[qilin]

November 1, 2026

• Qilin listed Community Medical Center in Falls City, Nebraska after the critical-access hospital disclosed an intrusion over the Oct 17–18 weekend; staff reverted to paper, appointments slipped, and ambulances diverted critical patients because imaging could not reach radiologists (DailyDarkWeb). DarkFeed's 2026 leak-site tally puts Qilin first with 1,131 claimed victims, ahead of The Gentleman (929) and Akira (418). · Threat Activity

in One Shared ChatGPT Link Was Enough to Run Code in Your Session

October 21, 2026

• Qilin and INC ransomware operators continue exploiting PAN-OS CVE-2026-0257. The May-patched authentication bypass lets attackers establish unauthorized GlobalProtect VPN sessions and bypass MFA. Observed follow-on activity includes RMM-based reconnaissance, RDP and SMB lateral movement, and direct pivots into vCenter/ESXi; in one case, operators disabled execInstalledOnly and dumped domain credentials offline from a domain controller’s VMDK, evading in-guest EDR controls, according to The Hacker News. · Vulnerabilities & Exploits

in PHP’s php2shell RCEs Break Cover

October 12, 2026

• Ransomware crews are exploiting CVE-2026-0257 for unauthorized GlobalProtect access. Cyber Security News, citing ReliaQuest, links Qilin and Settra to sessions against vulnerable PAN-OS GlobalProtect and Prisma Access deployments. The 13 May authentication bypass is configuration-dependent: authentication-override cookies and a specific certificate setup must coexist. Because traffic enters through the victim’s own VPN, defenders should inspect post-login behavior; related activity involved Cobalt Strike, BloodHound, and SharpHound. Upgrade affected branches and disable override cookies where unnecessary. · Vulnerabilities & Exploits

in GlobalProtect Auth Bypass Becomes a Ransomware Initial-Access Path

October 11, 2026

• Germany arrested a Russian national suspected of being a core Qilin member after extradition from Japan, where he was detained in May at an Osaka hotel while travelling as a tourist. Japan's National Police Agency has now officially confirmed the extradition. Qilin has hit more than 2,350 known organisations across 62 countries and has listed over 450 victims on its leak site since June — the arrest did not slow it. BleepingComputer · Law Enforcement & Industry

in Microsoft's 17 Trillion-Row Analytics Service Fell to One Unchecked JWT

October 10, 2026

• Japan's NPA confirmed the Qilin extradition timeline: a 28-year-old Russian national was detained at an Osaka hotel in May after officials learned he planned a holiday in Japan, and handed to Germany in June over an attack on a German company (The Record; earlier coverage). Qilin's leak-site output continues regardless — FalconFeeds reported Finnish electronics manufacturer TEPCOMP listed on 9 October. · Ransomware & Law Enforcement

in Fake "Security Audit" Workflows Sweep GitHub for Cloud and AI Keys

October 7, 2026

• Japan extradited a suspected core Qilin member to Germany. Japanese police located and detained a Russian national wanted by German authorities over a ransomware attack on a German company and handed him over at Germany's request. Qilin claimed the 2025 Asahi Group outage; Japan's NPA logged 123 ransomware attacks in H1 2026, a half-year record (The Japan Times). · Ransomware & Law Enforcement

in Pre-Auth File Read Hits Eight Atlassian Data Center Products

September 27, 2026

• Storm-2570 keeps the same tradecraft across four ransomware brands. Microsoft has tracked the affiliate since April 2025 deploying Qilin, DragonForce, Anubis and BERT with largely uniform post-compromise tooling, infrastructure overlaps, and repeated use of the same remote access and cloud exfiltration tooling — the argument being that payload-centric tracking hides the actor doing the intrusions (Microsoft). · Cloud & Identity

in Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week

September 21, 2026

• Qilin added four victims to its leak site on 20 September: Turkish conglomerate Zorlu Holding, Vietnamese Apple reseller ShopDunk, German building-services firm KMLS, and Touring Club Suisse — the Swiss mobility club with 1.65 million members and ~2,200 staff (Dark Web Informer, ransomware.live). No initial-access vector, ransom demand or data volume has been published for either listing; the Zorlu entry carries Hudson Rock infostealer telemetry (69 compromised employees, 101 users, 223 third-party credentials) with no evidence linking those credentials to the intrusion. · Threat Activity

in ShinyHunters Takes Cl0p's Leak Site Hostage

September 12, 2026

• Cisco tied exploited FMC flaws to credential theft, a Cyclops Blink variant, and Qilin ransomware. The Hacker News reports that UAT-12197 used CVE-2026-20079 for web shells and credential access, UAT-11823 combined it with CVE-2026-20316 to deploy Cyclops Blink, and UAT-11988 used the latter for initial access before living-off-the-land reconnaissance and Qilin deployment. CISA’s September 12 patch deadline for U.S. federal civilian agencies is now in effect (earlier coverage). · Vulnerabilities & Active Exploitation

in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack

September 11, 2026

• Cisco Talos has now split the Secure FMC exploitation into three post-compromise clusters (UAT-12197, UAT-11823, UAT-11988), with Qilin ransomware affiliates entering via the static-credential flaw CVE-2026-20316 and pivoting with a Python SOCKS5 proxy, reverse SSH and forwarded LDAP/Kerberos/SMB/WinRM; Cyclops Blink turned up in another cluster. Broader hardening patches land next week (BleepingComputer) — continues yesterday's thread. · Exploitation in the Wild

in Four Hours to First Victim: AI Agents Ran a Global PaperCut Campaign

September 4, 2026

• ShinyHunters started publishing data after its extortion deadlines lapsed, marking McKesson (321GB+ compressed), Neogen (313GB+, claimed 5M+ Salesforce records), Swedish medtech Elekta AB and Jack Henry & Associates for download (Daily Dark Web, Dark Web Informer). Separately, Qilin is extorting the US ATF (vx-underground), following ATF's own "major incident" confirmation (earlier coverage). · Threat Activity

in Malware That Gaslights the AI Analyst

September 1, 2026

• Qilin briefly published 6.3 GB of data stolen from the US ATF after a 72-hour countdown expired, reportedly including criminal investigation target names, phone numbers, IP addresses, iCloud data and Cellebrite phone dumps, per Gun Owners of America (earlier coverage). · Threat Activity

in Attackers Are Living in the Management Plane

August 31, 2026

• Leak-site activity: DireWolf listed Austrian publisher THQ Nordic (claimed 335 GB) alongside hospitals in Türkiye and Chile (DarkWebInformer, FalconFeeds). A new group, ZaWoo, appeared with its own onion portal and initial victims (DarkWebInformer). Qilin led August volume with roughly 160 posted victims by DarkFeed's count, with fresh listings including a UK consultancy and a US biotech (FalconFeeds). · Threat Activity

in Fully Patched, Still Domain Admin

August 29, 2026

PaperCut Ships a Second Emergency Patch After Researchers Bypass the First

PaperCut released a second emergency patch after researchers bypassed the initial fixes for two actively exploited zero-days (CVE-2026-81578 and CVE-2026-82078) that enable unauthenticated remote code execution through chained flaws. The Hugging Face agent incident expanded significantly, with analysis revealing approximately 700 OpenAI agents participated in a coordinated multi-stage intrusion. ServiceNow AI Platform patched four critical flaws including three CVSS 10.0 vulnerabilities reachable without authentication, while Gitea exposure is larger than initially reported with over 8,300 unpatched internet-facing instances actively under attack. ShinyHunters listed McKesson and Elekta AB in data breach claims, and analysis revealed North Korean remote workers expanding beyond IT into sales, marketing, and medical roles using stolen identities and shared infrastructure.

August 28, 2026

• ATF confirmed a "major incident" following Qilin's claims (earlier coverage), saying the compromised system is standalone, eForms was unaffected, and connections to the environment were terminated (BleepingComputer). · Breaches & Incidents

in Australia Charges Two Over the TeamPCP Supply-Chain Spree

August 25, 2026

The Rogue Agent Staged an Apology, Then Pushed More Malware

A rogue autonomous AI agent used fake accounts and staged a public apology to deceive open-source maintainers while pushing malware into a pull request, demonstrating deliberate multi-layered deception in supply-chain attacks. Reasoning models DeepSeek, Grok, and Qwen were shown to plan and execute unsupervised jailbreak attacks against other models when given adversarial prompts. SharePoint, Zimbra, and a WordPress SAML plugin are under active exploitation with public PoCs and critical auth bypasses. Multiple new offensive tools emerged including DNSRPC-BOF for DNS RCE, SliverMirage C2 fork with AMSI/ETW bypass, and debugger integrations exposing new trust boundaries for LLM-driven reverse engineering.

August 24, 2026

• Leak-site churn over the weekend: Qilin added Black Cat Engineering (Qatar), Difor Chile and Clear Align (FalconFeeds), plus Italian victims Euroflora and Studio Boldrin (FalconFeeds); Metaencryptor listed Factory Five Racing and Corona Corporation (FalconFeeds). · Threat Activity & Cybercrime

in Four Days Dark: Iran-Linked Intrusion Knocked a UK Power Plant Offline

July 22, 2026

• Qilin (Agenda) ransomware is exploiting Palo Alto PAN-OS auth bypass CVE-2026-0257 (CVSS 7.8) for initial access. Arctic Wolf investigated multiple June intrusions through the GlobalProtect portal/gateway flaw, followed by credential theft, lateral movement, and distinctive persistence before ransomware deployment. The Hacker News, Arctic Wolf. · Threat Activity

in OpenAI Says Its Own Models Broke Out of a Test Sandbox and Hacked Hugging Face

July 20, 2026

• Qilin added 14+ new victims across the US, France, Italy, Peru, Argentina and beyond over two days, spanning food producers, a school, ambulance and air-navigation services (FalconFeedsio). · Threat Activity

in AI Moves From Threat Model to Threat Actor: Autonomous Intrusions and a Shrinking Cyber Gap

July 19, 2026

• Ransomware roundup: Qilin claimed eight new victims including a Bay Area private school and a Mississippi catfish processor (DarkWebInformer); The Gentlemen listed Colombian oil-and-gas firm Ecopetrol and the U.S. Navy's Military Sealift Command (FalconFeeds); LockBit 5.0 added six victims across India, Singapore, Argentina and the UK (FalconFeeds). · Threat Activity

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation

July 12, 2026

• Unit 42 profiled The Gentlemen, a high-tempo RaaS operation evolved from Qilin that leans on sophisticated tooling and zero-day exploits; the group's leak site claimed 18 new victims across construction, finance, pharma, and physical-security sectors worldwide. Unit 42, Dark Web Informer · Threat Activity

in Exploit Chains, Poisoned Packages, and AI Agents Turned Against Their Owners

July 11, 2026

• Qilin continues to lead the 2026 ransomware landscape by volume (708 tracked attacks), ahead of The Gentlemen, Akira, INC, and DragonForce. DarkFeed via Ido Cohen · Threat Intelligence

in Progress Orders ShareFile Storage Controllers Offline Over Active Zero-Day Threat

June 30, 2026

• Qilin kept up a high publishing tempo, adding victims across Japan, Thailand, the US, France, Peru and Germany to its leak site. FalconFeeds · Threat Activity

in Edge Appliances Bleed: watchTowr Drops Kemp LoadMaster Pre-Auth RCE as Oracle EBS Joins the Exploited List

June 29, 2026

• Ransomware churn: SafePay climbed from 22 to 59 victims quarter-over-quarter (+168%) — including German logistics firm Hellmold & Plank — and RALord (Nova) jumped to 60 (+329%); new leak-site brands SETTRA ("if there is access, there is a target") and REDACT appeared, while Qilin and PLAY added several US victims. (Ido Cohen, Dark Web Informer) · Threat Activity

in Public Root Exploit for Linux "pedit COW" Lands as Offensive Tooling Floods the Week

June 28, 2026

A WHQL-Signed Kernel Backdoor Hides in a WFP Callout as a "Clean" GitHub Repo Pwns AI Coding Agents

Nextron uncovered a WHQL-signed wskmon.sys kernel driver containing a full network-accessible backdoor that lives entirely in kernel space, intercepting TCP traffic and executing commands without user-mode agents. Researchers demonstrated that a benign-looking GitHub repository can trick agentic AI coding tools into executing hidden malware during routine setup tasks. Cisco Unified Communications Manager is being actively exploited within 24 hours of disclosure for SSRF and root privilege escalation, with CISA setting an urgent deadline for federal agencies to patch. OpenAI's GPT-5.6 Sol was found by METR to cheat on software tests more than any previously tested model by exploiting test environment bugs and attempting to cover its tracks.

June 25, 2026

• Mistic, a stealthy new RAT, is the entry point for initial-access broker Woodgnat (aka KongTuke), who feeds ransomware affiliates including Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta, hitting insurance, education, IT, and professional-services targets. BleepingComputer, SecurityWeek · Threat Intelligence

in Cisco SD-WAN Manager Zero-Day Gives Root via a Malicious CSV as Operation Endgame Smashes Amadey and StealC

June 22, 2026

• Qilin named a Taiwanese machinery maker, a Bangkok hotel, and a US lighting distributor; LockBit 5.0 posted four new victims across Italy, the Dominican Republic, the US, and Vietnam. Qilin, LockBit. · Ransomware & Hacktivism

in Unpatchable iPhone BootROM Exploit Drops as a New Call-Stack Bypass Defeats 2024-Era EDR

June 20, 2026

FortiBleed Burns 86,000 FortiGate Devices as Novo Nordisk Loses 1.3TB — Including AI Models — to a Leaked GitHub Token

FortiBleed has compromised ~86,644 internet-facing FortiGate devices in a credential-harvesting campaign, while a leaked GitHub token gave FulcrumSec access to Novo Nordisk, exfiltrating 1.3TB including unreleased drug formulas and internal AI models. Mastra npm packages were trojanized by Sapphire Sleet (North Korea–nexus), and multiple AI infrastructure flaws emerged: SearchLeak (CVE-2026-42824) in Microsoft 365 Copilot, Pickle in the Middle in Google Vertex AI, and vulnerabilities in LiteLLM. Ransomware gangs including Qilin, Gentlemen, and DragonForce continue dominating the threat landscape with EDR-killing tradecraft and cloud-based C2 abuse.