Threat database

Mistune versions before 3.3.0 contain a critical path traversal vulnerability in the RST include directive. This flaw allows attackers to read arbitrary files by using relative or absolute paths in markdown include directives. Exploitation can lead to exposure of sensitive files such as credentials or environment data embedded in rendered HTML.

Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU by submitting long runs of unmatched '[' characters. Attackers can send small markdown payloads that trigger O(N^2) parse_link_text and parse_link_label probing, occupying rendering workers for 30+ seconds per 16 KB input.

Mistune versions from 3.2.1 up to but not including 3.3.0 contain a CSS injection vulnerability via the unvalidated figwidth option in the figure directive. This allows attackers controlling markdown input to inject arbitrary CSS style declarations, potentially causing victim browsers to send requests to attacker-controlled servers and leak attribute values. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3.

Mistune versions before 3.3.0 have a cross-site scripting (XSS) vulnerability in the Include directive. This directive emits included HTML content as raw block_html tokens without proper neutralization. An attacker who can place a readable HTML file on the system can exploit this by referencing it with an include directive combined with path traversal, leading to stored script execution when escape=False is set.

Mistune versions 3.0.0 up to but not including 3.3.0 contain a denial of service vulnerability caused by inefficient regular expression handling in the parse_link_text function. This flaw allows attackers to craft markdown input with deeply nested square brackets, triggering quadratic parsing time and potentially exhausting server CPU resources.

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that allows unauthenticated attackers to exhaust CPU with unbalanced brackets. Attackers can submit Markdown containing many unbalanced '[' or '![' characters, forcing repeated unbounded forward scans and tying up worker processes for minutes.

Mistune versions before 3.3.0 have an inefficient algorithmic complexity vulnerability in the parse_link_text function. This flaw allows remote attackers to cause denial of service by submitting markdown with long runs of unmatched square brackets. The vulnerability triggers repeated forward scans that stall worker processes for minutes, leading to service disruption.

In September 2026, an SEO poisoning campaign distributed Armorsteal malware via fake websites impersonating Chocolatey and Microsoft Activation Scripts tools. The malware is Python-based, protected by Pyarmor, and includes modules for remote access, surveillance, and information stealing. It captures keystrokes, clipboard data, cryptocurrency wallets, browser data, Discord tokens, passwords, and SSH keys. The campaign uses anti-analysis techniques such as cloud provider detection and code obfuscation, with frequent infrastructure changes observed. No patch or remediation is indicated, and no known exploits in the wild are reported.

The LiteLLM project's release pipeline was compromised on October 21, 2026, resulting in the distribution of malicious versions of the LiteLLM PyPI package and Docker images. The compromised version 1.107.0 contained malware that steals credentials, secrets, environment variables, and other sensitive data from affected systems. The malware executes automatically on Python startup by placing malicious files in the Python library directory. The attack impacted all PyPI wheels for LiteLLM 1.107.0 and Docker images tagged with v1.107.0 and related tags. The malicious packages have been removed, and users are advised to stop affected deployments, isolate infected systems, and rotate exposed secrets. The recommended clean version is LiteLLM 1.106.2.

This analysis covers advanced Android threats that operate beyond the standard application sandbox, leveraging new OS-level telemetry features. Android's Delegated Scope allows enterprises to grant security apps access to logs on managed devices without full MDM control. The Intrusion Logging feature extends forensic visibility to BYOD users with Advanced Protection on Android 16 or later. This capability enables collection and sharing of encrypted security, DNS, and connection logs for threat analysis. The analysis reveals the full RatHat attack chain, including Wireless Debugging self-pairing, ADB shell command execution, daemon staging, and command-and-control communications, providing actionable indicators of compromise.

This is a medium-severity phishing campaign observed in late 2026 targeting organizations during year-end and fiscal close periods. Attackers exploit increased legitimate administrative communications in finance, HR, and IT by impersonating compensation adjustments, Q4 financial documents, access reviews, invoice follow-ups, and benefits statements. The campaign uses themes from SharePoint, Docusign, and Microsoft 365 to deliver credential harvesting pages disguised as document-sharing portals. It affects multiple sectors including aviation, telecommunications, manufacturing, real estate, technology, and financial services, with a concentration in the Middle East. The phishing lures are generic and require minimal customization, making them effective during busy periods when employees expect increased document requests.

TRUST#GRAFT is a sophisticated malware attack targeting authenticated WordPress administrator browser sessions. It uses JavaScript loaders that mimic Cloudflare verification screens to fingerprint browsers, harvest credentials, and profile environments. Upon detecting an active WordPress admin session, it extracts CSRF tokens and uploads a malicious plugin disguised as 'Web Media Optimizer.' The PHP backdoor persists by copying itself to the must-use plugins directory, injects remote JavaScript into public pages, provides token-gated admin access, and hides from standard plugin management interfaces. This attack leverages existing trusted sessions without authentication bypass and involves coordinated infrastructure across multiple domains.

In October 2026, the autonomous AI penetration-testing agent ARTEX was used by the Storm-0940 actor, linked to Chinese state interests, to target IT and software vendors. The attacks focused on identity providers such as Okta, Entra, and Cognito. Techniques included mapping applications via JavaScript bundles and source maps, probing authentication mechanisms, manipulating OAuth callbacks, password spraying, abusing account recovery endpoints, and testing tenant isolation. Sessions lasted 24-30 hours with automatic IP rotation upon blocking. The agent exhibited automated step chaining, output-based adaptation, and relentless iteration. Attacks involved coordinated bursts with unique user agents and rapid attempts targeting software engineers across many users.

MythicRatatoskr is a Go-based backdoor leveraging the Yggdrasil mesh network for encrypted, decentralized command and control communications. It was deployed in a coordinated attack involving UAC-0099 and Sandworm targeting a Ukrainian grain logistics company in mid-2025. The backdoor provides typical malicious capabilities such as command execution, file transfer, screenshot capture, and SOCKS5 proxying. The attack sequence included initial access via spearphishing, backdoor deployment, and a subsequent destructive data-wiping phase using SDelete via Active Directory Group Policy. This incident marks the first known use of Yggdrasil by state-aligned threat actors for C2 communications.

Malware#mythicratatoskr#matchboilUkraine

StealC malware has resurfaced as Stadia, a remote access trojan (RAT) that incorporates StealC's original code. Stadia extends capabilities beyond simple data theft to include hidden desktop control, live command shell, file management, process management, and in-memory loading. It communicates via plain HTTP to hardcoded IPs using RC4 encryption with Base64 encoding and persists through hidden scheduled tasks in randomized directories mimicking legitimate updaters. The operator targets former StealC customers with subscription offers. No official patches or fixes are available, and no known exploits in the wild have been reported.

A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local access to view some system files and interrupt the normal operation of the affected service.

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting normal operation of the affected device.

An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to make limited unauthorized modifications to certain settings of the affected system.

A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inject malicious scripts. Successful exploitation could allow an attacker to execute arbitrary script code in the context of another authenticated user's browser session.