Cyber Threat Intelligence 13 October 2026
-
Financial Sector
- When Banks' AI Agents Meet Customers' AI Agents
"Artificial intelligence agents are beginning to operate on both sides of banking transactions. Financial institutions are deploying agents internally to handle customer service, fraud, risk and operational tasks, while customers are gaining access to agents that can shop, negotiate and make payments on their behalf. As these two models converge, banks face a new challenge: determining how much authority to give AI agents and how to establish trust when machines increasingly transact with other machines."
https://www.bankinfosecurity.com/blogs/when-banks-ai-agents-meet-customers-ai-agents-p-4216
New Tooling
- Strands Box: The Big Picture
"I talk to AWS customers about agents nearly every day. I hear a lot of excitement about the results they’re already seeing from agents, including for software development, operations, business processes, and directly serving their customers. I also hear a deep desire for more control, stronger security, and a deeper understanding of how their agents are working. Guided by our customers, we are investing deeply in agent safety, isolation, and policy at AWS. Last summer we released AgentCore, our platform for building and optimizing agents. AgentCore Runtime is at the center of AgentCore: a secure sandbox for running agents, where each session with each agent gets its own dedicated MicroVM (based on Firecracker, and AWS’s two decades of investment in virtualization security). Later last year we released AgentCore Policy, allowing fine-grained control over how cloud-hosted agents use their tools, leveraging the Cedar policy language originally developed at AWS."
https://strandsagents.com/blog/strands-box-the-big-picture/
https://www.helpnetsecurity.com/2026/10/12/aws-strands-box-open-source-ai-agent-sandbox/
https://github.com/strands-agents/box
Vulnerabilities
- GitLab Warns Of Max Severity Code Execution Vulnerability
"GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. Tracked as CVE-2026-97229, this critical security flaw was discovered by a security researcher using the 'joaxcar' handle and reported via GitLab's HackerOne bug bounty program. CVE-2026-97229 stems from an integer overflow weakness in GitLab's CI/CD Regular Expression Compiler, which parses, compiles, and evaluates regular expressions in projects' pipeline configuration files."
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/ - Critical Unauthenticated Arbitrary File Upload Vulnerability Exploited In Bricksforge Plugin
"This blog post covers a Critical unauthenticated arbitrary file upload vulnerability in the Bricksforge (opens in new tab)
plugin for WordPress. Patchstack has deployed a mitigation rule to protect against exploitation of this vulnerability. If you are a Bricksforge user, update to at least version 3.1.8.10. This vulnerability is currently being targeted in the wild. Tracked as CVE-2026-85097 (opens in new tab), the issue allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, leading to remote code execution (RCE). It affects Bricksforge versions up to and including 3.1.8.9. A fix is available in version 3.1.8.10, and organizations running affected versions should upgrade as soon as possible."
https://patchstack.com/articles/critical-unauthenticated-arbitrary-file-upload-vulnerability-exploited-in-bricksforge-plugin/
https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
https://www.securityweek.com/bricksforge-wordpress-plugin-vulnerability-exploited-in-the-wild/ - Months-Old Palo Alto VPN Vulnerability Remains a Target For Ransomware Groups
"Ransomware groups continue to target a high-severity vulnerability in Palo Alto Networks products, despite a security patch being released five months ago, according to ReliaQuest. The cyber threat detection provider warned in a social media advisories posted on October 9 that multiple groups, including the Qilin and Settra ransomware operations, are actively targeting CVE-2026-0257 to establish unauthorized VPN sessions and gain initial access to internal networks. CVE-2026-0257 is an authentication bypass vulnerability in PAN-OS GlobalProtect and Prisma Access that affects several Palo Alto Networks products, including PAN-OS versions 10.2.0, 11.1.0, 11.2.0 and 12.1.0 and two versions of Prisma Access (10.2.0 and 11.2.0)."
https://www.infosecurity-magazine.com/news/palo-alto-vpn-vulnerability-target/
Malware
- From Endpoint To Funhouse: Evolution Of Ransomware Families And Kimsuky-Linked Distribution Cases
"AhnLab SEcurity intelligence Center (ASEC) recently identified a case in which the Kimsuky group ultimately distributed the Funhouse ransomware via a malicious Hangul document that was disguised as a resume. The Funhouse ransomware was identified as a variant of previously disclosed endpoint ransomware, and the tools used in this attack—such as Quasar RAT—as well as the overall attack chain shared numerous similarities with Kimsuky’s endpoint ransomware distribution cases observed since the first half of 2026. In this blog post, we analyze the recently identified Funhouse ransomware distribution campaign and summarize its connections to Kimsuky’s previous Endpoint ransomware distribution campaigns."
https://asec.ahnlab.com/en/95775/ - Ledger Confirms Spy Chip Implant Behind Wallet Crypto Thefts
"Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. The company has been investigating reports of users losing funds from wallets purchased through CryptoBilis, a major Malaysia-based hardware wallet retailer operating across Southeast Asia. Some researchers have shown the implant in Ledger X since September 16, saying tampered devices were available for nearly half the price of the original hardware."
https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
https://thehackernews.com/2026/10/ledger-finds-unauthorized-hardware.html
https://www.helpnetsecurity.com/2026/10/12/ledger-wallets-compromised-via-hardware-implant/ - Inside AvisLoader: A Windows Malware Loader Built To Resist Disruption
"Varonis Threat Labs recently discovered AvisLoader, a new Windows loader named after the Latin word for bird. We found it on an exposed staging server alongside a ClickFix lure, supporting tools, and its Command Center. The attack starts with a familiar ClickFix lure. A page posing as a document-signing request asks visitors to copy and run an attacker-supplied command on their machine. The more interesting part is how AvisLoader stays connected. It communicates via Tox, an encrypted peer-to-peer (P2P) messaging network that carries commands and additional payloads from the operator."
https://www.bleepingcomputer.com/news/security/inside-avisloader-a-windows-malware-loader-built-to-resist-disruption/ - CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
"SOCRadar’s Threat Research Unit (STRU) has documented CyberXero, a Russian-speaking, financially motivated Initial Access Broker that pairs commodity offensive tooling with an AI orchestration layer running on its own infrastructure. The operation runs two pipelines at once: a global, automated campaign against WordPress and e-commerce platforms, and a curated, manual campaign against Ukrainian energy and critical infrastructure. More than 628,000 Ukrainian individuals have confirmed data in the actor’s possession, including residents of Kharkiv, a city on an active war front. The entire operation surfaced from a single configuration error: an exposed open directory that served the actor’s live working directory, including AI session logs, scripts with plaintext tokens, and exfiltrated victim data. CyberXero remained active throughout the investigation and was still active at the time of publication."
https://socradar.io/blog/cyberxero-ai-iab-ukraine-critical-infrastructure/
https://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.html
https://securityaffairs.com/200803/cyber-crime/cyberxero-used-51-ai-agents-to-steal-628000-ukrainian-records.html - Canonical Websites Disrupted In Second DDoS Attack This Year
"Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure. The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites are under a sustained distributed denial of service attack,” the company said, adding that some services might not be reachable at times. The disruption was limited to Canonical’s primary web properties, OMG! Ubuntu reported. These included ubuntu.com, canonical.com, the Ubuntu blog and developer site, and Ubuntu’s security advisory pages and API."
https://www.securityweek.com/canonical-websites-disrupted-in-second-ddos-attack-this-year/
https://securityaffairs.com/200832/security/canonical-hit-by-second-ddos-attack-in-2026.html
Breaches/Hacks/Leaks
- Cyberattack Shuts Down Refrigerators At French Supermarkets
"Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. Victims include Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, with French outlets reporting that the attack affected 250 to 350 stores, causing significant financial losses and food waste. The threat actors hijacked refrigeration controllers running older versions of Danfoss control software on Sunday night and used them to raise supermarket refrigerator temperatures by triggering a built-in automatic defrosting system."
https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/
https://therecord.media/cyberattack-disrupts-refridgeration-in-france
https://www.infosecurity-magazine.com/news/french-supermarket-chains/
https://www.helpnetsecurity.com/2026/10/12/france-cyberattack-supermarket-freezers/ - Retail Giant Ahold Delhaize Takes Systems Offline After Cyberattack
"Retail giant Ahold Delhaize, one of the world's largest food retail chains, confirmed today that it was forced to take some systems offline after a "cybersecurity incident." As a wholesale company and multinational retailer, Ahold Delhaize operates more than 9,400 local stores across Europe, the United States, and Indonesia, employs nearly 400,000 people, and serves around 60 million customers each week through physical retail locations and online. Ahold Delhaize reported yearly net sales of over $104 billion in 2024, and it owns a wide range of brands, including Delhaize, Maxi, Mega Image, Albert, bol, Alfa Beta, Etos, Gall & Gall, and Profi in Europe, and Food Lion, Stop & Shop, Giant Food, and Hannaford in the American market."
https://www.bleepingcomputer.com/news/security/retail-giant-ahold-delhaize-takes-systems-offline-after-cyberattack/
https://www.bankinfosecurity.com/supermarket-chain-ahold-delhaize-caught-in-cyber-incident-a-33072
General News
- September 2026 Dark Web Breach Incident Trend Report
"The September 2026 Dark Web Breach Incident Trend Report focuses on data breach cases and the sale of initial access credentials posted on the deep web and dark web forums. The report explicitly states that the accuracy of some of its content cannot be fully verified due to the nature of the sources."
https://asec.ahnlab.com/en/95764/ - September 2026 Dark Web Issue Trend Report
"The September 2026 Dark Web Issue Trend Report summarizes major issues that occurred on the deep web and dark web. However, the report notes that due to the nature of the sources, it may be difficult to fully verify the accuracy of some information."
https://asec.ahnlab.com/en/95769/ - September 2026 Dark Web Threat Actor Trend Report
"The September 2026 Dark Web Threat Actor Trend Report focuses on threat actors active on the deep web and dark web, as well as publicly reported cyberattack incidents. It is noted that the factual accuracy of some content cannot be independently verified."
https://asec.ahnlab.com/en/95770/ - No Identity, No Recovery: Cyber Resilience Starts With IAM
"Enterprises need cyber resilience to ensure that they can sustain operations in the face of ransomware and other cyber threats, and a frequently underappreciated piece of cyber resilience is identity resilience. Identity resilience is a prerequisite to cyber resilience. While you might have a resilience plan for your data and apps, that doesn't matter if teams can't access their apps because your identity infrastructure is inaccessible."
https://www.darkreading.com/cybersecurity-operations/cyber-resilience-starts-with-iam - Geopolitics And The Cyber Resilience Gap Belong In Your Threat Model
"In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity Outlook 2026, including that CEOs now rank cyber-enabled fraud above ransomware as their top concern. Joshi explains the widening resilience gap between large and small organizations and between regions, the role of skills shortages, and what public-private cooperation needs to work at scale. He also offers advice for CEOs and boards."
https://www.helpnetsecurity.com/2026/10/12/akshay-joshi-wef-cyber-resilience-gap/ - AI Vulnerability Patching Has a Grading Problem
"Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that made the crash go away still failed those maintainer tests. If you’re thinking about letting an AI tool patch vulnerabilities for you, this is the number to look at. Many security patching benchmarks grade a fix on one question: does the proof-of-concept input, the sample that triggers the bug, still crash the program? A patch can pass by blocking the path to the crash and leaving the flaw where it was. The authors call that kind of fix “strictly worse than no fix at all,” since it tells you the problem is solved when it isn’t."
https://www.helpnetsecurity.com/2026/10/12/ai-vulnerability-patching-grading-problem/
https://arxiv.org/pdf/2610.10150 - How Much Does It Cost To Use Open Source Software?
"Open source software is used pervasively, with some estimating that over 90% of codebases contain open source software. Many adopt open source software because it’s free and thus cheaper than writing a proprietary alternative. But as the community saying goes: “open source is free as in puppies, not free as in beer.” Once you or your organization has adopted an open source project, there is still effort (such as engineering time, costs, etc.) associated with ensuring that your version of an open source project is healthy and up to date. While efforts by the research community have investigated the ongoing costs required to maintain open source software, at Google we needed to better understand the resources required to use thousands of open source software packages."
https://opensource.googleblog.com/2026/10/how-much-does-it-cost-to-use-open-source-software.html
https://www.helpnetsecurity.com/2026/10/12/google-open-source-maintenance-costs-report/ - Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
"The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct keeps raising privacy concerns; and the horror stories from pretty much every personal AI agent keep piling up. Regardless, the tech world is mesmerized by the capabilities and potential of these services. Less than a year after the first release of the open-source agent now called OpenClaw, the juggernauts are putting their weight behind the idea that each of us needs a personal assistant."
https://thehackernews.com/2026/10/bring-your-own-agent-your-employees.html
อ้างอิง
Electronic Transactions Development Agency (ETDA)
- When Banks' AI Agents Meet Customers' AI Agents
