{"id":2174,"date":"2026-10-26T15:44:44","date_gmt":"2026-10-26T15:44:44","guid":{"rendered":"https:\/\/cybercolombia.co\/index.php\/2026\/10\/26\/this2shell-that2shell-everythings-an-rce-rogue-ai-supply-chain-chaos-and-more-cyberdefensa-mx\/"},"modified":"2026-10-26T15:44:44","modified_gmt":"2026-10-26T15:44:44","slug":"this2shell-that2shell-everythings-an-rce-rogue-ai-supply-chain-chaos-and-more-cyberdefensa-mx","status":"publish","type":"post","link":"https:\/\/cybercolombia.co\/index.php\/2026\/10\/26\/this2shell-that2shell-everythings-an-rce-rogue-ai-supply-chain-chaos-and-more-cyberdefensa-mx\/","title":{"rendered":"This2Shell, That2Shell, Everything\u2019s an RCE? Rogue AI, Supply Chain Chaos and More \u2013 CYBERDEFENSA.MX"},"content":{"rendered":"<div id=\"articlebody\">\n<p>This2Shell, That2Shell, Everything2Shell. That\u2019s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with.<\/p>\n<p>And that\u2019s not even the full story. A leaked key led to a software supply-chain attack. AI agents are being tricked into following harmful instructions. Old bugs are still being used to break into systems, and some attacks are so simple it\u2019s hard to believe they still work. Some websites even went offline to avoid taking chances.<\/p>\n<p>It\u2019s been a rough week for anyone trying to keep systems safe. Here\u2019s what happened.<\/p>\n<h2 style=\"text-align: left;\"><strong>\u26a1 Threat of the Week<\/strong><\/h2>\n<p><strong>PHP2Shell Flaws Puts Organizations on Alert <\/strong>\u2014 The PHP Foundation released patches for two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, that could lead to unauthenticated remote code execution. The security flaws have been codenamed PHP2Shell. Since public disclosure, the shortcomings have witnessed widespread scanning efforts, with Cloudflare stating it detected millions of exploitation attempts after public disclosure. To date, no successful exploitation has been observed. The severity of the flaws, coupled with the <a href=\"https:\/\/w3techs.com\/technologies\/details\/pl-php\" target=\"_blank\">ubiquity of PHP on the web<\/a>, prompted several websites to go offline as a precautionary measure.<\/p>\n<h2 style=\"text-align: left;\"><strong>\ud83d\udd14 Top News<\/strong><\/h2>\n<ul>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2026\/10\/emudhra-to-exit-global-ssltls-business.html\" target=\"_blank\">eMudhra Exits TLS Certificate Market After Compromise of Weak Private keys <\/a><\/strong>\u2014 Eight intermediate CA certificates from Indian digital security firm eMudhra were found to use <a href=\"https:\/\/emudhra.we-have-a-problem.com\/\" target=\"_blank\">ridiculously weak private keys<\/a>, potentially allowing bad actors to break them and potentially issue trusted certificates for arbitrary domains. Major web browsers stepped in to block the affected CAs. \u00abOn 19 October 2026, Apple began blocking these 12 certificates on Apple devices,\u00bb Apple <a href=\"https:\/\/support.apple.com\/en-us\/149555\" target=\"_blank\">said<\/a>. \u00abUpdates to certificate configuration data are sent to devices automatically and as needed, so you don\u2019t need to install a software update to get this change. Apple is making additional updates to this block, which will also be delivered automatically. On 23 October 2026, Apple also began blocking the emSign ECC Root CA \u2013 G3.\u00bb Python has also <a href=\"https:\/\/discuss.python.org\/t\/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\/\" target=\"_blank\">released<\/a> updated versions of the packages certifi, pip, uv, sigstore, conda, and pixi to remove the emSign root CA certificate from CA bundles. The development prompted eMudhra to exit the certificate-issuing business.<\/li>\n<li><strong>Critical Flaw in Brotli Fixed <\/strong>\u2014 A severe vulnerability has been addressed in Google\u2019s Brotli decoder library (CVE-2026-111497) that could lead to unauthenticated remote code execution. The flaw, also called Node2Shell and HTTP2Shell, has also been addressed in other popular libraries that rely on Brotli, including libbrotli, Python, C++, Node.js, Bun, Envoy, and Istio. The disclosure comes as Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to address several bugs in Ruby\u2019s regular expression engine, Onigmo (CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, and CVE-2026-110264) that could be used for remote code execution on GitLab servers.<\/li>\n<li><strong>Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed Ahead of Fixes <\/strong>\u2014 Linux servers running KSMBD, the kernel\u2019s built-in SMB server, are exposed to two publicly reported remote code execution flaws tracked as ZDI-CAN-33774 and ZDI-CAN-33549, along with a local privilege escalation flaw referred to as ZDI-CAN-33367. None of the vulnerabilities has been assigned a CVE ID, and no in-the-wild exploitation has been reported. \u00abAffected organizations should immediately restrict unprivileged user namespaces and enforce RuntimeDefault seccomp where they can, find out whether ksmbd is running anywhere in their estate, and patch ZDI-CAN-33367 the day their distribution ships the fix,\u00bb Sysdig said.<\/li>\n<li><strong>Plex2Shell Flaws Exploited in the Wild <\/strong>\u2014 Four vulnerabilities in Plex Media Server, CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656, are being chained into an exploit called Plex2Shell to deliver cryptocurrency miners and proxy software. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added all four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.<\/li>\n<li><strong>Railway Warns of Targeted Campaign <\/strong>\u2014 Railway said it became aware of a \u00absustained and targeted campaign\u00bb to breach its infrastructure on October 20, 2026, at 7:53 p.m. UTC with an aim to conduct distillation attacks. \u00abEarly investigations tell us this attack was attempting to obtain AI provider API keys to perform distillation attacks,\u00bb it said. \u00abInitial evidence leads us to believe that the malicious actor had access to abliterated models and substantial compute resources which enabled them to perform highly sophisticated exploits against our infrastructure.\u00bb The developer platform is urging users to revoke and reapply sensitive environment variables stored on Railway prior to October 21, 2026.<\/li>\n<li><strong>LiteLLM Leaked Master Key Leads to Supply Chain Attack <\/strong>\u2014 LiteLLM revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. The files bundled with LiteLLM version 1.107.0 are engineered to execute automatically when Python starts, even if an application did not import LiteLLM. The malware features two execution paths: a credential harvesting module that targets authentication material across developer tools, AI applications, cloud environments, and web browsers, and a Unix-oriented backdoor that\u2019s launched as a background process to fetch and execute arbitrary code supplied by the attacker every one hour.<\/li>\n<li><strong>GitLab Fixes Another Critical Flaw <\/strong>\u2014 GitLab shipped patches for CVE-2026-110264 (CVSS score: 10.0), a critical flaw that \u00abcould have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to an integer overflow when compiling a specially crafted regular expression\u00bb under certain conditions. The issue has been addressed in versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13 for GitLab Community Edition (CE) and Enterprise Edition (EE).<\/li>\n<\/ul>\n<h2 style=\"text-align: left;\"><strong>\u200e\ufe0f\u200d\ud83d\udd25 Trending CVEs<\/strong><\/h2>\n<p>Bugs drop weekly, and the gap between a patch and an exploit is shrinking fast. These are the heavy hitters for the week: high-severity, widely used, or already being poked at in the wild.<\/p>\n<p>Check the list, patch what you have, and hit the ones marked urgent first \u2014 <a href=\"https:\/\/www.php.net\/\" target=\"_blank\">CVE-2026-109618, CVE-2026-109619, CVE-2026-115560<\/a> (PHP), <a href=\"https:\/\/kb.cert.org\/vuls\/id\/645818\" target=\"_blank\">CVE-2026-97406<\/a> (Xerj Console API), <a href=\"https:\/\/labs.eye.security\/ai-vulnerability-discovery-using-the-kitten-process-how-we-found-cve-2026-75754\/\" target=\"_blank\">CVE-2026-75754<\/a> (ASUS Control Center), <a href=\"https:\/\/advisory.splunk.com\/\" target=\"_blank\">CVE-2026-76299, CVE-2026-76302, CVE-2026-76531, CVE-2026-76407<\/a> (Splunk), <a href=\"https:\/\/www.solarwinds.com\/trust-center\/security-advisories\" target=\"_blank\">CVE-2026-28328<\/a> (SolarWinds Observability), <a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-notice-QGwHnJ6k\" target=\"_blank\">CVE-2026-20043, CVE-2026-20236, CVE-2026-20291, CVE-2026-20356, CVE-2026-76466, CVE-2026-76473, CVE-2026-76474, CVE-2026-76475, CVE-2026-76476, CVE-2026-76477, CVE-2026-76478, CVE-2026-76479, CVE-2026-76481<\/a> (Cisco), <a href=\"https:\/\/www.oracle.com\/security-alerts\/alert-cve-2026-91403.html\" target=\"_blank\">CVE-2026-91403<\/a> (<a href=\"https:\/\/www.tenable.com\/blog\/oracle-october-2026-critical-patch-update-addresses-1209-cves\" target=\"_blank\">Oracle<\/a>), <a href=\"https:\/\/www.wordfence.com\/blog\/2026\/10\/wordfence-argus-discovers-high-severity-unauthenticated-php-object-injection-in-duplicator\/\" target=\"_blank\">CVE-2026-82814<\/a> (Duplicator and Duplicator Pro WordPress plugins), <a href=\"https:\/\/chromereleases.googleblog.com\/2026\/10\/stable-channel-update-for-desktop_02018666648.html\" target=\"_blank\">CVE-2026-113341, CVE-2026-113279, CVE-2026-113072, CVE-2026-113280, CVE-2026-113271, CVE-2026-113303<\/a> (Google Chrome), <a href=\"https:\/\/docs.gitlab.com\/releases\/patches\/patch-release-gitlab-19-5-1-released\/\" target=\"_blank\">CVE-2026-110264<\/a> (GitLab), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77934\" target=\"_blank\">CVE-2026-77934<\/a> (Coze Studio), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77933\" target=\"_blank\">CVE-2026-77933<\/a>, <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77932\" target=\"_blank\">CVE-2026-77932<\/a> (DB-GPT), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77936\" target=\"_blank\">CVE-2026-77936<\/a>, <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77937\" target=\"_blank\">CVE-2026-77937<\/a> (Letta), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77930\" target=\"_blank\">CVE-2026-77930<\/a> (EvoScientist), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-109443\" target=\"_blank\">CVE-2026-109443<\/a> (JoySafeter), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77926\" target=\"_blank\">CVE-2026-77926<\/a> (Aix-DB ChatBI), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-75128\" target=\"_blank\">CVE-2026-75128<\/a> (Langchain-Chatchat), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-109442\" target=\"_blank\">CVE-2026-109442<\/a> (piflow), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-109444\" target=\"_blank\">CVE-2026-109444<\/a> (OpenSRE), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-109440\" target=\"_blank\">CVE-2026-109440<\/a> (LangAlpha), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-109437\" target=\"_blank\">CVE-2026-109437<\/a> (Cognition), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-108263\" target=\"_blank\">CVE-2026-108263<\/a> (Astron Agent), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-77521\" target=\"_blank\">CVE-2026-77521<\/a> (MaxKB), <a href=\"https:\/\/www.lasso.security\/vulnerability-database\/cve-2026-97693\" target=\"_blank\">CVE-2026-97693<\/a> (Yuxi), <a href=\"https:\/\/www.vulncheck.com\/blog\/spip-odt2spip-authenticated-command-injection-rce\" target=\"_blank\">CVE-2026-104085<\/a> (odt2spip), <a href=\"https:\/\/www.vulncheck.com\/blog\/xorbits-xoscar-unauth-cloudpickle-rce\" target=\"_blank\">CVE-2026-49950<\/a> (Xorbits Xoscar), <a href=\"https:\/\/github.com\/Imahian\/Notes\/tree\/main\/docs\/CVEs\/CVE-2026-113380\" target=\"_blank\">CVE-2026-113380<\/a> (Signal), <a href=\"https:\/\/www.arista.com\/en\/support\/advisories-notices\/security-advisory\/24765-security-advisory-0183\" target=\"_blank\">CVE-2026-114625<\/a> (Arista VeloCloud Orchestrator), <a href=\"https:\/\/www.aikido.dev\/blog\/node2shell-nodejs-brotli-rce-cve-2026-111497\" target=\"_blank\">CVE-2026-111497<\/a> aka <a href=\"https:\/\/www.imperva.com\/blog\/node2shell-from-brotli-data-to-remote-code-execution\/\" target=\"_blank\">Node2Shell<\/a> (<a href=\"https:\/\/patchtheplanet.org\/brotli\" target=\"_blank\">Brotli<\/a>), <a href=\"https:\/\/github.com\/python-pillow\/Pillow\/security\/advisories\/GHSA-w889-685w-c8fh\" target=\"_blank\">CVE-2026-112900<\/a>, <a href=\"https:\/\/github.com\/python-pillow\/Pillow\/security\/advisories\/GHSA-8g5g-8vmr-9782\" target=\"_blank\">CVE-2026-112403<\/a>, <a href=\"https:\/\/github.com\/python-pillow\/Pillow\/security\/advisories\/GHSA-332p-7hrc-92wf\" target=\"_blank\">CVE-2026-112393<\/a> (Pillow), <a href=\"https:\/\/www.atlassian.com\/trust\/data-protection\/vulnerabilities\" target=\"_blank\">CVE-2026-77185<\/a> (Atlassian Fisheye and Crucible), <a href=\"https:\/\/www.atlassian.com\/trust\/data-protection\/vulnerabilities\" target=\"_blank\">CVE-2026-65182, CVE-2026-65637, CVE-2026-65905, CVE-2026-68525<\/a> (Atlassian Crowd Data Center and Confluence Data Center), <a href=\"https:\/\/www.atlassian.com\/trust\/data-protection\/vulnerabilities\" target=\"_blank\">CVE-2026-58062<\/a> (Atlassian Jira Service Management Data Center), <a href=\"https:\/\/www.atlassian.com\/trust\/data-protection\/vulnerabilities\" target=\"_blank\">CVE-2026-75595<\/a> (Atlassian Bamboo Data Center), CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264 (<a href=\"https:\/\/www.ruby-lang.org\/en\/news\/2026\/10\/23\/regexp-fixes-for-gitlab-cves\/\" target=\"_blank\">Ruby<\/a>), <a href=\"https:\/\/support.hpe.com\/hpesc\/public\/docDisplay?docId=hpesbnw05162en_us&amp;docLocale=en_US\" target=\"_blank\">from CVE-2026-79844 through CVE-2026-79895, CVE-2026-79955, CVE-2026-79956, and from CVE-2026-95704 through CVE-2026-95721<\/a> (HPE Networking Wireless Operating Systems).<\/p>\n<h2 style=\"text-align: left;\"><strong>\ud83c\udfa5 Cybersecurity Webinars<\/strong><\/h2>\n<ul>\n<li><strong><a href=\"https:\/\/thehacker.news\/ai-threat-readiness\" target=\"_blank\">From Zero-Days to Exploits in Minutes: Are You Ready for AI Threats?<\/a> <\/strong>\u2192 AI-powered cyberattacks are accelerating, shrinking the time security teams have to detect, investigate, and respond. Are your defenses ready to keep up? Join this expert-led webinar to discover how to strengthen AI threat readiness, improve attack-surface visibility, and build faster, more resilient security operations before attackers gain the upper hand.<\/li>\n<li><strong><a href=\"https:\/\/thehacker.news\/fuel-the-soc\" target=\"_blank\">Learn How to Turn Identity Context Into Faster, Smarter SOC Response<\/a><\/strong> \u2192 Your security tools can detect suspicious activity, but without identity context, critical threats may go unnoticed. As machine identities and AI agents expand the attack surface, SOC teams need deeper visibility to respond effectively. Join this expert-led webinar to discover how connecting identity intelligence with security operations can help uncover hidden risks, accelerate investigations, and contain threats faster.<\/li>\n<\/ul>\n<h2 style=\"text-align: left;\"><strong>\ud83d\udcf0 Around the Cyber World<\/strong><\/h2>\n<ul>\n<li>CrowdStrike said it <a href=\"https:\/\/www.crowdstrike.com\/en-us\/blog\/crowdstrike-uncovers-new-agentic-ai-campaigns\/\" target=\"_blank\">uncovered<\/a> four previously unreported threat actors orchestrating campaigns in which <strong>Claude Code<\/strong> is used to make decisions and execute commands, demonstrating how agentic AI is commoditizing baseline offensive cyber operations. This includes a Spanish\/English-speaking operator that has compromised at least 15 Argentina-based healthcare entities and exfiltrated credentials and medical records from at least one victim; a Chinese-speaking operator that breached government entities of two countries and targeted private sector entities in Brazil and the U.S.; an Indonesian-speaking actor using 819 skills to break into Indonesian government domains and several private-sector entities; and group of Russian-speaking individuals who have exfiltrated corporate client data from a U.S.-based customer relationship management vendor and compromised several private-sector SaaS and data center entities based in Russia, Kyrgyzstan, and the U.S.<\/li>\n<li>Johns Hopkins Bayview Medical Center is <strong><a href=\"https:\/\/www.wmar2news.com\/local\/patients-data-sent-to-ai-tool-johns-hopkins-bayview-medical-center-oct-23-2026\" target=\"_blank\">alerting 3,182 patients<\/a><\/strong> their personal health information may have been exposed after a staff member uploaded a spreadsheet of patient information to an outside AI platform that was not approved for use. The information included patients admitted and treated between May 2026 and September 2026, including their names, dates of admission and treatment, medical record numbers, account numbers, the department that treated them, medications given, and the names of their providers. The U.S.-based hospital said it reached out to the AI platform provider to delete the data.<\/li>\n<li>Anthropic said it used Claude to <strong>analyze 25 major open-source projects<\/strong> written in C, C++, Java, PHP, and Python, and <a href=\"https:\/\/www.anthropic.com\/research\/attack-surface-reduction\" target=\"_blank\">found 493 issues<\/a>. This included a configuration flaw that sat undetected in unspecified software for 21 years. In a separate report, Anthropic said large language models (LLMs) are <a href=\"https:\/\/www.anthropic.com\/research\/formal-verification\" target=\"_blank\">making<\/a> \u00abformal software verification feasible at a much larger scale,\u00bb allowing code to be translated into a mathematical model and prove that it \u00abalways follows some defined set of security rules.\u00bb The AI company said frontier models can now produce correctness proofs for real-world software fully autonomously.<\/li>\n<li>The developer of the <strong>MeshCentral<\/strong> remote access software is urging users to update to version 1.3.1. \u00abThe[re] is an active exploit\/hacker attacking MeshCentral servers and taking control of it and remote clients,\u00bb the developer <a href=\"https:\/\/github.com\/Ylianst\/MeshCentral\/releases\/tag\/1.3.1\" target=\"_blank\">said<\/a>.<\/li>\n<li>Threat actors have been observed attempting to exploit <strong><a href=\"https:\/\/www.zeroday.cloud\/blog\/redis-cve-2026-25243-deep-dive\" target=\"_blank\">CVE-2026-25243<\/a><\/strong>, a heap memory-corruption bug in Redis\u2019s RESTORE command, beginning around October 16. \u00abOne source hit the decoy five times on a timer with an identical payload: fingerprint the server, shape the heap with 26 key writes, fire a single malformed-zipmap RESTORE that triggers the documented over-read, run a throwaway Lua compute probe, then FLUSHALL the keyspace, destroying data and its own artifacts every run. Note that the bug needs command access to be exploitable,\u00bb Defused Cyber <a href=\"https:\/\/x.com\/DefusedCyber\/status\/2111394668713857446\" target=\"_blank\">said<\/a>.<\/li>\n<li>Security researcher Patrick Wardle has detailed <strong>Heartbreaker<\/strong>, a Rust-based macOS ransomware sample that was uploaded to VirusTotal in May 2025. The malware attempts to set up a LaunchAgent for persistence, and then encrypts files in the user\u2019s Downloads folder. \u00abHeartbreaker is unlikely to pose a major real-world threat in its current form,\u00bb Wardle <a href=\"https:\/\/objective-see.org\/blog\/blog_0x8A.html\" target=\"_blank\">said<\/a>. \u00abIt only targets files under ~\/Downloads, lacks awareness of macOS privacy protections, embeds a universal recovery key, depends on a now-unavailable build framework, and performs an exceptionally noisy Rust installation and compilation workflow. Its disabled \u2018Decrypt Files\u2019 button does not actually recover anything, either. Heartbreaker demonstrates an unusual approach to metamorphism on macOS. Rather than decrypting or rewriting its machine code in memory, it carries its own Rust source, transforms that source, invokes the native build toolchain, and attempts to replace itself with the result. Because each generation embeds its newly transformed source, the design can \u2013 in principle \u2013 continue across executions.\u00bb<\/li>\n<li>Axios reported that major U.S. banks are <strong>detecting unauthorized third-party AI agents<\/strong> operating inside customer accounts, with some attempting actions that appear independent of user instructions. Although the agents log in with the user\u2019s permission and credentials, the problem lies in distinguishing between a human and an unauthorized bot. \u00abSome banks have tracked activity when agents \u2014 programmed to fulfill requests or complete tasks on a user\u2019s behalf \u2014 contact call centers or appear to take actions independent of user instructions,\u00bb Axios <a href=\"https:\/\/www.axios.com\/2026\/10\/22\/ai-agents-banks-unauthorized-accounts-access\" target=\"_blank\">reported<\/a>. Banks are responding to the threat by either restricting them or allowing read-only access.<\/li>\n<li>In a new attack, Forever Security said it caught a malicious AGENTS.md markdown instructions file in a <strong>customer\u2019s Downloads folder<\/strong> that tricked an AI coding agent into installing a rogue npm package named \u00abfunction-color,\u00bb which was identified as part of a software supply chain attack campaign codenamed MALFEX. \u00abAn AGENTS.md is a file a coding agent is built to trust and obey, and ~\/Downloads is the one folder a website can drop a file into with no click and no permission,\u00bb Forever Security <a href=\"https:\/\/forever.security\/blog\/hijacking-ai-agents-via-downloads-folder\" target=\"_blank\">said<\/a>. \u00abTogether, that lets the web plant orders your own agent carries out. Markdown is the new executable. The planted file makes the agent rewrite its own configuration. From there it can install malware (remote code execution) or hand over its own login token (account takeover).\u00bb It\u2019s unclear how the malicious instructions file ended up on the target\u2019s Downloads folder, although it\u2019s possible that threat actors could trick a user into downloading it by simply visiting a specially crafted page.<\/li>\n<li>A sophisticated organized crime gang is said to have <strong>hacked into Staples<\/strong>, issued millions of dollars\u2019 worth of gift cards, and gone on a spending spree across the U.S., 404 Media <a href=\"https:\/\/www.404media.co\/how-a-massive-chinese-crime-ring-hacked-staples-to-steal-millions\/\" target=\"_blank\">reported<\/a>. In October 2025, Palo Alto Networks Unit 42 detailed a threat cluster dubbed Jingle Thief that targeted cloud environments associated with organizations in the retail and consumer services sectors for gift card fraud.<\/li>\n<li>Pseudonymous blockchain investigator ZachXBT (aka Zachary Wolk) has <a href=\"https:\/\/x.com\/zachxbt\/status\/2107081638073319437\" target=\"_blank\">revealed<\/a> that a Chinese organized crime syndicate laundered more than $1 billion stolen in multiple cryptocurrency exploits for North Korea\u2019s Lazarus Group. ZachXBT said he posed as a paying client to infiltrate the money laundering network in February 2025, in the days following the <strong>massive Bybit hack<\/strong>, leading to the identification of a cluster of more than $12 million in Bybit-linked funds. About 442,000 USDT linked to the cluster was later frozen by Tether.<\/li>\n<li>Federal investigators suspect that at least one executive at a U.S.-based consulting firm helped operate Shinywire, a now-defunct <strong>ShinyHunters<\/strong> site used to pressure nearly 100 hacked organizations into paying, according to security journalist Brian Krebs. Signal messages that authorities accessed when they apprehended ShinyHunters suspect Pepijn van der Stap in the Netherlands reportedly show frequent contact with Canadian cybersecurity executive Edward Dubrovsky and at least one executive at a U.S. consulting firm, who sometimes knew about new victims before the victims themselves, citing an unnamed source. \u00abThe Dutch hacker\u2019s chats showed Mr. Dubrovsky knew ShinyHunters had stolen highly sensitive data from FBI servers, and that he never informed the bureau of the data breach prior to ShinyHunters threatening on Twitter\/X to publish the agency\u2019s deeply personal personnel files,\u00bb Krebs <a href=\"https:\/\/krebsonsecurity.com\/2026\/10\/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site\/\" target=\"_blank\">said<\/a>.<\/li>\n<li>The U.S. Army is allegedly developing a program to deploy autonomous AI agents that can navigate digital and network infrastructures of its adversaries, and \u00abneutralize\u00bb them, The Intercept <a href=\"https:\/\/theintercept.com\/2026\/10\/19\/army-autonomous-ai-agents-arcyber\/\" target=\"_blank\">reported<\/a>. The nascent program, codenamed <strong>ECHOTRIBBLE<\/strong>, is primarily focused on offensive missions with the goal of \u00abdisabling the threat completely or temporarily, deleting the threat from the target.\u00bb In addition, the system \u00abwould function almost like a computer worm, silently navigating a foreign network and hopping from device to device until it finds the Army\u2019s quarry, hitting targets in the cloud as well as those on \u201cair-gapped\u201d systems that are disconnected from networks entirely. Once its task is complete, ECHOTRIBBLE\u2019s agents would effectively self-destruct, ideally without having been noticed by the target at all.\u00bb<\/li>\n<li>A group of academics from the University of British Columbia have detailed <strong>ICS-Sniper<\/strong>, a proof-of-concept attack aimed at industrial facilities that rely on cloud-hosted SCADA systems. It\u2019s described as a \u00abtargeted blackhole attack that analyzes the VPN traffic metadata (sizes, direction, timing of packets) to identify narrow time windows, called critical superperiods, during which the site-SCADA traffic would likely contain highly critical commands or data.\u00bb An attacker with control over a router on the network path could examine the size, direction, and timing of VPN-encrypted packets to predict when critical commands or data are likely to be exchanged, and then deliver malicious payloads during those time periods. \u00abPost-analysis, in a subsequent operational cycle, ICS-Sniper drops a small set of payload-carrying packets in the critical superperiods to disrupt the ICS\u2019s operations,\u00bb the study <a href=\"https:\/\/arxiv.org\/abs\/2312.06140\" target=\"_blank\">said<\/a>. In tests on emulated versions of a Secure Water Treatment (SWaT) plant testbed, the attack delayed the start of clean water pumping by about 15 minutes and kept a valve open more than nine minutes longer than intended.<\/li>\n<li>A new Windows malware called <strong>SiriusQT<\/strong> offers various capabilities in a single package: remote access, HVNC, browser automation, credential theft, cryptocurrency wallet collection, clipboard monitoring, keylogging, process injection, persistence, anti-analysis checks, and custom encrypted command-and-control traffic. SiriusQT has been advertised by a seller named GhostKernel on dark web forums since April 2026. Its author is Amonus. At least 30 users bought a valid license, Group-IB <a href=\"https:\/\/www.group-ib.com\/blog\/siriusqt-rat-hvnc-stealer\/\" target=\"_blank\">said<\/a>. A lifetime subscription costs $500, but cracked versions of the program are said to be shared by multiple actors. Campaigns using the malware have targeted the U.K., Germany, France, Spain, Italy, and the Netherlands. GhostKernel has also been observed advertising BTMob v4.0, an Android trojan, on their Telegram channel.<\/li>\n<li>As many as <strong>2,894 ransomware attacks<\/strong> have been recorded in Q3 2026, a nearly 50% jump from more than a year ago, led by The Gentlemen (383) and Qilin (363). \u00abBoth break in through stolen credentials and exposed VPNs, and both hit many of the same industries,\u00bb Nord Security <a href=\"https:\/\/nordlayer.com\/intelligence\/ransomware-statistics\/\" target=\"_blank\">said<\/a>. \u00abQilin now uses AI to power personalized phishing campaigns at speed and scale, and auto-generate scripts that disable backups. More extortion groups are dropping encryption, choosing instead to steal data and threaten to leak it.\u00bb<\/li>\n<li>Rapid7, in its Quarterly Threat Landscape Report, said the average time between a high-severity vulnerability becoming public and its exploitation is now <strong>three days<\/strong>. What\u2019s more,  80% of tracked exploitation occurred within 14 days and 90% within 30 days. During the time period, 8% of the threat reporting cited AI as an operational component. \u00abThe research identifies a shift from using AI primarily to help draft content or code toward supporting tactical decisions and execution within attack campaigns,\u00bb Rapid7 <a href=\"https:\/\/www.rapid7.com\/blog\/post\/tr-q3-2026-threat-update-attackers-exploiting-vulnerabilities-within-3-days\/\" target=\"_blank\">said<\/a>.<\/li>\n<li>A new malware loader dubbed <strong>Spectator Loader<\/strong> is being <a href=\"https:\/\/darkwebinformer.com\/spectator-loader-advertised-as-fud-resident-loader-with-anti-analysis-and-evasion-features\/\" target=\"_blank\">advertised<\/a> by a threat actor named \u00abMadrex\u00bb with ant-analysis and evasion features built into it.<\/li>\n<li>A previously unreported modular phishing-as-a-service (PhaaS) platform called <strong>Athena StealthRoute<\/strong> is offering tools to prepare, deliver, and conceal phishing attacks as opposed to carrying out credential or token theft. \u00abThe platform offers a marketplace for campaign materials, along with domain and link management and traffic-filtering controls designed to divert security scanners away from malicious destinations, while relying on separate downstream services for credential and token harvesting,\u00bb Abnormal AI <a href=\"https:\/\/abnormal.ai\/blog\/athena-stealthroute-phishing-marketplace-cloaking-ai\" target=\"_blank\">said<\/a>. The service also integrates AI-assisted content-generation workflows via an AI Studio to craft tailored messages, subject lines, and attachments, building on its established marketplace, link management, and cloaking capabilities. Athena StealthRoute-linked infrastructure was first identified in August 2026. Over the six months ending October 9, 2026, 89,700 attack-flagged messages matching the platform\u2019s distinctive link pattern have been observed across roughly 2,280 organizations in the U.S. and E.U.<\/li>\n<li>A phishing campaign impersonating a document-signing workflow has been observed delivering the Windows agent for <strong>Zecurit<\/strong>, a legitimate remote monitoring and management platform. \u00abThe campaign did not need a custom remote-access trojan,\u00bb ZeroBEC <a href=\"https:\/\/zerobec.com\/blog\/zecurit-rmm-abuse-docusign-phishing\" target=\"_blank\">said<\/a>. \u00abIt used a trusted cloud mail service, a convincing DocuSign narrative, two layers of browser verification, and a digitally signed administrative tool to move from inbox access to potential unattended endpoint control.\u00bb<\/li>\n<li>OpenAI suspected Jasmine Wang, Tomek Korbak, and Mikita Balesni, the three AI safety researchers who were fired earlier this month, of <strong>leaking internal model designs<\/strong> to AI safety researcher Ryan Greenblatt, then working at Redwood Research, including via disappearing Signal chats, according to a <a href=\"https:\/\/www.wsj.com\/tech\/ai\/the-signal-chats-that-cost-openai-researchers-their-jobs-594c5853\" target=\"_blank\">new report<\/a> from The Wall Street Journal. All three researchers have claimed they have never shared OpenAI\u2019s confidential information with anyone outside the company, adding they \u00abnever received a written explanation for what sensitive information they allegedly mishandled.\u00bb<\/li>\n<li>An Android malware called <strong>GhostBat RAT<\/strong> has been traced to a broader operator-controlled ecosystem dubbed GhostX. GhostBat RAT is primarily distributed via smishing messages containing malicious links. \u00abThe latest GhostBat RAT variant represents a significant evolution in both delivery and post-compromise capabilities,\u00bb Cyble <a href=\"https:\/\/cyble.com\/blog\/ghostx-forged-in-transit-licensed-to-deceive\/\" target=\"_blank\">said<\/a>. \u00abThe malware now abuses the Android Accessibility Service to support Ghost Overlay and broader PIN\/key-input capture targeting financial applications used across India. Ghost Overlay transparently intercepts PIN keypad interactions in Google Pay and MobiKwik. It replays the same touches into the legitimate application, allowing the malware to capture PIN information without presenting a conventional phishing interface. The variant also targets 60 banking, UPI, wallet, fintech, and payment applications for broader PIN capture.\u00bb<\/li>\n<li>Another Android malware that has come under the spotlight is <strong><a href=\"https:\/\/starlabs.sg\/blog\/2026\/10-yuankong-rat-the-android-remote-control-service-that-stamps-its-operators-names-into-every-build\/\" target=\"_blank\">YuanKong RAT<\/a><\/strong>, which lets cybercriminals remotely control infected devices, steal sensitive data, and potentially intercept banking transactions. Like in the case of RedHook and RatHat, YuanKong RAT enables Wireless Debugging and pairs with the device\u2019s own adbd to gain shell-level privileges.<\/li>\n<li>Kaspersky has disclosed <strong>vulnerabilities in barcode scanners<\/strong> that could potentially serve as an entry point into a <a href=\"https:\/\/securelist.com\/paper-unicorn-warehouse-security\/121537\/\" target=\"_blank\">warehouse operational technology (OT) network<\/a>. \u00abAn attacker within range could inject keystrokes into the connected device and potentially achieve remote code execution without requiring user interaction,\u00bb Kaspersky <a href=\"https:\/\/www.kaspersky.com\/about\/press-releases\/your-order-is-delayed-kaspersky-identifies-vulnerabilities-in-barcode-scanners-posing-potential-threat-for-the-warehouse-industry\" target=\"_blank\">said<\/a>. \u00abIn a hypothetical attack, a user may be carrying out their normal daily work using a wireless barcode scanner connected to a base station, while an attacker obtains the Bluetooth address of the base station, for example, through passive eavesdropping on Bluetooth traffic. Through the established Bluetooth connection, the attacker sends a malicious payload to the base station, simulating keyboard keystrokes. The base station forwards these keystrokes to the connected PC, where they are interpreted as legitimate user input and may be used to execute unauthorized commands.\u00bb<\/li>\n<li>A lone Russian-speaking operator working from a single rented server has been found targeting two Ukrainian hosts associated with the government data-exchange platform between May and September 2026. \u00abThe starting point was a public list of Ukrainian IP ranges, downloaded, renamed to cidr-ua.txt, and counted before anything else ran,\u00bb Hunt.io <a href=\"https:\/\/hunt.io\/blog\/ukraine-state-data-exchange-graylog-log4shell\" target=\"_blank\">said<\/a>. \u00abThe operator requested every one of the 7,576 hosts over HTTPS on port 5000, 60 at a time, and kept only those whose response contained \u2018UXP Verifier.&#8217;\u00bb The low-cost campaign managed to gain execution on at least two hosts matching the criteria. On one of the hosts, a Graylog server, the threat actor is said to have abused a Java deserialization\/JNDI exploit chain associated with Log4Shell techniques. The end goal is assessed to be data collection.<\/li>\n<li>Spoofed email messages urging recipients to review a request for proposal (RFP) document or a payment invoice have been used to trigger a device-code phishing flow built atop an updated version of a PhaaS panel called <strong>ARToken<\/strong>. \u00abThe embedded link led to a compromised SharePoint tenant hosting a .URL file, which pointed to content on Google Sites,\u00bb ZeroBEC <a href=\"https:\/\/zerobec.com\/blog\/artokens-5-1-2-sharepoint-device-code-phishing\" target=\"_blank\">said<\/a>. \u00abThat page then redirected victims to a Cloudflare Workers-hosted URL serving the final device code phishing lure. Analysis of the lure\u2019s obfuscated JavaScript revealed anti-analysis checks designed to detect virtualized and automated browsing environments, a hardcoded URL pointing to the ARTokens backend panel, and a polling-path variant that differs from the endpoints described in the earlier reporting.\u00bb<\/li>\n<li>Russian authorities are said to have <a href=\"https:\/\/t.me\/moscowcourts\/9233\" target=\"_blank\">detained<\/a> three suspected members of a financially motivated hacking group called <strong>DataSuckers<\/strong> following a cyber attack on a popular pizza chain that exposed vast amounts of customer information. This included a 19-year-old Denis Fridman, along with two unidentified individuals. A fourth member of the group remains at large, according to Russian newspaper <a href=\"https:\/\/www.kommersant.ru\/doc\/9026680\" target=\"_blank\">Kommersant<\/a>.<\/li>\n<li><strong>Zheng Zhao<\/strong>, a 44-year-old Chinese national, has been extradited from the Netherlands to the U.S. for his alleged role in an international cryptocurrency investment conspiracy carried out from Cambodian scam centers that targeted 174 U.S. victims. The scheme netted the fraudsters $36.9 million in illicit profits, which were transferred to a Deltec Bank account named \u00abAxis Digital Limited\u00bb in the Bahamas. The bank was then responsible for converting the victim funds to the stablecoin Tether and transferring them to a digital asset wallet controlled in Cambodia. \u00abZhao was allegedly part of an international criminal network that induced U.S. victims to transfer funds to accounts controlled by co-conspirators, who then laundered victim money through U.S. shell companies, international bank accounts, and digital asset wallets,\u00bb the U.S. Department of Justice <a href=\"https:\/\/www.justice.gov\/opa\/pr\/chinese-national-extradited-alleged-role-multimillion-dollar-cryptocurrency-scam-targeting\" target=\"_blank\">said<\/a>. In August 2025, Zhao was charged with conspiracy to commit money laundering. If convicted, he faces a maximum penalty of 20 years in prison. Separately, the Justice Department <a href=\"https:\/\/www.justice.gov\/opa\/pr\/department-justice-announces-results-law-enforcement-and-private-industry-joint-disruption\" target=\"_blank\">announced<\/a> that dozens of arrests have been made and <a href=\"https:\/\/about.fb.com\/news\/2026\/10\/meta-tech-companies-law-enforcement-crackdown-global-scam-networks\/\" target=\"_blank\">3.7 million fraudulent social media accounts, pages, and groups<\/a> from Facebook and Instagram have been taken down in connection with <a href=\"https:\/\/www.bloomberg.com\/graphics\/2026-ai-supercharges-scam-economy\/\" target=\"_blank\">scam networks<\/a> operating from West Africa as part of a coordinated <strong>Joint Disruption Week<\/strong>.<\/li>\n<\/ul>\n<h2 style=\"text-align: left;\"><strong>Conclusion<\/strong><\/h2>\n<p>If this week wasn\u2019t enough of a warning, nothing will be. Critical RCE bugs are piling up, attackers are already exploiting some of them, and millions of attempts are hitting newly disclosed flaws. Even widely trusted software and tools are becoming attack surfaces. The scary part? Some bugs don\u2019t even need a login, and some still have no fix available.<\/p>\n<p>The lesson is simple: don\u2019t wait for proof of an attack before taking action. Check what\u2019s exposed, patch what you can, lock down what you can\u2019t, and treat leaked keys as urgent. Not every scanning attempt leads to a breach, but attackers only need one working path. With so many doors being tested at once, this is a bad week to leave even one wide open.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>This2Shell, That2Shell, Everything2Shell. That\u2019s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already being used in attacks, and security teams have more urgent patches than they can keep up with. And that\u2019s not even the full [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25,5],"tags":[2711,2712,24,4257,779,929,2710,4256,4255],"class_list":["post-2174","post","type-post","status-publish","format-standard","hentry","category-noticias","category-trending","tag-chain","tag-chaos","tag-cyberdefensa-mx","tag-everythings","tag-rce","tag-rogue","tag-supply","tag-that2shell","tag-this2shell"],"_links":{"self":[{"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/posts\/2174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/comments?post=2174"}],"version-history":[{"count":0,"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/posts\/2174\/revisions"}],"wp:attachment":[{"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/media?parent=2174"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/categories?post=2174"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybercolombia.co\/index.php\/wp-json\/wp\/v2\/tags?post=2174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}