This week’s threat intelligence highlights a dangerous shift toward persistent post-exploitation mechanisms, autonomous machine-speed destruction of AI infrastructure, and zero-binary browser assembly. Attackers are actively stealing SharePoint machine keys to forge administrative tokens that survive software patching, weaponizing LLM agents to destroy multi-thousand-dollar AI model checkpoints, and exploiting foundational Linux filesystem concurrency flaws that bypass SELinux silently.

1. Critical Enterprise Application & PLM Exploitation

Public-facing enterprise collaboration, CI/CD, and Product Lifecycle Management (PLM) platforms are under active, high-severity bombardment from both ransomware affiliates and advanced intrusion sets.

• Microsoft SharePoint Server RCE (CVE-2026-50522) — Actively exploited in the wild, this critical CVSS 9.8 untrusted data deserialization flaw allows unauthenticated remote code execution on on-premises SharePoint deployments (w3wp.exe). Critically, attackers are using single-request payloads to exfiltrate IIS and SharePoint machine validation/decryption keys (ValidationKey and DecryptionKey). This allows adversaries to forge authentication tokens (such as ViewState tokens) and maintain administrative access even after the software patch is applied.
• Cl0p Ransomware Targeting PTC Windchill & FlexPLM (CVE-2026-12569) — Cl0p affiliates are chaining an unauthenticated WSDL information leak with a CVSS 9.8 login servlet deserialization flaw in internet-exposed PTC Windchill and FlexPLM servers. Attackers deploy obfuscated JSP webshells under /Windchill/login/, execute automated filesystem enumeration (flst.txt), exfiltrate proprietary engineering CAD/PLM schematics, and launch direct email extortion campaigns against internal employees.
• Fastjson 1.x Zero-Day RCE (CVE-2026-16723 / XVE-2026-39684) — Threat actors are actively exploiting End-of-Life (EOL) Alibaba Fastjson 1.x libraries (versions 1.2.68 through 1.2.83). By supplying crafted JSON containing a @type field with nested jar:http or jar:file probes, attackers bypass AutoType restrictions in Spring Boot FatJAR environments (@JSONType annotation trust bypass), achieving remote code execution without conventional third-party gadget classes.
• GitLab "Oj Spill" Memory Corruption RCE — A critical vulnerability chain in the native C Oj JSON parser gem (ipynbdiff) allows any authenticated user with repository commit permissions to execute arbitrary system commands on self-managed GitLab instances. The attack chains a signed 16-bit integer narrowing flaw (leaking heap pointers to defeat ASLR in rendered notebook diffs) with an out-of-bounds write that corrupts interior heap vtable pointers.

2. Autonomous AI Extortion & State-Sponsored Cyber Espionage

Threat actors are deploying autonomous LLM agents to execute destructive domain-specific ransomware and leveraging zero-click webmail exploits to harvest diplomatic and government communications.

• JADEPUFFER Agentic Ransomware ("ENCFORGE") — The JADEPUFFER autonomous agentic threat group has upgraded its post-exploitation toolkit after breaching Langflow servers via unauthenticated RCE (CVE-2025-3248). The AI agent autonomously escapes Docker containers by abusing /var/run/docker.sock, iteratively rewriting Linux namespace escape scripts (procfs/nsenter) when initial downloads fail. It deploys ENCFORGE (lockd), a UPX-packed Go ransomware engineered to seek out and encrypt roughly 180 AI/ML file extensions—including model checkpoints (.safetensors, .pth, .onnx), vector databases (Chroma, Qdrant, Milvus), and training datasets.
• LAUNDRY BEAR Zero-Click Zimbra Campaign ("Улей" / "Flowerbed") — Russian state-supported actors are exploiting CVE-2025-66376, a stored Cross-Site Scripting (XSS) flaw in Zimbra Collaboration Suite Classic Web Client. By embedding malicious CSS @import directives in HTML emails, the exploit triggers zero-click automatic execution the moment an email is viewed or previewed. The injected script exfiltrates up to 90 days of mail history, 2FA tokens, Global Address Lists (GAL), and provisions rogue Application Passcodes (APPs) for long-term persistence.
• China-Nexus "JadeProx" Campaign (TriBack Loader) — Targeting government, healthcare, and educational sectors across Southeast Asia and Latin America, JadeProx exploits edge vulnerabilities (ASUSTOR ADM, WordPress plugins, Tenda routers, WebSVN) and malvertising (fake Anthropic Claude installers). The campaign deploys TriBack Loader, which decrypts payloads using a rolling XOR key and invokes undocumented Windows Win32 callback APIs (InitOnceExecuteOnce, TimerQueue, and EtwpCreateEtwThread) to bypass EDR thread-creation monitoring and execute AdaptixC2 and Beagle backdoors.

3. Evasive Client-Side Assembly & Sideloading

Adversaries are actively bypassing perimeter file inspection by assembling malware bytecode inside the browser DOM and abusing portable developer utilities.

• SourTrade Browser-Assembled Malvertising — Active across 12 countries, SourTrade impersonates TradingView, Solana, and Luno through sponsored search ads. Instead of delivering a compiled binary over the network, the landing page registers an inline HTML5 SharedWorker that downloads a clean Bun runtime executable and Base64-encoded PE headers. It uses AES-CTR to dynamically assemble unique JavaScriptCore bytecode (app.js) inside the victim's browser session, serving the finished file locally via a same-origin iframe attachment to evade hash-based network filtering.
• UAC-0099 Notepad++ Plugin Sideloading — This Russia-aligned group delivers space-padded VBScript archives via phishing links. The script drops a decoy PDF while silently unpacking a portable instance of legitimate Notepad++ (v8.8.3) in %PUBLIC%. Launching the application automatically sideloads a malicious plugin (NppExport.dll / LUNCHPOKE), which deploys BURNYBEAR (RemoteLibUpdater.exe) and the MATCHBOIL.V2 (InitTest.dll) C#-based C2 backdoor loader.

4. Kernel-Level Storage & Privilege Escalation

Deep OS-level concurrency bugs are granting low-privileged local accounts silent, un-loggable root execution primitives.

• RefluXFS Linux Kernel LPE (CVE-2026-64600) — A critical race condition within the Linux kernel's XFS filesystem copy-on-write (CoW) and reflink subsystem (reflink=1). An unprivileged local user can force an extent-sharing divergence, allowing direct block-layer overwrites to protected system files (/etc/shadow, /etc/sudoers, /etc/ld.so.preload). The exploit achieves full root privileges without generating kernel oops logs or crashes, and completely bypasses SELinux and AppArmor operating in Enforcing mode.

Proactive Steps for the Week

1. Patch and Rotate SharePoint Machine Keys: Apply the Microsoft July 2026 Security Updates for SharePoint Server immediately AND force an immediate regeneration/rotation of all IIS and SharePoint machine keys (ValidationKey and DecryptionKey) across all farm nodes to invalidate stolen tokens from CVE-2026-50522.
2. Isolate AI Pipelines & Restrict Container Sockets: Immediately upgrade Langflow instances to remediate CVE-2025-3248. Ensure Docker sockets (/var/run/docker.sock) are never mounted inside untrusted application containers, and establish offline, immutable, versioned backups for AI model checkpoints and vector stores to counter JADEPUFFER's ENCFORGE ransomware.
3. Remediate Linux XFS & Patch Distributed Services: Apply vendor kernel updates for RefluXFS (CVE-2026-64600) across RHEL, Oracle Linux, Amazon Linux, and Ubuntu hosts, scheduling mandatory reboots for XFS volumes formatted with reflink=1. Apply PTC Windchill maintenance release 11.0 M030 and upgrade self-managed GitLab deployments to 18.10.8, 18.11.5, or 19.0.2+ (confirming Oj gem 3.17.3+).
4. Enforce SafeMode on Legacy Java & Secure Webmail: For applications still running Fastjson 1.x, immediately pass JVM parameter -Dfastjson.parser.safeMode=true to block AutoType deserialization while refactoring to Fastjson 2.x. Upgrade Zimbra Classic Web Client deployments to 10.1.13+ or 10.0.18+ (verifying AntiSamy v1.7.8) to halt LAUNDRY BEAR zero-click CSS @import attacks.
5. Harden Execution Paths Against Sideloading & Callback Evasion: Configure EDR rules to detect abnormal Win32 callback executions (EtwpCreateEtwThread, InitOnceExecuteOnce) originating from non-standard DLLs. Enforce Application Control (WDAC/AppLocker) to block binary execution out of user-writable directories (%PUBLIC%, %LOCALAPPDATA%\Temp) to prevent Notepad++ portable plugin sideloading.

Explore our DFIR Solutions to discover how our advanced incident response support, compromise assessments, and threat hunting frameworks can insulate your enterprise infrastructure against these campaigns.