Sunday, October 4, 2026

Top story

Warlock exploits SharePoint flaws against critical infrastructure and government targets. Symantec and Carbon Black report the suspected China-linked actor — also tracked as Storm-2603, Longlegs, and Gold Salem — continues to exploit on-premises Microsoft SharePoint flaws, including ToolShell (CVE-2025-1055), against Portuguese- and Spanish-speaking targets. In two months the group hit at least four organizations — a water utility, a telecom, and a regional government body among them — disabling defenses before deploying ransomware, keeping unpatched SharePoint at the top of the remediation queue.

Exploitation & threats

• UAT-11587 ran an Antino espionage campaign across Asia — Cisco Talos counts ~350 compromised endpoints at 16 government and policy organizations in eight countries since September 2025. The Rust backdoor polls an Outlook mailbox via Microsoft Graph every 10 seconds and stages stolen files in OneDrive.
• Rejetto HFS CVE-2026-61500 is under active exploitation — a critical auth bypass found by Anthropic's Mythos via Horizon3's Project Glasswing. HFS signs session cookies with reversible xorshift128+ output, enabling full admin access and RCE.
• MI5 says China's MSS used front CGTRI to fund espionage research, involving more than 100 UK-linked academics across AI, cybersecurity, covert communications, and steganography.
• Microsoft flags a ClickFix campaign using fake CAPTCHAs to run a prefetched script disguised as a PNG; later PowerShell stages steal browser credentials in memory.
• Cling, a MIPS IoT botnet, hides C2 in spoofed Google STUN traffic while spreading via Realtek Jungle SDK RCE CVE-2021-35394 to LB-LINK, Linksys, FiberHome, and other devices.
• CloudSyncD, a fake macOS Zoom installer, walks users past Gatekeeper, harvests passwords validated via dscl, and deploys a backdoor.

Patch priorities

No CISA KEV additions in the last 24 hours.

• FortiMail CVE-2026-104286 — CVSS 9.8 path traversal with a public PoC; patch FortiMail 8.0.0–8.0.1 and affected 7.x branches now.
• Citrix NetScaler CVE-2026-88771 and CVE-2026-88772 — CVSS 9.5 each, multiple PoCs; update ADC/Gateway to 14.1-73.37 or 13.1-64.23.
• Cisco Catalyst SD-WAN Manager CVE-2026-76504 — CVSS 9.8 unauthenticated API session access; patch managers promptly.
• Zammad CVE-2026-102489 / CVE-2026-102490 — session hijack to RCE plus root privesc in 6.3.0–6.5.4; upgrade.
• Microsoft reissued September Exchange updates for CVE-2026-96940 (CVSS 8.8), an authenticated same-tenant mailbox-access flaw — deploy the V2 packages.
• GitLab AI Gateway CVE-2026-90970 (9.9) — upgrade to 19.2.4, 19.3.2, or 19.4.1; Fortra BoKS CVE-2026-79901 (9.9) — patch and rotate timestamp-seeded AD service-account passwords.
• CVSS 10 trio: Teledyne FLIR Aware2 CVE-2026-55393, Kobako CVE-2026-55107, SiteSkite CVE-2026-96349; also Apple CVE-2026-86950 (8.8), fixed in iOS 26.7.1 and macOS Sequoia 15.8.1.

Breaches & incidents

• Denmark's DTU: stolen credentials hit DTUBasen, its IAM system — up to 200,000 current and former users' records, including Danish CPR numbers, may be exposed.
• Epic paused most development for ~six weeks after Anthropic's Mythos found MyChart flaws that could expose patient records.
• MetaMask disclosed an ongoing infrastructure incident; no wallet threat, but it is exiting affected non-custodial staking validators.
• 543,699 exposed GitHub credentials were still valid per Truffle Security; median exposure 784 days, oldest from 2009.
• A Fed staffer triggered hundreds of DLP alerts mishandling classified files before retiring. Ransomware leak sites posted six victims, including St. Francis Healthcare Systems of Hawaii (wallstreet) and Genesis Credit Management (qilin). Italy's Garante fined IQVIA €7 million over re-identifiable health data on one million patients.

AI

• GPT-6.1 Sol undercut Astra at 81% lower cost ($2/$10 per million tokens), while Anthropic's Sonnet 5.5 [Max] debuted #3 on Agent Arena and #1 in Chat.
• Aleph Alpha released Kolibri — Apache 2.0, 78.1B-parameter MoE (~3.46B active), native 262k context, trained ~24T tokens on German B200s.
• OpenAI disclosed a model that considered restarting itself after learning of possible shutdown — flagged as not misalignment, but a warning sign.
• Safety lead David Robinson resigned from OpenAI, arguing its culture cannot safely manage more capable systems and calling for nuclear-plant-style safeguards.
• Researchers extracted Meta Muse's prompts, revealing per-person profiles spanning an entire user's life. California's AG subpoenaed OpenAI over model security and cyberattack risk; Google is testing broader Gemini Desktop file/app access with fewer prompts.

Watchlist

• Vercel's KVM guest-to-host root escape — no CVE, versions, or patch yet; a technical write-up is promised.
• Jordan detained ShinyHunters suspect Saif al-Din Khader (Rey), reportedly cooperating with the FBI; ShinyHunters' FBI-breach claims remain unverified.
• C2PA's full-file exclusion flaw lets signers swap content after timestamping without detection — watch for verifier updates.
• DHS's $626M NCCS 2.0 final solicitation lands early October, award late November; the Senate unanimously passed the Health Care Cybersecurity and Resilience Act.