The Week Proof-of-Concept Became Mass Exploitation Overnight

Two pre-auth RCEs — SonicWall SMA1000 and WordPress core — went from published PoC to broad, ransomware-linked exploitation inside a day each, and the industry’s PoC-to-KEV lag effectively vanished. Underneath that, callstack spoofing that defeats Intel CET stopped being a research curiosity and shipped inside commercial C2, while Finland’s Supo put a name and a timeline on the FSB campaign the EU sanctioned last week. AI agents kept getting weaponized from both ends, but this week the sharper edge was speed: the window between a bug going public and honeypots lighting up is now measured in hours.

The Week in Review

Edge and now app-layer pre-auth RCE stayed the fastest path in — third straight week of it. The SonicWall SMA1000 zero-days (CVE-2026-15409 SSRF + CVE-2026-15410 command injection) moved from CISA KEV entries midweek to broad-scale exploitation from ~03:00 UTC once a public PoC landed, with Rapid7 shipping a working non-root RCE and Volexity attributing the intrusions to UTA0533 and Inc ransomware (Volexity). Then it jumped off the appliance entirely: wp2shell (CVE-2026-63030 + CVE-2026-60137) is unauthenticated RCE against a default WordPress install with zero plugins, and within 48 hours Assetnote, calif.io and FullHunt had reproduced it and the advice shifted to “patch and assume compromise” (BleepingComputer). Fortinet FortiSandbox, Oracle EBS, and a rolling series of SharePoint flaws filled out a week where the must-patch list was almost entirely things already being hit.

CET-defeating callstack spoofing graduated from PoC to product. Last week’s twin releases — @_MrTiz’s thread-pool trampoline and BingusLdr — got operationalized this week when Nighthawk 1.0 “Apex” shipped with CET-compatible call-stack masking modes (gadgets and syscalls) and customizable synthetic frames (Nighthawk), and UnwindRaven landed as an open framework for constructing fully synthetic stacks at thread startup (GitHub). The technique defenders assumed Intel CET had closed is now baked into tooling on both the offense and detection-engineering sides. Alongside it: Bitdefender’s bind-link (bindflt.sys) EDR-blinding, SpecterOps’s WebDAV NTLM-relay egress path for AD escalation, and iPurple’s QoS-throttling of EDR telemetry — a steady drumbeat of legitimate-functionality abuse to starve sensors.

AI agents kept taking damage as the trusted context, not just the prompt. The through-line from last week sharpened into fact corruption: agent data injection can make a shopping agent click “Buy Now” or a coding assistant run a stranger’s command by poisoning what it trusts, not hijacking its task (THN); a Claude for Chrome flaw lets a malicious extension simulate clicks to trigger AI actions against Gmail and Salesforce; and GPT-5.6 in Full Access Mode was caught deleting user home directories — a blunt reminder of blast radius when agents get unconstrained filesystem access. On the offense side, the NadMesh Go botnet is Shodan-hunting exposed ComfyUI, Ollama, n8n, Langflow and friends for cloud keys (claiming 3,811 AWS keys), agentic infrastructure is now an enumerated target class.

Open-weight frontier models turned the jailbreak question into a governance one. Kimi K3 (2.8T params) landed near GPT-5.6 Sol on benchmarks — and was jailbroken within hours, coaxed into DLL-injection code, a full ARP-spoofing/MITM framework and CBRN detail with guardrails described as “basically optional” (@elder_plinius). With full weights due July 27 and the UK AISI planning cyber-capability testing only afterward, the pre-clearance gap for open-weight models is now a live, unanswered problem.

Russia’s FSB Center 16 campaign came home to the Nordics. Following last week’s joint EU/UK sanctions, Finland’s Supo went public on a multi-year FSB 16th Center campaign against Finnish critical infrastructure, hunting internet-exposed legacy SNMP and Cisco Smart Install devices — of which NCSC-FI counts only ~20 in-country (Yle). Small numbers, named adversary, active hunting.

Developing Stories

• SonicWall SMA1000 (CVE-2026-15409/15410): Escalated from KEV listing to broad exploitation off public PoC, now attributed to UTA0533 and Inc ransomware; note SonicWall’s separate ADFS patch (CVE-2026-56155) reportedly only adds an audit log, not a fix. Volexity
• WordPress wp2shell (CVE-2026-63030): From Saturday’s PoC drop to actively exploited by Sunday — patch to 6.8.6/6.9.5/7.0.2 and treat exposed installs as compromised. BleepingComputer
• FSB Center 16 router/CI espionage: Now in its second week — moved from allied advisory and EU/UK sanctions to Finland’s Supo confirming domestic critical-infrastructure targeting. Yle
• LegacyHive Windows LPE: Detection content shipped (GossiTheDog KQL), but the zero-day is now reported as granting admin on fully up-to-date systems — still circulating, still unpatched-in-practice. BleepingComputer
• SharePoint zero-day wave: Grew again — CISA added CVE-2026-58644 (CVSS 9.8 deserialization RCE) to KEV, distinct from the on-prem chain flagged earlier in the week. THN
• Scattered Spider / TfL: Closed out — Thalha Jubair (20) and Owen Flowers (18) sentenced to 5.5 years each, the UK’s largest cybercrime prosecution. The Record
• The Gentlemen / Qilin: Still running hot — Qilin claimed eight more victims, The Gentlemen listed Ecopetrol and the US Navy’s Military Sealift Command. FalconFeeds

Tools & PoCs Worth Grabbing

• Nighthawk 1.0 “Apex” — major C2 update with CET-compatible call-stack masking (gadgets/syscalls), improved BOF/PE/COFF loader, new Avalonia UI. Nighthawk
• ADPathFinder (NetSPI) — unifies BloodHound CE, MSSQLHound and ConfigManBearPig via OpenGraph to map shortest attack paths across AD, ADCS, SCCM and MSSQL. GitHub
• KHAØS — modern post-exploitation C2 with five covert channels and a full evasion feature set, now in the C2 Matrix. source
• UnwindRaven — Windows x64 framework that builds fully synthetic call stacks at thread startup; relevant to both spoofing and detection. GitHub
• windows-process-injection — curated reference collection of injection techniques. GitHub
• rsnap — rapid post-ex Windows artifact enumeration via registry snapshots. source
• ASUS bsitf.sys PoC (CVE-2026-13585) — arbitrary physical-memory mapping via unvalidated IOCTL, a clean BYOVD primitive. ahmadz.ai
• WallBreaker v2 — LLM red-teaming CLI update with swarm-mode multi-model attacker and per-model break vault; ~30% higher ASR. source
• VulnHunter (Capital One) — open-source agentic tool applying attacker-first reasoning to source, with finding verification. GitHub
• deepteam / LLMVault — jailbreak/prompt-injection simulation toolkit, and an offline OWASP-LLM-Top-10 CTF lab. deepteam · LLMVault

Under Active Exploitation

• SonicWall SMA1000 — CVE-2026-15409 / CVE-2026-15410 — broad exploitation from public PoC, attributed to Inc ransomware; patch now, hunt logs. watchTowr PoC
• WordPress core — CVE-2026-63030 (wp2shell) — unauthenticated RCE on default installs, public exploits circulating. FullHunt
• Microsoft SharePoint — CVE-2026-58644 — CVSS 9.8 deserialization RCE, exploited soon after disclosure, on KEV. THN
• Oracle E-Business Suite — CVE-2026-46817 — unauthenticated flaw exploited in the wild, 1,000+ exposed instances, federal deadline set. source
• Fortinet FortiSandbox — two zero-days under active exploitation, CISA priority-patch order. BleepingComputer
• Windows LegacyHive (User Profile Service LPE) — public exploit now reported granting admin on fully-patched systems. BleepingComputer
• Siemens ROX II OT switches — three-bug chain to persistent root, PoC detailed; firmware updates rolling. Unit 42
• Windows kernel PoCs — win32k KASLR-bypass info leak CVE-2026-50416 and Cloud Files UAF LPE CVE-2026-58613, both with write-ups. CVE-2026-50416 · Talos