Blog

Executive Sumamary CrowdStrike reported a VAPOR PANDA campaign that used ARTEX alongside the Chinese-developed DeepSeek LLM and a second commercial LLM to run intrusions against multiple high-value targets in parallel. Starting 17 October2026, the adversary used ARTEX against more than 200 distinct organizations worldwide, including foreign ministries, semiconductor, defense, and think tank organizations in the…

Executive Summary On 02 November 2026, reports emerged on social media of renewed cyberattacks against refrigeration units in European grocery operations: According to GeoInsider: “🇸🇪 Swedish grocery giant ICA, one of Sweden’s largest supermarket chains, says several of its stores have been hit by a cyberattack overnight, causing refrigerators and freezers to be remotely set…

Executive Summary On 29 October 2026, Cisco Talos Intelligence identified NIK C2, a Go-based Windows command-and-control framework that combines credential theft, surveillance, remote access, lateral movement, defense evasion, and screen-locking ransomware capabilities within a single implant, which can utilize OpenAI capabilities. The malware integrates the OpenAI Chat Completions API through an ai_generate command, allowing operators…

Executive Summary On 29 October 2026, the official Anthropic Claude Code extension was compromised on the Cursor Marketplace and used to install a persistent SSH backdoor on infected hosts.  The issue was traced to a compromise of the Cursor Marketplace, and Cursor briefly took down the service to remove the malware. Cursor says the incident…

Executive Summary CISA added the critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities (KEV) Catalog following confirmation of in-the-wild exploitation. In-the-wild RCE was confirmed after honeypot activity recorded successful exploitation against an Apache mod_php installation running PHP 8.4.26. This represents an escalation from earlier reporting in which Cloudflare, Amazon, Hadrian, watchTowr, Previdian,…