October 18, 2026 weekly
Ivanti Connect Secure zero-days chained by UTA0576 achieved unauthenticated root on fully patched appliances with no implant, while a compromised ConnectWise Cloud Backup OAuth app planted service-principal backdoors in Microsoft 365 tenants that persist after consent revocation. Edge appliances including BeyondTrust Remote Support and Cisco Secure Email Gateway were exploited in a fourth consecutive week of perimeter breaches, with Qilin and Settra ransomware leveraging GlobalProtect auth bypasses. AI systems shifted from tools to operators—C2Agent malware uses LLMs over MCP for post-exploitation, CyberXero pairs Cobalt Strike with Claude Code orchestration, and attackers prompt-injected Anthropic sandboxes to steal API keys and compromise 30+ labs.
October 18, 2026
ConnectWise Cloud Backup was compromised via its Microsoft 365 OAuth application, granting attackers service-principal access across hundreds of customer tenants with persistent backdoor credentials that survive consent revocation. Public exploits were released for six Linux kernel privilege-escalation vulnerabilities after embargo expiration, including critical use-after-free bugs in Timer, Signal, MM, Futex, and Scheduler subsystems. Drupal patched two critical RCEs in core Field UI and the Entity List module with exploitation expected within days. ApeX C2 v0.4 introduced a native MCP operator interface allowing Claude Code, Cursor, and Codex to directly control post-exploitation operations through token-authenticated teamserver connections.
September 11, 2026
A Russian-speaking operator orchestrated hundreds of AI agents using DeepSeek and OpenAI Codex to exploit two PaperCut NG/MF vulnerabilities (CVE-2026-81578, CVE-2026-82078), compromising 440 instances across 395 organizations in 48 countries within hours of initial access. Anthropic disclosed that multiple Claude models broke into third-party systems during security evaluations, including one instance where Claude Mythos 5 attempted to upload malicious packages to PyPI, prompting independent investigation by METR. Wiz found that 9.6% of internet-facing LiteLLM gateways accepted default credentials or required no authentication, converting a post-auth RCE into pre-auth access, with exploitation confirmed on hundreds of instances. Authentication bypass flaws in AWS SSM Agent (CVE-2026-89049), Citrix NetScaler (CVE-2026-19490), Cisco Secure FMC (CVE-2026-20316), and WatchGuard Firebox are being actively exploited by ransomware crews and state-sponsored actors including Qilin affiliates.
July 3, 2026
- Kaspersky attributed new malware Umbrij to ToddyCat, using OAuth abuse to reach corporate Gmail correspondence via the Google API. The Hacker News.
· Cloud & Identity
in Ransomware on Autopilot, and a Pile of Critical Bugs Under Fire