This week’s intelligence highlights an intense focus on software supply chains, deep enterprise infrastructure, and financial platforms. Threat actors are aggressively targeting developer environments via poisoned npm packages and VS Code extensions, exploiting zero-days in perimeter gateways, and bypassing application controls to execute direct, unauthorized financial disbursements.

SISA Weekly Threat Watch – our weekly feature brings to you a quick snapshot of all the major security vulnerabilities that posed a threat to organizations worldwide. These recurring actionable threat advisories will also provide information and recommendations that will help security teams take appropriate actions to defend against the latest and critical threats.

1. Critical Edge & Core Infrastructure Vulnerabilities

Perimeter gateways, virtualization platforms, and core network switches require immediate attention to close actively exploited zero-days and critical RCE vectors.

• Citrix NetScaler Zero-Day (CVE-2026-88779) — An actively exploited memory overflow vulnerability is targeting Citrix NetScaler ADC and Gateway appliances configured as SAML SPs or IdPs. Attackers are sending malformed SAML authentication requests to trigger a severe Denial of Service (DoS) condition, repeatedly crashing the nsaaad daemon and forcing appliance reboots, with potential secondary risks for code execution.
• OpenSSH, Veeam, & SonicWall Disclosures — A wave of critical infrastructure patches addressed an OpenSSH LZ77 multiplexed side-channel flaw ("Crossing the Streams") that allows ciphertext recovery. Additionally, Veeam Backup & Replication patched an authenticated deserialization RCE (CVE-2025-64393), and SonicWall SMA 1000 Series gateways resolved a pre-authentication CVSS 10.0 SSRF (CVE-2026-102255) allowing unauthorized internal network requests.
• Cisco Nexus, VMware, & Splunk Enterprise Flaws — Critical updates were issued for Cisco Nexus NGOAM functionality allowing unauthenticated root RCE, a VMware VMXNET3 integer overflow (CVE-2026-59346) enabling guest-to-host memory corruption, and an unauthenticated OS command execution flaw via the Patroni REST API in Splunk Enterprise (CVE-2026-76268).

2. Application, Collaboration & Data Platforms

Widespread vulnerabilities across enterprise messaging, data integration, and monitoring platforms are exposing sensitive mailboxes and enabling cross-tenant data interception.

• Exchange, Kafka Connect, & Atlassian Flaws — Microsoft Exchange Server patched an authorization bypass (CVE-2026-96940) allowing authenticated users to access other users' mailboxes. Apache Kafka Connect on Windows suffers from unintentional FileStream connector exposure via the REST API, and Atlassian Data Center products resolved a critical unauthenticated arbitrary file-access flaw (CVE-2026-21589).
• Elastic Stack Vulnerability Suite — Elastic disclosed multiple security flaws across Elasticsearch, Kibana, and Elastic Endpoint. Most notably, an authorization bypass in Kibana Fleet (CVE-2026-102406, CVSS 8.8) allows attackers to hijack data-stream identifiers, redirecting and intercepting cross-tenant integration data.

3. Supply Chain Attacks & Ecosystem Compromises

Adversaries are executing highly coordinated attacks against developer ecosystems, injecting backdoors into VS Code extensions, npm registries, and GitHub Actions pipelines.

• GlassWorm & SubQuery Ecosystem Attacks — Threat actors disguised the "GlassWorm" malware inside visual theme extensions on the VS Code Marketplace, utilizing zero-width Unicode steganography and Solana blockchain dead-drops to deploy the XWorm RAT. Concurrently, attackers hijacked the @subql/common npm pipeline, publishing a backdoor that executes upon installation or import to harvest CI/CD credentials.
• Tensorlake, GhostAction & MALFEX Campaigns — The tensorlake npm package was compromised to deliver an obfuscated worm that drops a destructive GitHub token monitor. Simultaneously, the "GhostAction" campaign injected malicious workflows into 772 public GitHub repositories to exfiltrate CI/CD secrets, while the "MALFEX" npm campaign utilized multiple attack paths to deliver the Overlord RAT and node-based info-stealers.

4. Cyber Espionage & Financial API Fraud

State-nexus espionage actors are hiding backdoors inside regional email appliances, while financial cybercriminals are bypassing front-end validation to drain bank accounts.

• Exploitation of Financial Payment APIs — Threat actors are compromising internet-facing applications and source code repositories to steal legitimate API credentials for payment gateways and partner banks. Using these whitelisted credentials, attackers directly invoke disbursement APIs, bypassing application-level KYC, loan sanctioning, and balance checks to instantly route funds to attacker-controlled mule accounts.
• BPFDoor & AVERAT Linux Backdoors — China-nexus actors are targeting Asia-Pacific telecommunications by deploying updated BPFDoor and the new AVERAT Linux implant. The malware bypasses port scans using raw BPF socket sniffing and masquerades as regional email security appliances (e.g., SpamSniper) while tunneling C2 traffic via HTTPS POST requests and standard SMTP (TCP Port 25).

Proactive Steps for the Week

• Isolate and Patch NetScaler Appliances: Determine if Citrix NetScaler instances are operating as SAML SPs or IdPs. Immediately apply the patched firmware (e.g., 14.1-73.41, 13.1-64.28) and ingest Citrix-provided IP deny lists into edge firewalls to block active exploit attempts.
• Secure Payment APIs & Implement Secondary Checks: Financial institutions must enforce cryptographically bound multi-stage transaction workflows to ensure disbursement APIs cannot be triggered without matching, approved loan/validation records. Transition away from long-lived static API tokens to session-based authentication.
• Audit CI/CD Pipelines and Disable Lifecycle Scripts: Configure npm and yarn to ignore scripts (npm config set ignore-scripts true) across developer endpoints to neutralize supply chain loaders. Review GitHub Actions workflows for unauthorized injections (e.g., github_actions_security.yml) and rotate all exposed cloud and repository secrets.
• Apply Critical Enterprise Software Updates: Deploy Microsoft's September 2026 V2 updates for Exchange Server, update Atlassian Data Center products to fixed releases, and upgrade Elastic Stack deployments to supported branches (e.g., 8.19.23, 9.4.8).
• Harden Linux & Endpoint Peripherals: Deploy OpenSSH 10.6/10.6p1 to eliminate the LZ77 compression side-channel. Audit Linux processes for binary masquerading (e.g., processes hiding under spamsniper.pid or /sbin/ntpdate) to hunt for BPFDoor and AVERAT implants.