Two critical remote code execution vulnerabilities in PHP, collectively named PHP2Shell, were disclosed on October 21, 2026. CVE-2026-109618 involves out-of-memory handling corruption that can interrupt PHP while internal request data is partially initialized, leading to invalid data treatment. CVE-2026-109619 exploits stale global state where request-owned internal state survives after memory is freed. Both vulnerabilities can be exploited successfully on ARM64 systems and x86 systems without ASLR. Fixed versions include PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Over 2.6 million internet-facing hosts running PHP were identified as vulnerable, with 42% on end-of-life branches receiving no official patches. Early exploitation attempts were observed from multiple sources, including scanning activity and webshell deployment attempts targeting the upload-progress vulnerability path.
Between July and September 2026, a sophisticated campaign targeted Microsoft 365 accounts using adversary-in-the-middle attacks and token replay techniques. Attackers captured sign-in sessions via AiTM relays and replayed stolen tokens from IP addresses linked to a German hosting provider. The campaign compromised 79 organizations with 497 successful sign-ins amid over 200,000 failed attempts. Malicious actors registered rogue Entra devices, replaced victim MFA methods, and created hidden inbox rules to conceal their activities. The operation evolved through four phases, rotating IP addresses and employing scripted token and browser session replay techniques. Compromised accounts were used for business email compromise, including sending payroll-related emails to external contacts.
SiriusQT is a Windows Remote Access Trojan (RAT) distributed as Malware-as-a-Service since April 2026. It offers advanced capabilities including hidden VNC, credential theft, cryptocurrency wallet collection, clipboard monitoring, keylogging, process injection, and persistence. The malware uses custom encrypted command-and-control communication and has both native C++ and .NET loader variants. It is distributed primarily by a reseller named GhostKernel and targets victims in several European countries including the UK, Germany, France, Spain, Italy, and the Netherlands.
Amazon Threat Intelligence detected exploitation attempts of the PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 in MadPot honeypot telemetry on October 17, 2026, four days before their public disclosure. Initial exploitation originated from a commercial anonymization network, indicating threat actor activity during the embargo period. Multiple proof-of-concept exploits with diverse payloads appeared on the disclosure date, suggesting involvement of multiple actors. After the embargo lifted on October 21, exploitation rapidly became widespread. This case highlights the limitations of coordinated vulnerability disclosure and the accelerated timeline for exploit development enabled by AI-assisted analysis.
On October 21, 2026, the LiteLLM Python proxy library version 1.107.0 was compromised in a supply chain attack. The malicious release was available on PyPI and official Docker images for approximately two hours. Attackers used stolen GitHub CLI OAuth tokens from three engineers to deploy a malicious fork via a private release workflow. The payload included a credential stealer targeting cloud, developer, AI-tool, browser, and LiteLLM proxy credentials, as well as a second-stage remote access trojan backdoor. The malware executes automatically whenever Python starts by placing files in the site-packages directory. This is the second known supply chain compromise of LiteLLM in 2026, unrelated to the previous incident linked to TeamPCP activity.
In October 2026, a Chinese-speaking threat actor conducted a global AI-assisted hacking campaign using the ARTEX penetration testing framework combined with multiple AI coding assistants. The attacks targeted organizations across finance, retail, education, cryptocurrency, and telecommunications sectors in over 20 countries worldwide. The campaign utilized custom scripts to maintain context across AI sessions and divided tasks among specialized AI agents. The attackers sought bulk personal data, transaction records, and mobile phone numbers, with indications of intent to sell stolen information on underground markets. The workflow included peer review among AI models to improve effectiveness. The campaign is financially motivated and opportunistic in nature.
LiteLLM version 1.107.0 was compromised in a supply chain attack affecting PyPI packages and Docker images. The malicious release includes Python startup files that execute automatically, stealing cloud credentials, private keys, browser data, and AI development tool authentication tokens. The attack used a lookalike repository in the release workflow and targets credentials for AWS, Azure, Google Cloud, GitHub CLI, SSH keys, npm/PyPI, and AI tools such as Claude, Gemini, and Cursor. Stolen data is encrypted and sent to a command-and-control server. A loader enables remote Python code execution. The package has approximately 23 million weekly downloads, indicating a significant potential impact.
Researchers uncovered an AI-driven intrusion ecosystem operated by affiliates of INC and The Gentlemen ransomware groups via seven exposed command-and-control servers. The operators integrated commercial AI models, exploited edge devices at scale, and compromised thousands of targets, primarily in the US industrial manufacturing and healthcare sectors. The infrastructure included multiple custom encryptor builds and evidence of active victim encryption. Operational security failures exposed source code, credentials, AI session logs, and victim data. The campaign demonstrates advanced ransomware-as-a-service operations leveraging AI and custom tooling.
The threat actor k0t is conducting a large-scale campaign targeting network edge devices from FortiGate, FortiWeb, and Palo Alto GlobalProtect. The campaign exploits known vulnerabilities CVE-2025-64446 and CVE-2026-0257, combined with brute-force attacks, to harvest over 70,000 credentials globally. Post-compromise activities include credential theft, Active Directory enumeration, and data exfiltration using Rclone to cloud storage. Persistence is maintained through tools such as MeshCentral, AdaptixC2, and remote management software like Atera and AnyDesk. The campaign overlaps with ransomware groups Qilin and The Gentlemen, suggesting k0t may act as an Initial Access Broker, though no direct affiliation is confirmed.
BlueHammer (CVE-2026-33825) is a local privilege escalation chain targeting Windows Defender Antimalware Platform versions before 4.18.26030.3011. It requires initial code execution as a standard user and uses a series of legitimate Windows mechanisms to escalate privileges to NT AUTHORITY\SYSTEM. The exploit freezes the MsMpEng.exe process via CloudFilter manipulation and stages malicious update files. Laboratory tests demonstrated successful privilege escalation, recovery of domain-admin credentials from LSASS, and lateral movement using pass-the-hash techniques to compromise domain controllers. Exploitability depends on runtime factors such as pending signature updates, Defender state, filter drivers, VSS, and CloudFilter reachability. No known exploits are reported in the wild, and no patch information is provided.
A financially motivated threat actor named BUGSTER used jailbroken AI assistants, including the Hermes Agent framework with DeepSeek V4, to conduct multiple cybercrime activities primarily in India and the British Indian Ocean Territory. The actor exploited AI-generated scripts to exfiltrate over 5,200 personal records from a university database, perform WordPress brute force attacks, and plan VoIP telecommunications fraud. Additional malicious activities involved Wi-Fi password cracking requiring physical proximity, cryptocurrency whale reconnaissance, and credential scanning toolkit development. This campaign demonstrates how AI tools can lower the skill barrier for cybercriminal operations.
A malware campaign used a sponsored Google search result to redirect victims to a spoofed Amazon login page on Google Sites. The page displayed a fake CAPTCHA (ClickFix) that tricked users into running a malicious command via the Windows finger utility, initiating a multi-stage infection. Payloads included IronPython, obfuscated Python scripts, Doina malware, Lumma Stealer via a Node.js package, and a pirated NetSupport Client RMM tool. The campaign used barbecue-themed domains for command and control and had alternate payloads for macOS. Attackers employed advanced obfuscation techniques such as Base64 with Cyrillic substitution, XOR, and RC4 encryption.
An autonomous offensive agent named 'Skynet' hijacks exposed large language model (LLM) endpoints on the internet to conduct a range of attacks. It uses 74 offensive tools targeting web frameworks, credential theft, database access, and cryptocurrency mining. The agent operates unattended for extended periods by bypassing AI safety controls through jailbreak techniques. Victims include AI model owners who incur costs for computing power and compromised servers exploited for Monero mining. This activity was observed via an AI honeypot capturing the full attack sequence, highlighting a novel self-directed cybercrime targeting unauthenticated internet-facing AI services.
The Gentlemen is a ransomware-as-a-service (RaaS) operation active since mid-2025, targeting Windows, Linux, NAS, and BSD systems. It uses a double-extortion approach by encrypting files with ChaCha20 encryption and exfiltrating data. The ransomware kills security processes via vulnerable drivers and spreads laterally using PsExec. A breach in May 2026 exposed internal communications and affiliate details. The group mainly targets organizations in the United States and Europe across various sectors including manufacturing, technology, healthcare, professional services, and retail.
Operation FlashHole is a sophisticated cyberattack campaign launched by the Lazarus Group targeting South Korea. It exploits mandatory security software CrossWeb EX using watering hole attacks and spear-phishing with fake portfolio and resume websites. The campaign, active since July prior to January, targets sectors including software, construction, and cable equipment manufacturing. It employs a modular malware framework combining multiple malware families such as TechHub, Cubridge, TouchShift, TouchHub, ClientHub, and LPEClient. Techniques used include in-memory execution, DLL side-loading, and command-and-control infrastructure leveraging GitHub and Dropbox. The attackers also incorporate advanced cryptographic methods like post-quantum cryptography (ML-KEM-1024) and GOST encryption. This campaign demonstrates Lazarus Group's evolving tactics specifically tailored for South Korean targets.
Threat actors are conducting phishing campaigns targeting Google Cloud Platform (GCP) environments by using sponsored search ads to steal privileged user credentials. They disable security controls, create service accounts with Gemini API access, and link attacker-controlled external projects to victim billing accounts. This enables unauthorized large-scale AI workload execution, causing significant unexpected charges within 24-48 hours. The attackers use evasion techniques such as geographic IP blending and demoting legitimate administrators to avoid detection and remediation.
Wazza is a multi-stage phishing kit actively targeting Microsoft 365 accounts since July 2026. It uses phishing emails with PDF lures themed around business documents to redirect victims through a complex infrastructure involving Google Sites and CloudFlare Workers. The kit impersonates multiple well-known services and employs advanced browser checks and client-side protections. It abuses Microsoft OAuth device authorization to trick victims into completing authentication, allowing attackers to gain access to accounts and cloud resources. The campaign is medium severity due to credential theft risks.
Midnight Mimosa is a widespread Android malware campaign involving malicious applications preinstalled in the firmware of low-cost MediaTek-based devices. It affects over 150 countries, with highest concentrations in Mexico, France, and Italy. The malware leverages platform-signed system apps to silently deploy payloads, evade security protections, and execute remotely supplied code. It monetizes compromised devices through advertising fraud and residential-proxy services. The malicious firmware components provide persistent system-level access before device activation and bypass conventional Android security controls by temporarily disabling Google Play Store protections. Affected devices include low-cost Android handsets, counterfeit flagship models, and devices from Doogee and Cubot.
Between May and September 2026, a Russian-speaking threat actor targeted Ukraine's state data-exchange infrastructure by exploiting Log4Shell vulnerabilities in Graylog servers. The attacker scanned millions of Ukrainian IP addresses to identify systems running UXP Verifier, a component of the national data-exchange platform. Using a two-stage CommonsBeanutils2 deserialization exploit delivered via Graylog's sessions API, the attacker gained access to at least two organizations, including a logging server containing millions of documents. The operation was exposed when the attacker accidentally served their working directory over HTTP, revealing tools and logs. Although the attacker queried transaction indices and showed knowledge of the system schema, no direct data exfiltration was observed. The campaign also involved failed exploitation attempts of other vulnerabilities.
CVE-2026-0257 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS affecting GlobalProtect portal and gateway components. Exploitation allows unauthorized attackers to establish VPN connections without valid credentials. Ransomware groups such as Spikey Scorpius (Qilin), Tarnished Scorpius (Inc), and Settra actively exploit this flaw to gain initial network access. Post-exploitation activities include bypassing multi-factor authentication, internal reconnaissance, lateral movement via RDP and SMB, credential harvesting, and ransomware deployment. Attackers also pivot to virtualization infrastructure by accessing vCenter management appliances, disabling ESXi hypervisor security controls, and performing offline credential dumping from domain controller virtual disks. Multiple industries have been impacted. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.
