This week’s intelligence highlights an intense escalation in autonomous cyber operations and critical perimeter exploitation. Threat actors are deploying AI-driven agentic frameworks to bypass APIs at machine speed, weaponizing zero-days across enterprise gateways and e-commerce platforms, and leveraging unauthenticated bypasses in core Linux networking stacks.

SISA Weekly Threat Watch – our weekly feature brings to you a quick snapshot of all the major security vulnerabilities that posed a threat to organizations worldwide. These recurring actionable threat advisories will also provide information and recommendations that will help security teams take appropriate actions to defend against the latest and critical threats.

1. Autonomous AI Exploitation & Machine-Speed Intrusions

Adversaries are actively operationalizing Large Language Models (LLMs) and multi-agent frameworks to automate the entire attack lifecycle, from initial reconnaissance to financial extortion.

• CRAFTY FALCON & Financial API Hijacking — An advanced threat group is utilizing autonomous offensive platforms (PentAGI, ARTEX, CyberStrikeAI) to bypass security controls and invoke legitimate payment APIs at machine speed. By reverse-engineering client applications and routing traffic through whitelisted third-party IP pools, the group executes micro-value test transactions before initiating high-value cryptocurrency and fiat disbursements.
• ARTEX Framework & VOLTA Infostealer — The ARTEX framework utilizes LLM agents to conduct Active Directory reconnaissance and privilege escalation in sub-second bursts (e.g., 27 events in 23 seconds), bypassing obstacles without human intervention. Concurrently, the VOLTA infostealer integrates LLMs directly into its pipeline to autonomously appraise stolen victim data and generate target dossiers.
• Mass AI-Discovered Linux Kernel Exploits — OpenAI demonstrated an autonomous AI pipeline that discovered and generated working exploits for 948 unique Local Privilege Escalation (LPE) vulnerabilities across the Linux kernel. This paradigm shift proves that local, low-privileged access on an unpatched Linux host is now practically equivalent to full root access.

2. Zero-Days & Edge Perimeter Exploitation

Edge network appliances, load balancers, and enterprise switching infrastructure are under active bombardment from unauthenticated threat actors.

• Active Perimeter Zero-Days (Ivanti, BeyondTrust, D-Link) — Threat actors are actively chaining an authentication bypass (CVE-2026-104935) with local flaws in Ivanti Connect Secure to achieve unauthenticated root RCE. BeyondTrust Remote Support faces zero-day exploitation via an improper origin validation flaw (CVE-2026-102764). Additionally, D-Link DGS-3130 series switches are exposed to unpatched zero-days in the D-Link Discovery Protocol (DDP), allowing administrative takeover.
• Magento "StyleSmuggler" 0-Day & WooCommerce Flaws — A maximum-severity template injection flaw (CVE-2026-75650) in Adobe Commerce / Magento is being actively exploited to deploy the chi_down Go RAT and persistent webshells. In the WordPress ecosystem, the Payever WooCommerce Gateway faces an unauthenticated arbitrary file upload flaw (CVE-2026-93754) leading to RCE.
• SonicWall SSL-VPN & Node-RED Active Exploitation — SonicWall SonicOS SSL-VPN services are vulnerable to an actively exploited authentication bypass (CVE-2026-19868) that circumvents SAML-enforced MFA. Concurrently, unauthenticated Siemens SIMATIC IoT2050 gateways running Node-RED (CVE-2026-58115) are being actively compromised to drop Linux bot implants directly into volatile memory mounts.

3. Core Infrastructure, Hypervisors & OS Vulnerabilities

Deep architectural flaws in hypervisors, networking protocols, and operating systems are granting attackers paths to collapse infrastructure and escape virtual environments.

• OpenSSH Alpine Authentication Bypass — A critical vulnerability (OpenSSH 10.6p2) affects Alpine Linux systems running sshd without PAM on the musl libc. Unauthenticated remote attackers can bypass password authentication by supplying an oversized password that triggers an error in crypt(), granting direct shell access to accounts configured with key-only access (like the default alpine user on tiny-cloud images).
• Xen Hypervisor Escape & Infrastructure RCEs — Xen Project and XCP-ng disclosed critical memory grant copy flaws (XSA-523) allowing malicious guest VMs to read/write host Dom0 memory, breaking hypervisor isolation. Additionally, Barracuda Email Security Gateways face pre-authentication root RCE chains (CVE-2026-116606/111560), and SolarWinds Dameware suffers from a CVSS 9.9 command injection flaw.
• Linux Kernel TCP & MPTCP Remote Use-After-Free — Two critical unauthenticated kernel flaws are exposing Linux hosts to remote root execution. CVE-2026-98432 involves a race condition in the Multipath TCP (MPTCP) socket initialization, while another TCP IPv4 UAF flaw allows remote attackers to trigger kernel heap corruption via crafted connection requests over listening TCP ports.

4. Cross-Platform Malware, Supply Chain & Parsing Flaws

Threat actors are weaponizing implicit trust mechanisms, compromising software supply chains, and abusing core image parsers to achieve execution.

• Supply Chain Compromises (Yoba AI & cPGuard) — Attackers are distributing malicious ZIP bundles disguised as AI clients (ChatGPT, Claude) to side-load malicious DLLs via legitimately signed executables (Yoba Malware). In the Linux hosting space, intruders compromised the CDN for OPSSHIELD's cPGuard, pushing trojanized updates that dropped persistent backdoors.
• Cloud Identity Hijacking (SkyW4lker & Storm-2603) — The SkyW4lker phishing kit abuses the Microsoft OAuth 2.0 Device Code flow to hijack tenant tokens and bypass MFA. The China-nexus Storm-2603 group exploits SharePoint flaws to inject in-memory "ToolShell" webshells into IIS worker processes, extracting ASP.NET machine keys to forge payloads.
• Espionage Campaigns (Gorbag & BITTER APT) — The Russia-aligned "Gorbag" campaign targets Ukrainian entities by exploiting a WinRAR path traversal flaw (CVE-2025-8088) to deliver Prime ReverseShell and BeautyStealer. South Asian BITTER APT uses malicious LNKs and VHDX containers to deploy the PapRAT and WmRAT implants.
• Core Image Parser Flaws (MS Paint & Python Pillow) — An out-of-bounds read in Microsoft Paint (CVE-2026-83844) allows unauthenticated RCE via crafted image files, complicated by Microsoft Store rollout delays. Python’s Pillow library suffers from a severe LibTIFF memory disclosure and DoS flaw (CVE-2026-112902) when parsing custom TIFF tags.

Proactive Steps for the Week

• Isolate and Patch Edge Perimeter Devices: Immediately apply security updates for Ivanti Connect Secure, BeyondTrust, SonicWall SSL-VPN, and Barracuda gateways. Disable DDP on D-Link DGS-3130 switches and restrict unauthenticated Node-RED administrative API access on Siemens IoT gateways.
• Harden OpenSSH and Linux Kernels: Audit /etc/ssh/sshd_config on Alpine Linux/musl hosts to enforce PasswordAuthentication no. Apply Linux distribution kernel patches to mitigate the TCP and MPTCP remote use-after-free vulnerabilities.
• Defend Against Autonomous AI Agents: Deprecate static IP whitelisting for payment APIs in favor of mTLS and asymmetric request signing to block CRAFTY FALCON. Enforce transaction velocity rules and step-up authentication to intercept automated micro-value probing.
• Remediate Parsers and Software Dependencies: Apply the Adobe Commerce hotfix (VULN-39341) to neutralize the StyleSmuggler zero-day. Upgrade Python Pillow to 13.0.0+ and manually verify Microsoft Paint builds via PowerShell to ensure the out-of-bounds read flaw is remediated.
• Restrict OAuth Device Code Flows: Configure Microsoft Entra ID Conditional Access policies to block deviceCode authentication protocol flows for all standard users, mitigating the SkyW4lker phishing kit's MFA bypass technique.

Explore our DFIR Solutions to discover how our advanced incident response support, compromise assessments, and threat hunting frameworks can insulate your enterprise infrastructure against these campaigns.