This week’s intelligence highlights an unprecedented escalation in both cryptographic trust failures and autonomous AI exploitation. Threat actors are utilizing compromised Certificate Authority keys, deploying AI-driven agentic swarms to breach financial infrastructure at machine speed, exploiting deep firmware bootkits, and continuing to weaponize unpatched edge gateways to establish internal footholds.

SISA Weekly Threat Watch – our weekly feature brings to you a quick snapshot of all the major security vulnerabilities that posed a threat to organizations worldwide. These recurring actionable threat advisories will also provide information and recommendations that will help security teams take appropriate actions to defend against the latest and critical threats.

1. Cryptographic Trust Failures & Supply Chain Risks

The complete compromise of a trusted Certificate Authority has triggered emergency responses across global programming ecosystems, while threat actors abuse legitimate binaries for initial access.

• eMudhra CA Private Key Compromise — The private keys for eight intermediate Certificate Authorities issued by eMudhra (emSign) were completely compromised due to a flawed Key Generation Ceremony that produced trivial, easily guessable keys. This grants attackers the theoretical capability to mint forged HTTPS certificates for arbitrary domains or digitally sign malware.
• Emergency Go Runtime & Oracle Java Updates — In response to the eMudhra CA compromise, the Go Security Team invoked its URGENT track, releasing Go 1.27.3 / 1.26.10 to hardcode the revocation of the compromised keys directly into the crypto/x509 verifier. Oracle similarly issued an emergency out-of-band alert to patch Java SE and GraalVM to prevent forged certificates from being trusted by Java applications.
• Siemens Software Center Sideloading (ClickFix) — Threat actors are actively exploiting a DLL sideloading vulnerability (CVE-2026-110936) in Siemens Software Center. Using "ClickFix" social engineering lures (fake CAPTCHAs), attackers drop an authentically signed Siemens executable alongside a rogue archive.dll to bypass signature-based detections and execute malicious code.

2. Autonomous AI Exploitation & Evasive Ransomware

Adversaries are unleashing AI-driven swarms to automate reconnaissance, bypass MFA, and execute high-velocity extortion campaigns.

• CyberStrikeAI BFSI Orchestration — CSIRT-Fin identified active exploitation using CyberStrikeAI, an open-source AI framework that coordinates multi-stage attacks and lateral movement. The AI agent autonomously parses target responses to deploy web shells and execute unauthorized fund disbursements directly through internal payment APIs.
• Agentic AI Swarms (CARLIY0S & Storm-0940) — CyberCartel orchestrated an autonomous swarm using the PentAGI framework and commercial LLMs (Claude, Grok, Kimi) to attack over 400 LatAm financial institutions at machine speed. Concurrently, China-aligned Storm-0940 abused ConnectWise Cloud Backup credentials to deploy the ARTEX AI framework, initiating over 2,900 automated sign-ins per minute to hijack Microsoft 365 tenants in under three hours.
• The Gentlemen RaaS & LockBit 5.0 — "The Gentlemen" ransomware syndicate is utilizing a custom Bring Your Own Vulnerable Driver (BYOVD) "EDR Killer" to terminate security agents from kernel space prior to encryption. Meanwhile, LockBit 5.0 continues its cross-platform operations (Windows, Linux, ESXi), employing ETW patching and process hollowing to evade detection.
• Cloud Extortion, BlackX Bootkit & Stadia RAT — The Pink and ScarlettGroup syndicates are bypassing destructive ransomware entirely, utilizing AiTM phishing to steal Microsoft 365 tokens and exfiltrate cloud data via the Graph API. On the endpoint, the BlackX UEFI bootkit exploits the Baton Drop flaw (CVE-2022-21894) to subvert Secure Boot, while the resurgent Stadia RAT utilizes a custom helper blob to bypass Google Chrome’s App-Bound Encryption.

3. Critical Edge Perimeter & Security Appliance Flaws

Perimeter gateways, firewalls, and deep packet inspection engines are experiencing sustained zero-day exploitation and memory corruption attacks.

• BeyondTrust & PAN-OS Active Exploitation — Threat actors are actively exploiting a zero-day in BeyondTrust Remote Support (CVE-2026-102764) via improper origin validation to deploy SAWFLY webshells and BARECLAW SOCKS5 tunnels. Simultaneously, Palo Alto GlobalProtect is seeing widespread exploitation (CVE-2026-0257) by ransomware groups forging authentication override cookies to bypass MFA.
• Fortinet Edge Exploitation ("k0t" Campaigns) — The "Stray Cat" cluster is actively exploiting vulnerabilities across FortiWeb (CVE-2025-64446) and FortiGate appliances, harvesting configurations and decrypting administrator secrets using default keys. Concurrently, a CVSS 9.8 unauthenticated gRPC path traversal zero-day (CVE-2026-106173) in FortiSIEM enables attackers to overwrite critical scripts for root RCE.
• Multi-Vendor Zero-Days (Citrix, Cisco, Splunk) — Critical infrastructure remains under heavy fire. Unpatched zero-days in Citrix NetScaler (CVE-2026-88771/2) are actively exploited via poisoned logs. Critical RCE updates were issued for clustered Cisco Expressway appliances (CVE-2026-76466), Splunk Enterprise, Arista VeloCloud, and the Linux kernel's KSMBD service.
• Okta Access Gateway & Cisco Snort 3 Flaws — A critical CVSS 9.1 command injection flaw in the Okta Access Gateway Admin Console (CVE-2026-115547) allows authenticated admins to execute arbitrary OS commands. Additionally, the Cisco Snort 3 detection engine suffers from a VBA decompression buffer overflow (CVE-2026-20218) allowing remote unauthenticated denial-of-service or potential code execution.

4. Application RCE & Core Framework Vulnerabilities

Core web runtimes and development platforms are exposing millions of servers to pre-authentication command execution and cache poisoning.

• PHP2Shell, Node2Shell & Application RCEs — Critical unauthenticated RCEs (CVE-2026-109618/19) in the PHP core are actively being targeted by Mirai-derived IoT botnets. In the Node.js ecosystem, a critical out-of-bounds write in the Brotli decoder (CVE-2026-111497) allows RCE on official builds. Additional RCE flaws were patched in Python's Pillow library and the OpenCode AI coding agent.
• Oracle, GitLab & Node.js Updates — Oracle's massive October 2026 Critical Patch Update addressed 1,295 flaws, including a CVSS 10.0 RCE in the E-Business Suite Workflow Mailer. GitLab resolved a 12-year-old unauthenticated regular expression compilation RCE (CVE-2026-110264, CVSS 10.0) in its Onigmo engine, and Node.js patched multiple TLS hostname validation bypasses.

Proactive Steps for the Week

• Audit Cryptographic Trust & Rebuild Applications: Immediately verify that no internal systems rely on certificates issued by the 8 blocked eMudhra intermediate CAs. Recompile and redeploy all Go-based applications using Go 1.27.3/1.26.10, update Linux ca-certificates, and apply Oracle Java/OpenJDK emergency patches to prevent MitM interception.
• Patch Perimeter & Deep Packet Engines: Upgrade BeyondTrust Remote Support, Palo Alto PAN-OS, FortiSIEM, and Cisco Expressway immediately. Isolate Citrix NetScaler instances affected by the unpatched zero-days, and update Okta Access Gateway (2026.10.2) and Cisco Snort 3 (3.12.4.0) to prevent identity boundary crossings.
• Harden Web Runtimes & Frameworks: Treat PHP2Shell as an emergency—upgrade to PHP 8.5.12 / 8.4.27 immediately. Rebuild Node.js container images to remediate the Brotli decoder flaw. Update GitLab Self-Managed instances to version 19.5.1 and apply Oracle’s October 2026 CPU.
• Defend Against Autonomous AI Agents: Restrict API key deployment to designated internal AI gateways. Monitor DNS and proxy telemetry for unexpected traffic to public LLM endpoints (e.g., DashScope, DeepSeek). Enforce strict mTLS and velocity limits on internal payment gateways to prevent CyberStrikeAI-driven financial fraud.
• Enforce UEFI DBX & Driver Blocklists: Apply the UEFI Secure Boot Forbidden Signature Database (DBX) updates manually or via policy to block the BlackX bootkit (CVE-2022-21894). Enable HVCI and the Microsoft Vulnerable Driver Blocklist to neutralize The Gentlemen's BYOVD EDR killers.