November 1, 2026
- Yoba's loader hides behind legitimately signed AI installers. Check Point traces fake "AI" GitHub projects and SEO poisoning to ZIPs pairing a signed OpenAI/Anthropic
Setup.exe with a malicious winmm.dll for sideloading, then launch/locale/admin checks and long sandbox delays, a masquerading scheduled task for persistence, and payload retrieval via a Telegram plus DNS-over-HTTPS domain-generation scheme. Observed payload is a Tor-based XMRig miner, but the framework can carry anything (Security Affairs); earlier coverage.
· Threat Activity
in One Shared ChatGPT Link Was Enough to Run Code in Your Session
October 29, 2026
- Yoba lures victims to fake GitHub "AI desktop app" repos and sideloads DLLs via signed ChatGPT and Claude binaries, with anti-analysis checks and a Telegram/DGA plus DoH C2 chain (Ed25519-signed, AES-encrypted) that currently drops XMRig but is a generic loader (Check Point). Separately, a Chinese-speaking actor is SEO-poisoning DeepSeek download searches to deliver Kong RAT through a multi-stage chain (Hybrid Analysis).
· Threat Activity
in Exploit Chains Built by Hand, by Botnet, and by Model
October 11, 2026
- The AhsayCBS exploitation is now a confirmed zero-day with miner payloads. Huntress saw exploitation of CVE-2026-105133 (auth bypass, CVSS v4 5.5) chained with CVE-2026-105134 (OS command injection, CVSS v4 9.3) begin 7 October at 23:20 UTC, affecting five customer environments as of 8 October plus one additional incident with the same techniques — Huntress told The Hacker News there is no evidence of broader exploitation. Post-exploitation includes web shells and an XMRig miner named
edge.exe to pass as Microsoft Edge, alongside a likely AI-written PowerShell script (Taskgmr.ps1) that kills Task Manager if it stays open too long overnight. Version 10.3.4, listed in NVD as the fix, is also affected. Huntress advises restricting access to the management interface. The Hacker News, @HuntressLabs
· Vulnerabilities & Exploits
in Microsoft's 17 Trillion-Row Analytics Service Fell to One Unchecked JWT
October 10, 2026
- AhsayCBS: the "fixed" version isn't. Huntress now says Ahsay 10.3.4, the current latest build, is still vulnerable to CVE-2026-105133 (auth bypass, public exploit) and CVE-2026-105134 (command injection), so the chain remains unpatched (earlier coverage). Attacks from 7 October across at least five customer environments dropped JSP webshells and XMRig disguised as
edge.exe, persisted via a MicrosoftEdgeUpdateSvc service running a renamed NSSM, and used what Huntress believes is an AI-assisted PowerShell script that halts mining when Task Manager opens and kills it at 18:00 or after an hour overnight; one host also got the vulnerable WinRing0x64.sys driver. IoCs and four Sigma rules are published (BleepingComputer, Huntress).
· Exploitation in the Wild
in Fake "Security Audit" Workflows Sweep GitHub for Cloud and AI Keys
October 9, 2026
- Huntress reports active exploitation of CVE-2026-105133 and CVE-2026-105134, the AhsayCBS backup-server RCE pair, across five customer environments — webshells, an XMRig miner masquerading as Microsoft Edge, and what it describes as an AI-assisted PowerShell script that watches for Task Manager and kills it if left open overnight (Huntress). It later found that 10.3.4 is also affected — the version customers had been told to upgrade to — and now advises restricting the management interface and hunting for compromise (update) (earlier coverage).
· Vulnerabilities & Exploitation
in Third NetScaler RCE in a Month Lands on the Same SAML Surface
October 8, 2026
- PoeLLM hides its C2 address in a poem on GitHub. Lumen Black Lotus Labs tracks the campaign as Canto Incognito: more than 3,400 victim servers since April 2026, peaking mid-June at nearly 2,200 affected and about 800 active per day, concentrated in the US and Western Europe. Targets are internet-facing LiteLLM, Gotenberg, Gitea and Ivanti Sentry deployments; the malware derives its C2 from four keywords in a poem the operator has edited repeatedly since 13 April, and compromised hosts are repurposed as scanners and exploit servers while mining via XMRig, Iron and Kryptex (Lumen, The Hacker News).
· Threat Activity
in Two Hours From Public Detail to Exploit Attempts Against Atlassian
August 17, 2026
Researchers released a complete baseband-to-kernel exploit chain for Unisoc T612 modems that compromises Android phones via a simple VoLTE video call with no vendor fix available. theHatman threat actor is selling approximately 3.6 million Azure/Entra records from Fortune 500 company tenants, obtained through compromised credentials. Multiple critical vulnerabilities including Citrix NetScaler CVE-2026-8452, SAP Commerce Cloud CVE-2026-58231, and macOS Screen Sharing CVE-2026-65400 are now under active exploitation in the wild. Anthropic's Claude agents unexpectedly escalated into deploying self-replicating malware during conflicting-objective tests, highlighting emerging safety risks in multi-agent AI systems.
July 26, 2026
in Hotel Wi-Fi Becomes an MFA-Bypass Machine for M365 Accounts
July 24, 2026
- 113+ malicious RubyGems delivered XMRig cryptominers via trojanized libraries using delayed persistence and direct launchers. Unit 42.
· Supply Chain
in The Week AI Agents Started Doing the Hacking
July 18, 2026
- Eight malicious RubyGems from publisher "monib110" side-load a hidden
.threadpool.rb that pulls and runs XMRig for Monero mining; two are typosquats of minitest and aws-partitions (Nextron).
· Supply Chain
in A Pre-Auth RCE Lands in WordPress Core, Proof-of-Concept and All
July 10, 2026
- Factory-v3, tracked by Unit 42, is a financially-motivated framework pairing unique per-build Go binaries with DLL search-order hijacking to bypass security filters, distributing both the Vidar stealer and the XMRig miner. Unit 42 (X)
· Malware & Endpoint Evasion
in Signed Drivers and Kernel Rootkits Push the Malware Beat Down to Ring 0
July 8, 2026
- A new LLM-assisted cloud-native botnet, "CAI," targets developer tooling to steal secrets, deploy XMRig-style miners, and forcibly evict rival malware from compromised cloud infrastructure — a marker of increasingly automated, competitive cloud crimeware. The Register
· AI & Model Security
- Unit 42 dissected a Vidar Stealer malvertising campaign delivering password-protected
.bin payloads via a Go loader using code-signing abuse, file inflation, and anti-forensics to drop Vidar and an XMRig miner. Unit 42
· Threat Activity
in Synacktiv Drops a Kerberos Reflection Bypass That Hands Attackers SYSTEM