Daily Cybersecurity Brief — 2026-10-25

High-Signal Security Journalism

• Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation — Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon further investigation, the company found that an unauthorized third party may have gained access to encrypted environment variables, and, in some cases, obtained the decrypted contents. (Source: The Hacker News)
• State Bank of India Suffers a Customer PII Data Leak — Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII. (Source: Dark Reading)
• Capcom data breach exposes 11.7 million account records —

  Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company’s web services and to play some of its games online. (Source: Help Net Security)

• **** — (Source: Google Security Blog)
• The Current Landscape of OAuth Attacks —

  Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments.

The post The Current Landscape of OAuth Attacks appeared first on Unit 42.

(Source: Unit 42) - CrowdStrike Protects Customers from Threats Delivered via PHP2Shell — CrowdStrike Protects Customers from Threats Delivered via PHP2Shell (Source: CrowdStrike Blog) - CrowdStrike Achieves NCSC CIR Enhanced Level Assurance — CrowdStrike Achieves NCSC CIR Enhanced Level Assurance (Source: CrowdStrike Blog) - PHP2Shell: One Upload, Full Server —

How many servers are one (Source: Varonis Blog) ## Threat Intelligence & Malware Analysis - **Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline** — LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the threat actor to push a malicious version of the popular Python package. "On May 27, 2026, a configuration file was committed to the public LiteLLM-Labs/lite-harness repository which inadvertently contained the master key to a deployment of (Source: The Hacker News) - **BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations** — Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a China-linked state-sponsored hacking group known as APT41, Kaspersky said in a technical report (Source: The Hacker News) - **Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions** — Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain Framework" referred to as Phantom. (Source: The Hacker News) - **Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials** — Cybersecurity researchers have disclosed details of a large-scale campaign that has targeted exposed network edge devices such as Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. "Artifacts from this investigation also indicate that operators in this campaign have obtained access to numerous organizations worldwide, and have attempted to further compromise some victims, (Source: The Hacker News) - **Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack** — The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that led to the deployment of (Source: The Hacker News) - **PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware** — Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The attacks aim to exploit CVE-2026-109618 and CVE-2026-109619 (CVSS scores: 9.2), which can result in unauthenticated remote (Source: The Hacker News) - **Trust Is Not What It Seems — And Fraudsters Are Counting on It** — Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence. (Source: Dark Reading) - **AI Tools Are Generating Massive Attacks for Little Cost** — One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change. (Source: Dark Reading) - **Microsoft 365 accounts compromised at 79 organizations, no passwords needed** —

An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers tracked the campaign between July 14 and September 22, 2026, counting 497 successful sign-ins and more than 200,000 failed login attempts. (Source: Help Net Security) - **LiteLLM hit by second supply chain attack this year, users urged to rotate credentials** —

A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services from anyone who installed it. “LiteLLM got compromised… again,” security researcher Kevin Beaumont wrote on Mastodon. (Source: Help Net Security) - **Infostealer riding the AI Train** —

Key Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware combines those established capabilities with dedicated collection routines for AI applications and development tools. (Source: Check Point Research) - **CrowdStrike Uncovers New Agentic AI Campaigns** — CrowdStrike Uncovers New Agentic AI Campaigns (Source: CrowdStrike Blog) - **Solving the Continuous Authorization Conundrum** — Solving the Continuous Authorization Conundrum (Source: CrowdStrike Blog) - **Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance** — Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance (Source: CrowdStrike Blog) - **StealC Is Back, and This Time It's a RAT** —

In June, Europ (Source: Varonis Blog) ## Vulnerabilities & Exploits - **OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication** — OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no (Source: The Hacker News) - **Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software** — A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages, and Envoy proxies set up to decompress Brotli. Tracked as CVE-2026-111497, the flaw allows crafted compressed data to overwrite past the end of a buffer and corrupt a program's memory, potentially (Source: The Hacker News) - **CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud** — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. (Source: The Hacker News) - **Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws** — Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical security flaws that GitLab patched over the past month. (Source: The Hacker News) - **PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches** — PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.The project is not issuing an emergency fix for it. (Source: The Hacker News) - **Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image** — Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in the way Pillow handles EPS images, which it opens by passing the file's name to Ghostscript, a separate program it runs to turn the image into pixels, without checking the name first. (Source: The Hacker News) - **Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data** — Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497). (Source: The Hacker News) - **Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks** — Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can log in to the orchestrator, even with a read-only customer account, gain operator privileges, the top level of control over it. (Source: The Hacker News) - **ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More** — This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. (Source: The Hacker News) - **Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes** — Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. (Source: The Hacker News) - **INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown** — INTERPOL on Thursday announced that a coordinated law enforcement action has disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds. In tandem, the effort saw law enforcement agencies from 21 countries arrest 1,462 suspects. (Source: The Hacker News) - **Why Caribbean Threats Cascade Into Global Cyber-Risk** — The region is demonstrating what happens when exploits accelerate but assurance does not. (Source: Dark Reading) - **AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack** — Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may compound — not contain — the risk. (Source: Dark Reading) - **Les supermarchés de l'UE paient d'un firmware de réfrigérateur non mis à jour** — Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation. (Source: Dark Reading) - **Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw** —

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A critical PHP security release is coming today, so get ready to update! The PHP security team has announced an urgent security release for Wednesday, 21 October 2026 at 14:00 UTC. (Source: Help Net Security) - **AI is taking cybersecurity jobs at junior and experienced levels alike** —

Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided between entry-level and higher-level roles.

The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 23) appeared first on EMudhra Intermediate CA Certificates Compromised appeared first on Unit 42.

(Source: Unit 42) - **The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)** — U.S. courts sentence tax fraudster, Chinese-linked actors use agentic AI in cloud supply chain attack, and PHP issues warning of two critical-level RCE flaws. (Source: SentinelOne Blog) - **ASPM in the AI Era Part 2: Prioritize Exploitable Risks with Code-to-Cloud Context** — Reduce triage times and focus on the risks that matter most by combining context across code, infrastructure, and runtime (Source: Wiz Blog) - **Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation** — Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation (Source: CrowdStrike Blog) - **October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities** — October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities (Source: CrowdStrike Blog) ## AI/ML Security - **Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads** — Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the company to serve targeted ads to users based on their activity on other connected Google services. "You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use, (Source: The Hacker News) - **Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances** — AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one. (Source: The Hacker News) - **The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat** — Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. (Source: The Hacker News) - **OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL** — A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's Windows or WSL machine when the developer signed in. OpenCode connects to MCP (Model Context Protocol) servers to add outside tools, and such code would run with the developer's own access. (Source: The Hacker News) - **As AI Risks Grow, Insurers Split on Covering the Damage** — Some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge. (Source: Dark Reading) - **Hackers hijack exposed AI models to launch cyberattacks at victims’ expense** —

An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction set this summer through a honeypot posing as an unprotected AI service, researchers Priti More and Susmit Yenkar wrote. (Source: Help Net Security) - **Google opens its cloud to rival OpenAI, promises business data won’t train models** —

Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. (Source: Help Net Security) - **ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors** — Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs. (Source: Wiz Blog) - **Why Organizations Secure AI Agents with Falcon Guardian** — Why Organizations Secure AI Agents with Falcon Guardian (Source: CrowdStrike Blog) - **CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage** — CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage (Source: CrowdStrike Blog) ## Supply Chain & Software Security - **Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack** — The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants. (Source: Dark Reading) - **Go With the Flow: Taking a Shadow Dependency in GCP Dataflow Cross Tenant** —