Friday, October 16, 2026

Top story

CISA says attackers are exploiting Ivanti Connect Secure zero-day CVE-2026-104935 to steal credentials, and added it to the Known Exploited Vulnerabilities catalog on October 13. Volexity attributes activity starting October 3 to unknown actor UTA0576 against version 22.8R2.4: an unauthenticated authentication bypass and command execution (CVSS 8.6, EPSS 26%, two public PoCs) in ICS before 25.1.3.0. It matters because VPN gateways are being used for credential theft while related appliance flaws face a federal fix deadline of October 17.

Exploitation & threats

• CISA added exploited Palo Alto, Cisco, and Ahsay flaws to KEV, with a three-day deadline for U.S. federal civilian agencies (October 17). CVE-2026-0322 (CVSS 8.6) is an authenticated PAN-OS management-interface flaw that yields root on PA-Series, VM-Series, and Panorama; Palo Alto reports very limited exploitation. CVE-2026-76519 (CVSS 9.8) is in Cisco Secure Email Gateway.
• Cisco says CVE-2026-76519 is under active exploitation in Secure Email Gateway AMP. Unauthenticated attackers can reach root when file reputation is enabled and Content Scanner Tools is older than 25.3.0.5525. Fixes shipped September 14 in AsyncOS 15.5.5-014 and 16.5.0-780.
• Palo Alto says attackers are exploiting CVE-2026-0322 for root code execution from the management interface. Cloud NGFW and Prisma Access are not affected. CVSS 4.0 is 8.6 when the interface is network-reachable.
• Qilin and Settra are exploiting PAN-OS GlobalProtect CVE-2026-0257, an authentication bypass in GlobalProtect and Prisma Access disclosed in May 2026, per ReliaQuest. The same roundup describes the Noir cryptocurrency drainer, which uses DNS TXT queries over public DNS-over-HTTPS.
• China-linked ARMORY CASTLE exploited BeyondTrust zero-day CVE-2026-102764 in late August, weeks before the October 15 disclosure. Mandiant says the actor (formerly UNC5221) deployed the SAWFLY PHP webshell and copied credentials with the appliance’s bt-secrets utility.
• Public exploit code is out for FortiClient EMS CVE-2026-35616 (Fortinet CVSS 9.1, NVD 9.8), affecting 7.4.5–7.4.6. Fortinet advisory FG-IR-26-099 said exploitation had already been observed; 7.4.7 is the fix.
• Citizen Lab says Candiru spyware reached Al Jazeera devices through zero-click code in online ads (AdFection). At least 45 devices were targeted in 2024 and 2025 via Discover-Tech’s Controlium platform; Candiru now operates as Integrity Labs.
• Russian authorities arrested three members of the DataSuckers hacking group, per Risky Bulletin.

Patch priorities

• CVE-2026-104935 — Move Ivanti Connect Secure to 25.1.3.0 or later; treat pre-patch 22.8R2.4 as compromised and rotate credentials.
• CVE-2026-76519 — Upgrade Cisco Secure Email Gateway to AsyncOS 15.5.5-014 or 16.5.0-780 and Content Scanner Tools to 25.3.0.5525 or newer before the October 17 federal deadline.
• CVE-2026-0322 — Patch PAN-OS and Panorama and keep the management interface off the internet; exploitation is already in KEV.
• CVE-2026-35616 — Upgrade FortiClient EMS 7.4.5/7.4.6 to 7.4.7; a public Python PoC is available and Fortinet has seen exploitation.
• CVE-2026-102764 — Patch BeyondTrust Remote Support and hunt for SAWFLY and unexpected SUID shells; used as a zero-day in late August.
• CVE-2026-0257 — Confirm May 2026 GlobalProtect and Prisma Access fixes are deployed; Qilin and Settra are exploiting the auth bypass.
• CVE-2026-96951 (CVSS 8.8, EPSS 1.5%) — Windows Shell command injection that can bypass a security feature; patch with no public PoC noted.
• CVSS 10, no listed PoC or EPSS: CVE-2026-90532 and CVE-2026-48383 (Adobe Experience Manager incorrect authorization), CVE-2026-106624 and CVE-2026-106622 (ColdFusion code injection and SSRF), CVE-2026-107594 (WordPress File Upload to Order before 1.1.4), and CVE-2026-55572 (e107 before 2.3.7).

Breaches & incidents

• Attackers compromised exposed Danfoss and Copeland refrigeration controllers, raising temperatures as high as 50°C and spoiling food, with fires reported, across nearly 700 French supermarkets. ANSSI later added Copeland XWEB and Dixell XWEB alongside Danfoss AK-SM and AK-SC. Finance Minister Roland Lescure said about 700 of roughly 10,000 stores were hit, including Carrefour, Coopérative U, E.Leclerc, Intermarché, and Monoprix.
• Burger King Japan confirmed unauthorized access between October 2 and October 7 exposed about 11.18 million official-app member records (IDs, names, email, phone, dates of birth, gender, prefecture). The company said it does not hold credit card numbers.
• Energize Lab’s Eiliko robots left 13 million chats on unprotected servers. Researcher Sammy Azdoufal could read conversations from about 68,000 devices, including more than 31,000 U.S. child profiles, plus emails, IPs, photos, and short audio at public URLs.
• An unsecured Vibetech database exposed 13.7 million records, including names, phones, emails, plaintext passwords, and bank-account details, apparently aggregated from older breaches.
• Leak-site posts in the last 24 hours: 30. Notable names include Keio Corporation, Kemlows Diecasting, Telcoe Federal Credit Union, and Segres Systec (Qilin); TGM Manufacturing (Wallstreet); karix.com and several others (LockBit 5); and www.coopecaja.fi.cr (INC).

AI

• Meta released Muse Spark Open, an open-weight natively multimodal mixture-of-experts model: 816 billion parameters, 42 billion active, 1 million-token context, aimed at coding and agents. Meta says it is the most capable U.S. open-weight model and the first in its class to run locally on two Apple M5 Ultra Mac Studios via MLX (up to 512 GB unified memory). Artificial Analysis scores it 39, ahead of other U.S. open-weight models but behind GLM-5.3 (45) and Kimi K3 (44). Launch pricing is $1.25 / $4.25 per million input/output tokens. Another account says local use wants at least 1 TB of RAM.
• Anthropic says criminals and state-linked actors used Claude agents (Haiku, Sonnet, and Opus) to automate phishing, credential theft, and data theft between December 2025 and August 2026. Anthropic links GTG-20006 to public reporting on Midnight Blizzard, targeting Ukrainian and European government, military, diplomatic, and defense organizations.
• Anthropic told investors Q3 revenue reached $16.8 billion, up from about $4.8 billion in Q1 and $11.5 billion in Q2, with $1.70 of revenue per $1 of compute and an 11% adjusted operating margin excluding stock-based compensation, ahead of a planned IPO.
• New weights worth a look: LiquidAI/LFM2.5-24B-A2B (24B), autotrust/JEV-35B (35B, Apache-2.0), inclusionAI/Ling-3.1-flash (MIT), and black-forest-labs/flux-3-image-klein.

Watchlist

• Federal KEV deadline is October 17 for the Cisco email, PAN-OS, and Ahsay flaws — confirm exposure of management interfaces and mail gateways today.
• Linux kernel CVE-2026-99999 (PwnEscape) lets guest VMs read host memory; demonstrated on Vercel Firecracker microVMs (~32 bytes per packet) but not reported exploited in the wild.
• Unit 42 on CL-STA-0954 / UNC5820: FortiManager compromise via CVE-2024-47575 in September 2024, theft of material for more than 500 FortiGates, then the PEERSTITCH implant.
• Discover-Tech ad delivery of Candiru exploits: Google, IAB Europe, Beeswax, Vungle, and Eskimi have removed, paused, or blocked the vendor — ad-tech logs are now a spyware hunting surface.
• No new CISA KEV additions in the last 24 hours beyond the appliance wave already in catalog; prioritize the October 13–14 entries over unscored CVSS 10 CMS bugs unless those products are in your estate.