The TIE Brief
Leads 1
The PHP project released an emergency update on Oct. 21 fixing two high‑severity CVEs affecting the session.upload_progress feature. VirusTotal scans reveal roughly 5 million internet‑facing PHP hosts, many running unsupported versions with the vulnerable feature enabled. Operators are urged to apply the patch or disable the feature via php.ini.
Key points
- The out‑of‑band release fixes CVE‑2026‑109618 and CVE‑2026‑109619, both rated 9.2 CVSS v4.0.
- VirusTotal identified about 5.1 M IPs running PHP, with 3.8 M actively listening on ports.
- Only ~1.1 M disclose their PHP version; the majority hide it, complicating detection.
- ~272 K hosts run supported branches, while ~758 K run end‑of‑life versions that lack fixes.
- Top web servers are Apache (~2.9 M) and nginx (~1.48 M); major cloud providers host a large share of the footprint.
Sources
virustotal.com
openai.com
Twitter/blackorbird
Bleeping Computer
SecurityWeek
The Hacker News
The Hacker News
The Record by Recorded Future
linkedin.com
amazon.com
hadrian.io
google.com
CSO Online
Twitter/lorenzofb
Bleeping Computer
SecurityWeek
SecurityWeek
The Hacker News
Twitter/HackingLZ
dshield.org
sans.edu
eliastaylor.com
CSO Online
amazon.com
The Record by Recorded Future
SecurityWeek
thephp.foundation
Krebs on Security
Rapid7 Research Blog
Securelist
Twitter/blackorbird
The Record by Recorded Future
cloudflare.com
Bleeping Computer
openai.com
The Hacker News
Twitter/AndrewMohawk
Twitter/AndrewMohawk
Twitter/craiu
Twitter/AndrewMohawk
wiz.io
Cyberscoop
CISA Cybersecurity Advisories
The Hacker News
SecurityWeek
The Hacker News
jackalsyn.com
Twitter/blackorbird
php.net
Elastic Security Labs
Bleeping Computer
php.net
Twitter/HackingLZ
@JohnHultquist
@JohnHultquist
@blackorbird
@lorenzofb
@craiu
@HackingLZ
@blackorbird
@AndrewMohawk
@AndrewMohawk
@craiu
@AndrewMohawk
@craiu
@blackorbird
@HackingLZ
53 articles
Developing 25
CISA flags two critical, actively exploited flaws in Collabora Online and Arista VeloCloud, with patches available and a federal remediation deadline.
Key points
- CISA’s KEV catalog now includes CVE-2026-110447, a command‑injection bug in Collabora Online’s CODE server that enables remote code execution via proxy.php.
- CVE-2026-114625 is an SQL‑injection flaw in on‑premise Arista VeloCloud Orchestrator that can grant privileged access after authentication.
- Both flaws received critical CVSS scores (9.2 and 9.9) and were patched in September and October 2026 respectively.
- Threat actors have been observed weaponizing the Collabora flaw to backdoor Nextcloud instances and search for credentials and crypto wallets.
- Federal agencies are advised to apply the fixes by 26 Oct 2026 to mitigate risk.
Storm-0940 employed Artex to automate large‑scale ConnectWise supply‑chain intrusions, affecting hundreds of organizations.
Key points
- Storm-0940 has used the AI‑driven Artex framework since September 2026 to speed reconnaissance, password spraying and OAuth application abuse against ConnectWise customers.
- The attacks generated over 151,000 failed logons and succeeded in accessing more than 300 Microsoft Entra tenants across eight organizations, with attempts exceeding 2,900 per minute.
- Compromised ConnectWise application credentials allowed persistence even after remediation, prompting ConnectWise to suspend several cloud services.
- Microsoft advises monitoring service‑principal sign‑ins and Microsoft Graph activity to detect similar AI‑assisted intrusions.
Sources
SecurityWeek
huntress.com
The Record by Recorded Future
CSO Online
The Hacker News
Cyberscoop
Twitter/HackingLZ
Microsoft Threat Intelligence Blog
Cyberscoop
The Hacker News
The Record by Recorded Future
SecurityWeek
CSO Online
specterops.io
huntress.com
The Hacker News
Twitter/HackingLZ
Bleeping Computer
The Hacker News
@HackingLZ
@HackingLZ
19 articles
k0t’s campaign targets exposed network edge devices, compromising over 70,000 credentials through known flaws and brute‑force methods.
Key points
- The group scans internet‑facing firewalls and VPNs using services like FOFA and ZoomEye and exploits CVE‑2025‑64446 and CVE‑2026‑0257.
- Initial access is gained via custom Python scripts or credential stuffing, followed by VPN tunneling and credential harvesting from AD and SMB.
- Persistence is achieved with tools such as MeshCentral, Atera, Teramind, AdaptixC2 and a suite of admin utilities including Mimikatz and PetitPotam.
- Exfiltrated data is uploaded to Wasabi S3 and MEGA using Rclone.
- The campaign is tied to ransomware affiliates Qilin and The Gentlemen, though direct ransomware deployment is not confirmed.
Atlassian discloses CVE‑2026‑21589 allowing unauthenticated file reads in eight Data Center products
Atlassian patches 75 third‑party vulnerabilities across its Data Center and Server lineup, urging updates without evidence of current attacks.
Atlassian discloses CVE‑2026‑21589 allowing unauthenticated file reads in eight Data Center products
Key points
- The October bulletin covers 162 high‑severity and 14 critical‑severity flaws, all tied to open‑source libraries used in Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira Software, and Jira Service Management.
- Critical CVEs include Apache Tomcat issues (CVE‑2026‑65637, CVE‑2026‑65182, CVE‑2026‑68525), a Bouncy Castle flaw (CVE‑2026‑58062), and others affecting Netty, Apache SSHD, and more.
- Most vulnerabilities are denial‑of‑service, SSRF, information‑disclosure, or code‑execution bugs, but Atlassian rates the risk as non‑critical for customers.
- Customers are urged to apply the latest product versions or specific patched releases, as threat actors have historically weaponized similar flaws quickly.
Gen Threat Labs demonstrates AI agents can be commandeered via malicious extensions and launches a trust platform to mitigate the risk.
Key points
- The study revealed that AI agents, when exposed to crafted email content, executed system commands, transmitted data, and performed destructive file actions without a vulnerability.
- Gen Threat Labs identified that 12% of skills on the ClawHub marketplace were malicious, impersonating legitimate extensions.
- The new Agent Trust Hub offers skill scanning, a curated marketplace, runtime safety checks, and an AI‑native VPN powered by Norton to control agent connectivity.
- A partnership with Vercel integrates verification and risk ratings into the skills.sh ecosystem, aiming to secure the AI agent supply chain.
Citizen Lab warns that targeted ads can silently deliver spyware, urging tighter controls on ad‑tech supply chains.
Key points
- The Citizen Lab and Confiant detailed AdFection, a zero‑click technique that injects mercenary spyware via targeted advertising.
- Senators Ron Wyden and Cory Booker cited the findings to push legislation banning surveillance‑based ad targeting, especially on federal devices.
- Google, IAB Europe, Beeswax, Vungle and Eskimi removed Discover‑Tech from their ecosystems after the report; Microsoft did not respond.
- U.S. agencies have begun blocking or recommending the blocking of ads on government systems due to the identified threat.
Sources
Cyberscoop
Twitter/RonDeibert
Twitter/RonDeibert
citizenlab.ca
SecurityWeek
Bleeping Computer
CSO Online
The Record by Recorded Future
The Hacker News
Twitter/ryanaraine
Twitter/dcuthbert
Cyberscoop
@RonDeibert
@RonDeibert
@ryanaraine
@blackorbird
@dcuthbert
@ryanaraine
@dcuthbert
12 articles
Audit reveals privilege‑escalation and DoS bugs in Tailscale and headscale that could give attackers root access and disrupt mesh networking.
Key points
- The audit identified five flaw categories affecting Tailscale's embedded SSH server, experimental app‑connector, self‑hosted headscale control plane, DERP relay client, and local service exposure feature.
- Root‑level operations can be hijacked via Unix‑socket forwarding, enabling attackers with one approved device to execute code as root on other nodes.
- Unauthenticated resource‑exhaustion attacks can crash headscale servers, blocking onboarding for entire organizations.
- A malicious DERP relay can cause client memory exhaustion, and the app‑connector can route traffic to cloud metadata or internal services without ACL checks.
- The findings were reproduced on unmodified releases between 2026‑10‑22 and 2026‑10‑24; no vendor patch or mitigation is currently available.
Cisco patches four Snort 3‑related CVEs in a hardening release, with no known exploitation.
Key points
- Cisco’s Open Source Snort 3 team identified four high‑severity vulnerabilities (CVE‑2026‑20236, CVE‑2026‑20043, CVE‑2026‑20291, CVE‑2026‑20356) spanning out‑of‑bounds writes, incorrect calculations, privilege‑management errors and resource‑consumption flaws.
- The advisory covers multiple Cisco products including Cloud‑delivered Firewall, Cyber Vision, Meraki MX, Secure Access, Secure Firewall Threat Defense, Unified Threat Defense on IOS XE and the Snort 3 engine itself.
- Cisco provides fixed software releases—Snort 3 3.12.4.0 and corresponding updates for the listed products—and notes that no workarounds exist.
- The vulnerabilities were discovered internally, are not known to be actively exploited, and Cisco recommends immediate upgrades.
- Cisco’s advisory serves as the official source of information and mitigation guidance.
OpenAI employee arrested for covertly recording confidential meetings using a cheap microcontroller device.
Key points
- The DOJ alleges Abdulrahman Alfozan installed a SEEED microcontroller board with camera, microphone and Wi‑Fi in a conference room, concealed in toilet paper and powered via USB.
- A second device was found in a printer room after OpenAI discovered the activity and confiscated it along with Alfozan’s personal items.
- Alfozan reportedly used his and his wife’s ChatGPT accounts to research building the device and to identify target rooms, and communicated with a Saudi royal family member via WhatsApp.
- He was arrested before a planned two‑month parental leave; Saudi officials later funded his family’s repatriation.
- The incident highlights insider‑threat risks in frontier AI labs amid broader geopolitical competition over AI technology.
A compromised LiteLLM 1.107.0 release on PyPI uses Python startup hooks to steal credentials from any environment where Python runs with the package installed.
Key points
- The malicious wheel placed cook.pth, cook.py and sitecustomize.py in the Python library path, causing automatic execution during interpreter initialization.
- Two payload paths were identified: a credential collector that encrypts and sends data to an attacker‑controlled endpoint, and a Unix‑specific loader that could fetch extra code.
- Collected data includes GitHub tokens, cloud API keys, browser cookies, SSH keys, environment variables and LiteLLM database configuration.
- Microsoft advises removing the package, cleaning affected environments, and monitoring for the described detection indicators.
- The attack leveraged stolen developer credentials to hijack the release workflow, highlighting risks in open‑source supply chains.
LiteLLM Python package compromised in supply‑chain attack delivering credential stealer and backdoor
Leak of a LiteLLM master key led to token theft and a supply‑chain hijack of the LiteLLM Python package.
LiteLLM Python package compromised in supply‑chain attack delivering credential stealer and backdoor
Key points
- The master key was exposed in a public commit on May 27, 2026 and remained unrevoked.
- An attacker used the key on Oct 10 to extract a GitHub CLI OAuth token with owner‑level access.
- Malicious workflows were pushed to short‑lived branches, altered branch protection, and triggered a fake release of LiteLLM 1.107.0 to PyPI and Docker Hub.
- PyPI quarantined the malicious package and Docker Hub removed the tainted tags after the attack was reported.
- The incident underscores the need for immediate secret revocation and strict token scoping in CI/CD environments.
CISA lists an actively exploited Arista VeloCloud SQL injection vulnerability in its KEV catalog, urging rapid patching.
Key points
- CISA added CVE‑2026‑114625, an SQL injection in Arista VeloCloud Orchestrator, to the KEV catalog based on evidence of active exploitation.
- The vulnerability grants attackers total control of affected assets once exploited.
- Binding Operational Directive 26‑04 requires federal agencies to prioritize remediation of KEV‑listed flaws on publicly exposed systems.
- CISA encourages all organizations to adopt risk‑based patching for KEV vulnerabilities.
- Stakeholders can nominate additional exploited CVEs for inclusion via CISA’s KEV nomination form.
Prince of Persia APT returns to US hosting, reviving file‑theft campaigns with Tonnerre and Tornado malware.
Key points
- The group, also known as Infy, paused operations for three months, the longest recorded downtime in its two‑decade history.
- A new US‑based C2 server was identified in August, first US host since 2016, using Namecheap shared hosting and later Cloudflare concealment.
- Within a week of reactivation, Tonnerre exfiltrated over 1,800 files from a single victim, and Tornado’s second‑stage server can steal files via a Telegram bot.
- Semperis released IoCs and recommends monitoring for suspicious Telegram traffic and the disclosed indicators.
- The activity underscores Iran‑state sponsorship and the trend of nation‑state actors leveraging US infrastructure for concealment.
Quest Diagnostics confirmed a breach of its Quanum LSM system that may have exposed patient records, prompting system shutdown and investigations.
Key points
- The breach was discovered on October 21, 2026, and involved unauthorized access to the Quanum LSM platform used for test orders and results.
- Quest Diagnostics halted the Quanum system, advised customers to use paper requisitions or alternative tools, and informed the SEC and law enforcement.
- The company believes some patient records were exposed, though the specific data types remain unknown.
- The incident follows a 2019 breach affecting 11.9 million Quest patients and has already led to multiple class‑action lawsuits.
- External security experts are assisting the investigation, and the firm reports no impact on customer‑facing services.
BlackX bootkit exploits Baton Drop CVE to bypass Secure Boot, attributed to APT41.
Key points
- BlackX, a UEFI bootkit discovered in early 2026, reuses the Baton Drop (CVE‑2022‑21894) exploit originally seen in the BlackLotus bootkit.
- The bootkit enrolls custom Machine Owner Keys to load a signed driver that disables security processes and evades detection, especially against Kaspersky and Avast solutions.
- Victims were diplomatic agencies in Central Asia running fully patched Windows, but administrators did not manually trigger the required certificate revocation after patching.
- Kaspersky notes the attack highlights a gap in the update process, as the Baton Drop patch requires manual revocation of the “Windows Production PCA 2011” certificate.
Interpol’s Africa‑wide operation dismantled thousands of cybercrime networks, arrested 1,462 suspects and recovered $105 million.
Key points
- Law enforcement from 21 nations, under Interpol’s coordination, conducted Operation Serengeti III between June 29 and August 31, 2026, focusing on fraud, ransomware, BEC and online scams.
- The effort identified 65,929 victims and linked criminal activity to losses over $385 million, while seizing cryptocurrency mining equipment, power infrastructure and a luxury vehicle.
- Key national actions included Uganda’s takedown of two fraud rings, Angola’s seizure of illegal mining rigs, and Nigeria’s bust of a large‑scale phishing/BEC operation.
- Private‑sector partners such as Group‑IB, Kaspersky, Fortinet and Meta provided intelligence and technical support.
- The operation was co‑funded by the EU‑Council of Europe GLACY‑e project and continues to pursue additional suspects and illicit proceeds.
Sources
interpol.int
group-ib.com
The Hacker News
The Record by Recorded Future
Bleeping Computer
5 articles
Capcom breach leaks 11.7 M email addresses and limited personal data, prompting password resets and user notifications.
Key points
- The intrusion, discovered on October 19, accessed CAPCOM ID, the platform for online gaming services.
- Hackers exfiltrated email addresses, account creation and login metadata, and IP data for 11,774,247 users.
- For 43 users, dates of birth, gender, location and nicknames were also taken, and passwords for 196 accounts were changed.
- Capcom reset passwords, warned users of phishing attempts, and reported the incident to authorities.
- All CAPCOM ID services remain online while the company conducts further investigation.
A high‑severity GitLab RCE bug affecting 12 years of releases has been disclosed with patches available.
Key points
- The flaw allows attackers to execute arbitrary code on vulnerable GitLab instances without authentication.
- All GitLab versions released over the past 12 years are impacted, broadening the potential attack surface.
- GitLab published a security advisory and provided patches to remediate the issue.
- No specific victim organizations or active exploitation were reported in the disclosure.
- The vulnerability is not classified as a zero‑day, as fixes are now available.
Sources
theregister.com
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
The Register Security
18 articles
Meta was hit with a $25 billion fine for unlawful data sharing, highlighting stricter privacy enforcement.
Key points
- Meta was ordered to pay $25 billion after a judge found it breached New Mexico consumer‑protection and privacy statutes between 2010‑2021.
- The court cited more than 43 million violations, including unauthorized access granted to third‑party developers such as Cambridge Analytica.
- Judge Francis Mathew reduced a potential $219 billion award but emphasized the severe harm to users and the company’s core business model.
- Meta plans to appeal the decision while recent fines in the U.S. and Europe signal growing regulatory pressure on big‑tech data practices.
INC and The Gentlemen ransomware groups run an AI‑driven “Phantom” framework that automates intrusion, data theft, and ransomware deployment.
Key points
- The ecosystem, dubbed “Phantom,” uses OpenCode and OpenRouter‑hosted LLMs to execute attacker prompts with human oversight.
- Active exploitation of CVE‑2024‑57727, CVE‑2026‑35616, CVE‑2026‑41940 and others enables initial access via FortiClient, SimpleHelp, cPanel and VPN gateways.
- Custom tools such as WormGPT‑MCP, Ghost C2, RevSocks and a BYOVD EDR killer facilitate lateral movement, credential harvesting and data exfiltration.
- Operators prioritize finance, HR, legal and executive files, often leveraging reused passwords to compromise multiple systems at once.
- The campaign is attributed to Russian‑speaking actors and supports multiple ransomware affiliates, highlighting a new AI‑augmented ransomware‑as‑a‑service model.
Eye Security neutralized a vulnerable Popcorn Time updater that risked forming a multi‑million‑device botnet.
Key points
- Eye Security identified an always‑on updater in the abandoned Time4Popcorn app that fetched code over an unencrypted channel and ran with SYSTEM/root privileges.
- The firm registered the updater’s domain, observed up to 50 requests per second from 2‑3 million Windows PCs and hundreds of thousands of Macs, and warned that any registrant could serve malicious payloads.
- After disclosing CVE‑2026‑30612, Eye pushed a custom update that simply disabled the updater, delivering more than 2 million downloads and cutting traffic by about 90 %.
- Remaining domains were transferred to the Shadowserver Foundation for sinkholing, though some addresses remain uncontrolled and still vulnerable.
- The operation mirrors past “kill‑switch” actions like Operation Ladybird against Emotet, but targets software that users installed voluntarily.
Sandworm and UAC‑0099 used a Yggdrasil‑based backdoor to erase data at a Ukrainian logistics company.
Key points
- ESET reported that UAC‑0099 gained initial access on July 16 2025 via a spear‑phishing attachment and deployed the MATCHWOK backdoor through a MATCHBOIL downloader.
- The backdoor, named MythicRatatoskr, communicates with a C2 server inside the Yggdrasil mesh network and supports file operations, screenshots, reverse SOCKS5 proxy, and delayed startup to evade detection.
- After handing off the foothold to Sandworm, the group executed a data‑wiping operation on September 17 2025 using SDelete delivered via Active Directory Group Policy.
- The campaign targeted Ukrainian government, energy, logistics and grain sectors, marking the first documented abuse of Yggdrasil by a state‑aligned threat actor.
Critical PHP bug forces worldwide online services offline as patches are rolled out.
Key points
- The vulnerability, flagged by AI models from OpenAI and security firm Wiz, was publicly disclosed on 21 Oct 2026 after premature exploitation attempts were observed.
- Spanish Incibe, the U.S. NSA and FBI, EU CERT‑EU and Spain’s CCN‑CERT issued emergency advisories urging immediate patching or isolation of vulnerable PHP sites.
- Municipalities such as Málaga’s city council and the Andalusian Employment Service temporarily disabled their portals to protect millions of users.
- The PHP Foundation released an updated version containing the fix, which had been pre‑distributed to major Linux distributions and cloud providers.
- Experts stress that timely updates will mitigate risk, but legacy installations may require extensive remediation planning.
AI‑enabled attackers in Japan used APK analysis and custom scripts to discover and exploit API vulnerabilities, leaking personal data from multiple organizations.
Key points
- Attackers employed AI to scan Android packages, identify vulnerable APIs and test for SSRF, using a Python redirect server on compromised hosts.
- Servers contained reverse‑engineering tools Blutter and jadx, as well as scripts for extracting strings and libraries from APKs.
- Additional compromised machines hosted tools targeting web apps, MySQL, Jenkins and email gateways, and deployed web shells to infiltrate internal networks.
- JPCERT/CC issued an advisory and is seeking community help to locate further infrastructure linked to the campaign.
The Ironscales threat report PDF could not be parsed due to corruption.
Key points
- The PDF file appears to contain only binary and unreadable data.
- No clear narrative, findings, or indicators are present in the extracted text.
- Without legible content, no vulnerabilities, incidents, or threat activities can be identified.
- No entities, victims, or technical details can be confirmed.
- Further investigation requires a valid, readable version of the report.