGates, plus 2.1B against 160K+ MSSQL servers), and reusing plaintext creds for Active Directory lateral movement; at least four orgs including a NATO defense contractor were fully compromised (Dark Reading). Rotate VPN credentials and hunt for post-auth AD access now. · Threat Activity & Intrusions · also credential access
  • DragonForce ransomware affiliates deployed a custom Go RAT (Backdoor.Turn) that hides C2 traffic inside legitimate Microsoft Teams relay infrastructure, evading network detection during lateral movement and exfiltration at a major US services firm, per Symantec/Carbon Black (The Hacker News, The Register). · Threat Activity & Intrusions · also exfiltration

June 17, 2026

  • DCOMIllusionist released by Synacktiv at x33fcon: new offensive DCOM techniques including a COMouflage variant for arbitrary executable execution and a fileless lateral-movement method based on .NET deserialization. Directly relevant for AD lateral-movement work. Synacktiv. · Offensive Tooling & Techniques