Cyber Threat Intelligence 19 October 2026

NCSA_THAICERT

Vulnerabilities

BlockStrap: Magento And Adobe Commerce RCE (CVE-2026-103849)
"BlockStrap (CVE-2026-103849) is a CVSS 10.0 Magento and Adobe Commerce flaw that gives unauthenticated attackers remote code execution. Adobe fixed it on October 13 in APSB26-153 but requires a manual patch, while new installs remain vulnerable. BlockStrap is the second critical break in Magento's email template engine in six weeks. It has the same CVSS 10.0 score as StyleSmuggler and the same impact: an unauthenticated attacker runs arbitrary PHP on the store server."
https://sansec.io/research/blockstrap-magento-rce
https://www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/
ARMORY CASTLE Exploits BeyondTrust
"On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTrust Remote Support (formerly Bomgar) appliances. BeyondTrust Remote Support is an enterprise secure remote access solution that enables IT teams to securely access and troubleshoot remote endpoints. The successful exploitation of this vulnerability results in the arbitrary upload of files. During an incident response engagement, Mandiant identified evidence that ARMORY CASTLE, a suspected PRC-nexus espionage threat actor (formerly tracked as UNC5221), exploited this vulnerability as a zero-day, in late August 2026. This blog describes how ARMORY CASTLE escalated privileges and established persistent access to compromised BeyondTrust Remote Support appliances following exploitation of CVE-2026-102764, and provides actionable guidance for defenders."
https://cloud.google.com/blog/topics/threat-intelligence/armory-castle-exploits-beyondtrust
https://www.beyondtrust.com/blog/entry/bt26-05
https://www.bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-august/
https://thehackernews.com/2026/10/china-linked-hackers-exploited.html
https://www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs
https://therecord.media/beyond-trust-cyberattack-china
https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-urges-patching-critical-vulnerability-beyondtrust-remote-support
https://www.bankinfosecurity.com/zero-day-in-beyondtrust-remote-support-appliances-exploited-a-33129
https://cyberscoop.com/china-espionage-attacks-beyondtrust-zero-day-armory-castle/
https://www.infosecurity-magazine.com/news/china-actor-beyondtrust-flaw-google/
https://www.securityweek.com/chinese-apt-exploited-beyondtrust-vulnerability-as-zero-day/
F5, Juniper Networks Patch Critical Vulnerabilities
"F5 and Juniper Networks have rolled out patches for dozens of vulnerabilities across their products, including critical-severity remote code execution (RCE) flaws. Security and application delivery firm F5 announced fixes for 11 security defects in NGINX. Among them, CVE-2026-15176 and CVE-2026-93479 are critical-severity bugs that could be exploited without authentication via crafted HTTP requests. Under certain conditions beyond their control, an unauthenticated attacker could exploit the security holes to trigger a buffer overflow leading to a restart. If ASLR is disabled or can be bypassed, the attacker could achieve RCE."
https://www.securityweek.com/f5-juniper-networks-patch-critical-vulnerabilities/
https://securityaffairs.com/201106/security/f5-addressed-critical-rce-flaws-in-nginx.html
Microsoft Patches Two Dozen RCE Flaws In Office
"Hot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities. Most of the new fixes address security defects in the Office suite. Two dozen of them patch high-severity remote code execution (RCE) flaws, including half a dozen bugs that could be targeted via the Preview Pane. In most cases, exploitation requires an attacker to send a specially crafted file, such as a malicious document, and convince the recipient to open it. Buffer overflow issues are blamed for most of the RCEs, with several defects being off-by-one, use-after-free, path traversal, and numeric truncation errors."
https://www.securityweek.com/microsoft-patches-two-dozen-rce-flaws-in-office/
Hackers Exploit SiteGuard WAF Flaw To Run Commands As Admins
"Hackers are exploiting an OS command-injection vulnerability in the SiteGuard Server Edition web application firewall (WAF), allowing them to execute commands with root or SYSTEM privileges on affected machines. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a leading Japanese WAF vendor that claims to protect more than 1.5 million websites. Based on WordPress.org statistics, the product is active on 500,000 sites."
https://www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/
https://jvn.jp/en/jp/JVN88474777/index.html
CISA Adds Two Known Exploited Vulnerabilities To Catalog
"CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability
CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability"
https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-adds-two-known-exploited-vulnerabilities-catalog
https://securityaffairs.com/201178/security/u-s-cisa-adds-fortinet-multiple-products-and-beyondtrust-remote-support-flaws-to-its-known-exploited-vulnerabilities-catalog.html
CVE-2026-88771: Inside The Exploitation Of a Critical NetScaler RCE Vulnerability
"On September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a CVSS v3.1 score of 9.8 according to NVD and a CVSS v4.0 score of 9.5 according to the Citrix security bulletin CTX697096. The vulnerability allows unauthenticated attackers to execute arbitrary commands on affected appliances. Exploitation requires no optional features to be enabled."
https://www.zscaler.com/blogs/security-research/cve-2026-88771-inside-exploitation-critical-netscaler-rce-vulnerability
Big Fish: Exploiting a 37-Year-Old Kernel Bug In OpenBSD
"Calif frequently publishes our offensive research and work, but we otherwise don't draw much attention to the defensive work we do — assisting open source projects with remediation, patch generation, cryptographic improvements, and internal engineering projects we carry out for our clients. Earlier this year, we reported some vulnerabilities, often along with suggested patches to OpenBSD. One traced back roughly 37 years to the original BSD sources, where a shared memory attachment counter was defined as a signed 16-bit short. Repeatedly forking a process with shared memory attachment records could push that counter past its maximum value of 32,767, causing it to wrap to a negative value. This integer overflow could lead to a use-after-free via a race condition; combined with a separate out-of-bounds write in the kernel, it allowed local privilege escalation to root. The issues were addressed in errata 026 and 018, respectively."
https://calif.io/research/big-fish
https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html
One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos And Linux
"A vulnerability affecting Broadcom’s proprietary implementation of 802.11 has been present in their SDK since at least 2010. An incomplete patch was silently released in 2018, followed by Broadcom’s recommendation to move to hostapd instead, making it a definitive forever day on eCos-based platforms (BCM3380, BCM3383, BCM33834) and a potential forever day on Linux platforms (BCM3390, BCM65xx, BCM68xx) unless affected Original Equipment Manufacturers (OEMs) are willing to migrate. The vulnerability can be triggered remotely over WiFi without knowledge of the network key or completion of a normal WPS enrollment. Exploitation provides controlled information disclosure and arbitrary code execution."
https://quentinkaiser.be/security/2026/10/16/one-parser-two-bugs/
https://securityaffairs.com/201268/iot/16-year-old-broadcom-wi-fi-bug-lets-attackers-take-over-routers-without-a-password.html

Malware

Investigating Ephemeral Supply Chain Tampering
"Google Threat Intelligence Group (GTIG) and Mandiant investigated a software supply chain compromise campaign targeting the update infrastructure belonging to AOMEI Technology between April 2026 and July 2026. The threat actor conducted repeated, short-burst configuration tampering against AOMEI origin servers. Each tampering window remained active for only five to ten minutes before reverting to authentic versions. This is the first time that we have encountered a software supply chain compromise that was implemented with these very short windows, effectively evading traditional point-in-time triage and automated file scanning."
https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering
https://www.manageengine.com/threat-analysis-lab/aomei-backupper-supply-chain-compromise.html
https://thehackernews.com/2026/10/attackers-tampered-with-aomei.html
CERT-In Warns AI Agents Accessed Sensitive Data At Indian Organizations During Testing
"AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detected the unauthorized access. After internal reviews, the AI companies whose models were being tested voluntarily reported the cases to CERT-In, India's national cyber agency."
https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html
https://securityaffairs.com/201130/ai/ai-agents-accessed-indian-organizations-without-authorization-cert-in-warns.html
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet To Finish Tasks
"OpenAI has disclosed two incidents in which internal AI models, asked only to look up public figures, instead broke into the live systems hosting that data. The reports, published on October 15, are the latest in a run of misalignment disclosures OpenAI started after its models compromised Hugging Face in July. OpenAI has since disclosed several other incidents, including models probing government websites for vulnerabilities, attempting to exploit SQL injection flaws, and searching GitHub for leaked API keys during training."
https://www.securityweek.com/openai-models-hacked-data-portals-raided-a-crypto-wallet-to-finish-tasks/
How RL Mapped a Midnight Blizzard-Linked Campaign From Two Hashes
"ReversingLabs (RL) researchers recently identified and classified the malware that Anthropic disclosed in its September 2026 report on how the Russian-based threat group Midnight Blizzard was leveraging Anthropic’s Claude AI to rebuild- and redeploy flagged software implants, making them harder for victims to detect. As noted in that report, RL had detected and tracked the malware samples for weeks before the Anthropic report was published — showing why behavioral intelligence and historical telemetry matter in the AI age. Since then we’ve been asked to explain more about the process we used to link Anthropic’s research to a much larger malicious campaign."
https://www.reversinglabs.com/blog/how-rl-mapped-a-midnight-blizzard-linked-campaign-from-two-hashes
25+ Versions In Six Months: How The SC WordPress Malware Adapts To Survive Cleanup
"SC is a WordPress malware campaign best known for putting casino spam on other people’s websites, though the kit can do more: it adds hidden admin accounts, captures logins, and installs whatever its operator sends. Keeping it on those sites is where most of the attacker’s effort goes. Since March, its operator has shipped more than 25 versions and tested builds against Imunify on a server they rent. By September, they had a version that keeps a record of which of its hiding places were cleaned and decides, one at a time, whether to come back."
https://blog.imunify360.com/how-sc-wordpress-malware-adapts-to-cleanups/
ConnectWise (SkyKick) Vendor Credentials Abused In M365 Attacks
"A Microsoft 365 credential (API secret) belonging to ConnectWise Cloud Backup (formerly SkyKick) has been compromised, and Huntress has confirmed it is being used to gain unauthorized access to customers' M365 environments. Huntress has high confidence that the threat actor abused ConnectWise Cloud Management applications for Exchange Online, Microsoft Teams, and SharePoint Online, Cloud Backup, MS Graph, and Partner Center. In one Huntress partner tenant, a second ConnectWise application, ConnectWise Cloud Management - MS Teams (Application ID 24205314-2b89-4e07-a2a4-579e898a5640), gave itself Global Administrator and then added new credentials to two other applications in that tenant, one of them being a single-tenant Huntress application unique to this partner."
https://www.huntress.com/blog/vendor-credential-enables-unauthorized-access
https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html
https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html
https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/
MALFEX Moves Its Npm Loader Into a Native Windows DLL
"The npm package imgdecode hides a malicious loader in a compiled Node.js addon. Its nine-line JavaScript file loads a Windows dynamic-link library (DLL). When a Node.js program calls require('imgdecode') from a Windows console, the DLL attempts to download encrypted shellcode from GitHub. It decrypts the response and injects the result into a new dllhost.exe process. This code does not need an install script. On 2026-10-13, the package was still available on npm."
https://safedep.io/malfex-imgdecode-npm-native-addon-loader/
https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html

Breaches/Hacks/Leaks

Burger King Japan Data Breach Exposes 11 Million Customer Records
"Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. Founded in 1953 in Florida, Burger King is now a multinational fast-food chain with nearly 20,000 locations worldwide, including 350 in Japan. In a Thursday press release, Burger King Japan said it concluded a follow-up investigation on October 13 and apologized to customers whose data was stolen in early October and leaked online."
https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/
https://securityaffairs.com/201119/security/burger-king-japan-data-breach-impacted-11-million-customers.html
Baltimore Suburb Confirms August Data Breach After Ransomware Claims
"Officials in Anne Arundel County, Maryland, confirmed that hackers stole files from government systems during an incident in August. A county spokesperson told Recorded Future News that they discovered “irregular activity” on August 28 and began an investigation on a “limited subset of systems within the county computer network.” “Through the course of the county’s response and investigation, it was determined that an unauthorized actor gained access to a limited number of systems and copied certain files from those systems,” the spokesperson said."
https://therecord.media/anne-arundel-county-maryland-confirms-data-breach
n0n Group Puts Dozens Of Global Ports And Shipping On Its Leak Site
"A month after its first leak site postings, the n0n extortion group has turned its attention to global shipping. On October 12, 2026, the group added 38 organizations to its Dark Web leak site in one batch: container terminals in Brazil, Spain, Morocco, India and Vietnam, shipping lines in Singapore, China and Taiwan, port IT providers in Kuwait, Indonesia and Germany, and a dense cluster of South Korean operators. The batch more than doubles the group’s public victim count and shifts it from an opportunistic, cross-sector actor to one with a clear sector focus. The way the stolen data is described also raises a question that matters more to the maritime industry than any single listing: whether these are 38 separate intrusions, or exposure flowing out of one shared system."
https://socradar.io/blog/n0n-group-global-ports-shipping-leak/

General News

September 2026 Threat Trend Report On APT Groups
"APT cases disclosed in September 2026 demonstrate that attacks have evolved to exploit the developer ecosystem, cloud services, and network management infrastructure as trust layers. Legitimate software installers, GitHub repositories, Microsoft 365, OneDrive, Telegram, Nostr, routers, and authentication servers were all included in the attack chain."
https://asec.ahnlab.com/en/95883/
Enterprise AI Enters Risk Management Phase As Security Concerns Rise
"As artificial intelligence (AI) expands into core business operations, attention is shifting from adoption to execution risk, according to research and analysis from CompTIA. Governance, cybersecurity and workforce readiness are emerging as critical factors in determining whether AI initiatives deliver long-term business value, CompTIA’s new research brief “Practical Implications of AI Safety” finds."
https://www.darkreading.com/cyber-risk/enterprise-ai-risk-management-phase-security-concerns-rise
When Your Ransomware Negotiator Works For The Other Side
"Edward Dubrovsky walked into the Philadelphia Cyber Risk Summit on Oct. 8 with his name on the sponsorship banner. His former company, Cypfer, was the event's largest sponsor. He'd co-authored a book on ransomware negotiation. He was, by every visible measure, exactly the kind of person you call at 2 a.m. when your network is down and someone is demanding eight figures to give it back. The FBI arrested him before the conference ended."
https://www.darkreading.com/cyber-risk/when-your-ransomware-negotiator-works-other-side
When AI Agents Commit Breaches, Humans May Not Be Held Liable
"As AI agents continue to break containment and breach other organizations, it's clear that organizations are responsible for the actions of their models. But what that responsibility means is far less clear. Since July, when OpenAI said two of its frontier models autonomously hacked AI model store Hugging Face as part of a security benchmark exercise, several of the most prominent large language model (LLM) firms have disclosed cases where their powerful models escape guardrails and breach other organizations. The Hugging Face incident, for example, saw OpenAI's models guess that the popular AI model store held the solutions for the Exploit Gym tests the models were being measured against."
https://www.darkreading.com/insider-threats/ai-agents-breaches-humans-liable
The Rise In RFQ And Project Invitation Scams
"The Fortra Intelligence and Research Experts (FIRE) team is tracking a 12-fold increase in emails using requests for quotation, project invitations, and procurement inquiries as a phishing pretext from October 2025 – September 2026. These messages impersonate prospective buyers seeking pricing, availability, or project participation. Their purpose is not to obtain a legitimate quote, but to persuade a recipient to access an attacker-controlled file-sharing, document-viewing, or procurement portal."
https://www.fortra.com/blog/rise-rfq-and-project-invitation-scams
https://www.helpnetsecurity.com/2026/10/16/rfq-phishing-emails-sales-procurement-staff/
Why Active Directory Weaknesses Stay Open For Years In Teams With One Or Two Admins
"David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start and end. He explains how the group handled settings that can break systems, such as SMB signing, LDAP signing and Kerberos hardening, how changes were tested in a lab, and how rollback planning worked. He also covers who owns the settings afterward and why the group was split in two."
https://www.helpnetsecurity.com/2026/10/16/david-fuhr-intcube-active-directory-security/
Stolen AI API Keys Are Paying For Hackers’ Autonomous Scans
"A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground forums from February through August 2026. Over that window, mentions of AI agents, indirect prompt injection and the Model Context Protocol (MCP) rose 67 percent. Two groups are exposed. A company that leaks an AI provider key pays for attacks on other people’s systems. An engineering team that pulls agent plugins from public registries can install malware dressed up as a useful tool."
https://www.helpnetsecurity.com/2026/10/16/stolen-ai-api-keys-autonomous-scans/
AI Decision Models And Their Impact On AI SOC Platforms
"In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter you can run locally. Others, like Laya, are already showing up in open source tooling. These models skip text generation entirely. You hand them some state and a set of typed questions. They hand back a choice, a score, or a yes/no with a probability attached."
https://thehackernews.com/2026/10/ai-decision-models-and-their-impact-on.html
Moscow Police Detain Suspected DataSuckers Hackers Linked To Breaches In Ukraine And Russia
"Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information. A Moscow court on Wednesday placed 19-year-old Denis Fridman under house arrest until December 8 in connection with the Dodo Pizza breach, which reportedly involved the theft of records related to hundreds of millions of orders placed over 15 years. He faces charges connected to the illegal handling of computer information containing personal data."
https://therecord.media/russia-datasuckers-hackers-arrested
Top 5 Initial Access Threat Vectors Observed By Unit 42 In September 2026
"This report provides an overview of the top five initial access threat vectors observed by Unit 42 Threat Intelligence for September 2026. Adversary activity during this period demonstrates a pronounced reliance on external edge exploitation and identity compromise, with the targeting of public-facing infrastructure and legitimate credential abuse serving as the primary footholds for intrusion campaigns. Concurrently, social engineering continues to drive targeted operations against public sector and critical infrastructure targets, while high-impact supply chain intrusions and zero-interaction drive-by compromises pose acute systemic risks across interconnected technology ecosystems."
https://unit42.paloaltonetworks.com/top-5-initial-access-vectors-september-2026/
DDoS Attacks Can Knock Services Offline Before Links Reach Capacity
"More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Attacks exceeding 1 Tbps or 1 Gpps increased 1,286% year over year. Much of that growth came from botnet operators associated with Aisuru, Kimwolf, Jackskid, and their successors. That means attackers need fewer devices to launch large attacks."
https://www.helpnetsecurity.com/2026/10/16/netscout-ddos-attack-growth-report/
Inside The Q3 2026 Brand Phishing Report: Microsoft Now Accounts For One In Three Brand Impersonation
"In Q3 2026, Microsoft was the most impersonated brand in phishing attacks, accounting for 33% of all brand impersonation attempts tracked by Check Point Research, up from 23% in Q2. Attackers favor Microsoft because stolen Microsoft credentials can unlock an entire corporate environment, including email, files and collaboration tools, while many of the other top brands mainly lead to personal accounts. Apple, Google, LinkedIn and Amazon completed the top five, and together these brands made up more than half of all attempts, showing how heavily attackers lean on a small group of trusted names."
https://blog.checkpoint.com/security/inside-the-q3-2026-brand-phishing-report-microsoft-now-accounts-for-one-in-three-brand-impersonation/
Inbox Flooded With Sign-Up Messages? Email Bombing Explained
"In September, reports emerged that a Virginia woman had been submerged by a flood of emails. Hundreds of automated messages poured in over a 24-hour period, including newsletters and promotions she’d never signed up to. But this was no ordinary spam campaign. The real reason behind the inbox blitz was to bury a legitimate email from the victim’s bank warning her about a fraudulent laptop purchase. This is email bombing. And if it’s happened to you, it could be a warning sign that your identity or online accounts have been hijacked by fraudsters."
https://www.welivesecurity.com/en/cybersecurity/inbox-flooded-signup-messages-email-bombing/

อ้างอิง
Electronic Transactions Development Agency (ETDA)