Ransomware threat actors are shifting tactics away from encrypting data to extorting victims through data theft and demonstrating access by hijacking Active Directory environments. The PAYLOAD campaign exemplifies this trend by using malicious Group Policy Objects to display ransom notes and lock screens without encrypting files. This shift is driven by the increasing difficulty attackers face in collecting ransom payments due to widespread backup practices and the complexity of decrypting large-scale infections. Instead, attackers steal confidential data and threaten publication, which can cause reputational damage and regulatory penalties. Data exfiltration is also harder to detect than encryption-based attacks, making it a more attractive method for extortion. Businesses are advised to maintain strong cyber hygiene, including regular backups, patch management, endpoint protection, and access control to mitigate these evolving extortion threats.
IDC Frontier's IDCF Cloud service in Japan suffered a ransomware attack on October 7, 2026, causing an outage in its East Japan Region 1 data center cluster. The attack disrupted services for 495 companies and local governments, leading to the shutdown of impacted systems and disabling of customer management console access. The threat actor claimed to have encrypted large volumes of data and virtual machine resources. IDC Frontier is investigating the attack, isolating affected systems, and verifying security before restoring access. A related outage at Nissui Corporation's logistics subsidiary due to suspected unauthorized access is under investigation, but a connection to the IDCF Cloud attack is unclear. Recent trends indicate increasing cybersecurity incidents targeting Japanese entities, with attackers exploiting access control and authentication weaknesses, possibly accelerated by AI tools. No patch or fix information is available as this is a ransomware incident affecting a cloud service.
CVE-2026-107608 is a vulnerability in aws-cdk-lib where the asset bundling process using Docker files could improperly include symlinked files or directories in the output without those symlinks being part of the input. This affects all versions prior to 2.267.0. The issue arises when bundling assets with Docker files, potentially causing unexpected files to be included in the deployment package.
CVE-2026-107322 is an OS command injection vulnerability in the Amazon Agent Plugins for AWS, specifically in the databases-on-aws plugin versions 1.0.0 through 1.7.0. This plugin extends AI coding agents with AWS workflows and includes database helper scripts. The vulnerability arises from an incomplete input validation that allows a remote unauthenticated actor to supply crafted content. This crafted input can lead to operating system command execution on the host if the agent invokes the local helper with the malicious database command. The commands execute with the permissions of the helper process. This issue does not affect the Aurora DSQL service or bypass database privileges. A fix is available in version 1.7.1.
The CyberAgents Exchange by Tenable is an open-source directory for AI agents used in security operations, which undergoes a rigorous vetting process called the Exchange Inspector before listings earn a vetted tag. This process includes automated checks, AI model assessments, and human verification to identify security issues such as SSRF, path traversal, excessive permissions, and memory poisoning. The vetted AI agents help accelerate threat hunting, remediation triage, and cloud posture investigation. The Exchange Inspector aims to mitigate risks associated with deploying AI agents that carry credentials and perform autonomous actions, reducing the potential blast radius compared to typical open-source libraries. The directory promotes transparency by requiring contributors to keep code in public repositories for review prior to deployment. The Exchange Inspector combines Tenable’s exposure detection tools, OpenAI GPT cyber models, and human review to ensure security before deployment.
Threat actors are increasingly leveraging Web3 decentralized blockchain architectures to enhance command-and-control (C2) infrastructure in cloud supply chain attacks. These attacks target developer workstations and CI/CD pipelines by poisoning open-source dependencies to steal ephemeral cloud credentials and establish persistence. Notable campaigns include the ChainDrop npm worm and the PolinRider campaign, which use Web3 smart contracts and multi-chain transaction queries to dynamically update malware infrastructure and evade traditional detection. DPRK-affiliated actors have been observed using these techniques in recent supply chain compromises. Defensive measures include restricting Web3 network connections where unnecessary, deploying endpoint and network protections, and automating policy controls across CI/CD environments.
This content discusses how frontier AI models are transforming vulnerability management, particularly for Microsoft software. AI accelerates vulnerability discovery and patch development, resulting in a significant increase in identified vulnerabilities, especially for on-premises Microsoft products. Microsoft mitigates most cloud vulnerabilities without customer action, but on-premises customers should expect more frequent and numerous patches. CISOs face challenges balancing rapid patching with accuracy at unprecedented scale. The post recommends increased patching resources, faster patch deployment for critical systems, use of AI-powered scanning harnesses, and defense-in-depth strategies. Microsoft also collaborates with industry peers to address open-source vulnerabilities and promotes Secure by Design and Secure by Default principles to improve security posture.
CVE-2026-104002 is a vulnerability in the data masking utility of Powertools for AWS Lambda (Python) that causes fail-open error handling. This flaw can allow unauthorized actors to access sensitive field values that should have been masked. The issue affects versions from 3.6.0 through 3.34.0 inclusive. AWS has issued a security bulletin to raise awareness of this vulnerability.
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value.
To remediate this issue, users should upgrade to version 0.15.0 or later.
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute.
To remediate this issue, users should upgrade to version v3.5.0 or later.
CVE-2026-97662 is an argument injection vulnerability in the AWS security-agent-mcp-server's diff scan operation. It allows a crafted reference value to be interpreted as a command-line option instead of a revision. This can enable an attacker with certain context-dependent capabilities to create, overwrite, or truncate arbitrary files outside the intended workspace directory. The vulnerability affects versions from 0.1.1 up to but not including 0.2.0 of the security-agent-mcp-server.
Cisco Talos identified a China-nexus cyber espionage campaign named UAT-11587 targeting government and policy organizations across Asia, including Taiwan, India, the Philippines, and Cambodia. The campaign uses spear-phishing emails with tailored decoy documents to deliver a Rust-compiled Windows backdoor called Antino. Antino supports host reconnaissance, shell and PowerShell execution, file transfer, in-memory shellcode loading, and persistence. Its command-and-control communication uniquely operates through Microsoft 365 applications using Microsoft Graph to interact with Outlook and OneDrive. The campaign has affected at least 16 institutional environments across eight Asian countries with approximately 350 compromised endpoints. Talos assesses this activity as an intelligence gathering operation with moderate to high confidence. No patch or remediation guidance is provided in the report.
CVE-2026-100308 is a vulnerability in Amazon GluonTS before version 0.17.0 that allows arbitrary command execution during deserialization of untrusted model artifacts. The issue arises when calling Predictor.deserialize() or RepresentablePredictor.deserialize() on model directories not fully controlled by the user. This can lead to execution of operating system commands with the privileges of the loading process. The vulnerability has been fixed in version 0.17.0. Users should upgrade to this version and only deserialize trusted model artifacts.
The JadePuffer ransomware operator conducts agent-driven attacks targeting Microsoft Azure tenants. These attacks automate reconnaissance, credential theft, lateral movement, and destruction of cloud resources, including storage accounts, Key Vaults, Function Apps, Virtual Machines, and App Services. The attacker used compromised service principals to access and delete resources, removing backup protections to hinder recovery. Attempts to delete Azure SQL databases failed due to unsupported API versions. The threat actor is tracked as Storm-3168. Microsoft recommends activating cloud workload protections, auditing for exposed credentials, and enforcing least-privilege permissions.
Anthropic now allows you to run Claude Code via cloud sessions without signing up for the research preview, and it's offering up to $250 in free usage credits, so more users can give it a try. [...]
CVE-2026-96883 is a type confusion vulnerability in the pgcollection extension for PostgreSQL. It arises from incorrect type coercion logic when an authenticated user requests a stored icollection value as a type incompatible with its actual stored type. This flaw can cause the PostgreSQL backend to crash or allow arbitrary code execution. The vulnerability affects pgcollection versions 2.0.0 through 2.1.1. It has been fixed in version 2.1.2. Amazon RDS for PostgreSQL and Amazon Aurora PostgreSQL are not impacted as they ship version 1.1.1, which does not contain this issue. No workarounds are available.
This analysis discusses a new type of denial-of-service attack against AI agents called "denial of wallet," where attackers exploit the pay-as-you-go token consumption model of large language models (LLMs) to cause excessive financial costs. Autonomous AI agents that operate continuously and retry failed steps can consume tokens unpredictably and in large bursts, making costs difficult to control. Attackers can exploit this by sending numerous complex or looping requests that inflate token usage, leading to significant budget overruns. This issue has been recognized as a top risk in the OWASP guide for language models (LLM06:2026).
A security issue exists in Google Kubernetes Config Connector (KCC) where a Kubernetes user with limited permissions can escalate privileges to gain control over an entire Google Cloud organization. This occurs because KCC uses a single Google Cloud service account with broad permissions to perform actions on behalf of Kubernetes users, without verifying if the user is authorized for those actions in Google Cloud. This confused deputy problem allows a user who can create IAMPolicyMember resources in a Kubernetes namespace to assign themselves any Google Cloud IAM role that KCC's service account can grant, including organization owner. Google acknowledges this behavior as intended design, but it creates a significant risk if KCC's service account has overly broad permissions and Kubernetes RBAC is not tightly controlled.
CVE-2026-94450 is a denial of service vulnerability in s2n-quic, a Rust implementation of the QUIC protocol. The flaw occurs due to improper validation of the Destination Connection ID length when a server is configured to send Retry packets. An unauthenticated attacker can exploit this by sending a crafted UDP datagram to shut down the vulnerable server endpoint. This affects s2n-quic versions up to and including 1.88.0. AWS services are not impacted, and only server endpoints configured to issue Retry packets are vulnerable. The vulnerability is fixed in version 1.89.0. No workaround exists, so upgrading is required.
Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda function that dispatches caller-supplied parameters to privileged service APIs without authorization validation.
To remediate this issue, we recommend upgrading to version 5.26 or later. After setup is complete, either delete or disable the sfExecuteAWSService function. If you retain the function, restrict invocation to the intended IAM user only.
