Week 42, 2026

1. The week in five bullets

• Ivanti Connect Secure zero-day under active exploitation: CISA added CVE-2026-104935 to the KEV catalog after attackers used it for remote authentication bypass and command execution to steal credentials; Volexity attributes the activity to unknown actor UTA0576, exploiting since October 3 against version 22.8R2.4.
• Two national-scale data exposures: Denmark confirmed data on 8.8 million people was pulled from its Central Register of Persons via an IT-vendor account protected by the password "123456," and Burger King Japan disclosed that 11.18 million app members' personal data was exposed by a third party.
• Record Patch Tuesday: Microsoft's October 2026 release fixed roughly 1,413 CVEs — its largest ever — including the actively exploited Windows Shell bypass CVE-2026-96951.
• AI-driven offense: A likely Russian-speaking actor used hundreds of AI agents to exploit PaperCut servers, chaining two CVEs to compromise about 440 servers and steal Windows credentials; Xbow used GPT-5.6-Sol to chain three Chrome zero-days into a Windows sandbox escape affecting an estimated one billion users.
• Refrigeration attacks in France: Attackers compromised exposed Danfoss and Copeland controllers, raising temperatures as high as 50°C and spoiling food at nearly 700 supermarkets.

2. Exploitation & threat activity

Nine KEV additions landed this week, several with tight federal deadlines. Beyond the Ivanti zero-day, CISA ordered fixes by October 17 for four actively exploited flaws including PAN-OS CVE-2026-0322 and Cisco Secure Email Gateway CVE-2026-76519, by October 18 for Atlassian CVE-2026-21589, and by October 19 for Fortinet CVE-2025-61624 and BeyondTrust CVE-2026-102764.

Other active campaigns: Cisco Secure Email Gateway CVE-2026-76519 was exploited as a zero-day for unauthenticated root via a malicious email attachment. SonicWall SMA 1000 pre-auth SSRF CVE-2026-102255 — CVSS 10.0, no workaround — is being exploited on models 6210, 7210, and 8200v. A public Python PoC is out for FortiClient EMS CVE-2026-35616, exploited since spring. Qilin and Settra ransomware groups are exploiting PAN-OS GlobalProtect CVE-2026-0257. Citrix confirmed exploitation of unauthenticated NetScaler RCE CVE-2026-88771 on unpatched appliances. Recorded Future counted 80 actively exploited vulnerabilities in September, a 29% jump in Very Critical scores.

Named actors: Mandiant ties BeyondTrust CVE-2026-102764 to China-nexus Armory Castle, exploited since August. Citizen Lab reports Candiru zero-click spyware delivered to Al Jazeera devices via targeted ads bought by Israeli firm Discover-Tech. Microsoft seized domains used by YAM Store, CoGUI, and Iron Man after more than one billion phishing messages. A stolen ConnectWise Cloud Backup API secret was used to access 173 Microsoft 365 tenants.

3. Patch priorities

• CVE-2026-104935 — Ivanti Connect Secure auth bypass, actively exploited; upgrade to 25.1.3.0 or later immediately.
• CVE-2026-96951 — Windows Shell Mark-of-the-Web bypass, exploited in the wild; apply October Patch Tuesday now.
• CVE-2026-76519 — Cisco Secure Email Gateway root RCE via email attachment; patch and update Content Scanner Tools.
• CVE-2026-102764 — BeyondTrust Remote Support auth bypass, exploited by Armory Castle since August; upgrade past 26.2.3.
• CVE-2026-0322 — PAN-OS management-interface flaw yielding root code execution; patch PA-Series and VM-Series firewalls.
• CVE-2025-61624 — Fortinet path traversal, exploited by PEERSTITCH; patch all affected Fortinet products.
• CVE-2026-21589 — Atlassian Data Center arbitrary file read, exploited since early October; update and restrict file paths.
• CVE-2026-105133 / CVE-2026-105134 — AhsayCBS improper authentication and command injection; patch exposed backup servers.
• Also prioritize CVSS 10.0 unpatched items: Adobe Experience Manager (CVE-2026-48382), ColdFusion (CVE-2026-106624), and WordPress File Upload to Order (CVE-2026-107594).

4. Breaches & ransomware

The Danish register incident (8.8 million people) and Burger King Japan's 11.18 million-member exposure dominated the numbers. Oracle confirmed a 20-million-patient breach of legacy Cerner systems. A compromised Educational Testing Service login exposed data on 7 million California students across three school years. On the consumer-AI side, a researcher accessed 13 million Eiliko robot chats, including more than 31,000 U.S. children's profiles, and remotely altered robot behavior.

The French refrigeration attacks hit roughly 150–200 Intermarché shops and nearly 100 Cooperative U outlets. In legal action, the FBI arrested Toronto executive Edward Dubrovsky, alleging conspiracy with ShinyHunters after the FBIjobs.gov breach. Most active ransomware groups: n0n (83 victims), the gentlemen (37), qilin (29), wallstreet (15), orova (11).

5. AI

Model releases were heavy. Google released Gemini 4 Argon globally, ranking first on the Vals Index at $2/$10 per million input/output tokens; DeepMind positions it for science, coding, robotics, and cyber defense, tying for first on CWE-Bench at 68%. Meta shipped frontier models Muse Wonder and Muse Wonder Full, claiming parity with Fable 5.1 and GPT-6 Astra, plus Muse Spark Open, an 816B-parameter MoE open-weight model with 1M-token context.

On the security side, Anthropic's September threat report documents state-backed and criminal actors using Claude agents to automate phishing, credential theft, and data theft between December 2025 and August 2026. China drafted export controls on 23 AI technologies, including frontier models above set compute thresholds. New models this week include DeepSeek-V4.1-Flash-1017, NVIDIA Nemotron-3.5-Super-VL-120B, LiquidAI LFM2.5-24B-A2B, and Black Forest Labs' Flux-3 image family.

6. By the numbers

Metric	Value
Stories	1,452
CVEs	5,505
KEV additions	9
Leaks	322
Breaches	3
New models	12

7. Outlook

• Watch for follow-on Ivanti Connect Secure forensic guidance and additional UTA0576 attribution as exploitation of CVE-2026-104935 spreads beyond version 22.8R2.4.
• Expect more KEV additions from the PaperCut AI-agent campaign and the NetScaler RCE as detections mature.
• Monitor ransomware pivots toward OT and building-management targets following the French refrigeration attacks, where ANSSI has already flagged three vendor families.
• Track enterprise fallout from the Danish and Burger King Japan breaches, including regulatory action over vendor credential hygiene.
• Watch whether Xbow's Chrome-to-Windows sandbox escape chain drives emergency Chrome updates and renewed scrutiny of AI-assisted vulnerability chaining.