Open Cyber Threat Intelligence

Attackers are actively validating stolen AWS credentials to identify those with access to Amazon Bedrock, a managed service for foundation models. Credential harvesting platforms like KMON_NOC and other tools test stolen keys by calling AWS STS GetCallerIdentity, then probe for Bedrock access using ListFoundationModels and Converse API calls. These tools also extract Bedrock-specific bearer tokens and assess financial value by checking promotional credits. Two Python scripts identified on VirusTotal perform similar validation and enumeration, indicating a growing trend in 'LLMjacking' where attackers monetize access to AI models. Defenders are advised to monitor for suspicious Bedrock API activity as early detection can prevent financial abuse.

CVE-2026-118383 is a critical use-after-free vulnerability in MongoDB Server's primary catch-up process, with a CVSS v4.0 score of 9.5. It affects replica set members, including those in sharded clusters, but not standalone instances. An unauthenticated remote attacker can trigger a denial-of-service condition by sending two ping requests with a readConcern.afterOpTime parameter before an election, leading to a segmentation fault when the member becomes primary and completes catch-up. While arbitrary code execution is theoretically possible under certain conditions, it was not demonstrated in testing. The vulnerability can be mitigated by upgrading to a fixed MongoDB version or restricting network access to MongoDB instances.

A critical remote code execution (RCE) vulnerability, CVE-2026-119618, has been identified in the HTTP/2 module (mod_http2) of Apache HTTP Server. The flaw arises from a race condition in the assign_headers() function, which can lead to heap memory corruption when handling concurrent requests. Although no active exploitation has been observed, unauthenticated remote attackers could exploit this vulnerability to execute arbitrary code with web server privileges. The vulnerability affects Apache HTTP Server versions 2.4.55 through 2.4.70 and mod_h2 module versions 2.0.8 through 2.0.42.

Unit 42 identified Falcon (aka XG or Xiàng Gē), a browser-based command and control (C2) framework that compromises victims by injecting malicious JavaScript into webmail portals and government websites. The framework enables attackers to steal session cookies, passwords, emails, and other sensitive data, and to deploy a malicious browser extension for persistent access. Falcon has been used in targeted campaigns against government entities in one Middle Eastern and four Southeast Asian countries, with objectives aligned to strategic intelligence collection. A secondary Rust-based implant named Antino, which uses Microsoft OneDrive for C2, was also deployed in some attacks.

In Q3 2026, Cisco Talos observed increased ransomware activity, accounting for 27% of incident response engagements, with threat actors leveraging vishing attacks and IT help desk impersonation to gain initial access. A new ransomware variant, VYPR, was identified, showing operational immaturity and reliance on leaked Conti source code. Threat actors exploited public-facing applications, particularly targeting edge devices, and used CVE-2023-20198 to gain access in cyber espionage campaigns. Living-off-the-land tactics were prevalent, with adversaries creating privileged accounts, disabling logging, and manipulating configurations to maintain stealthy persistence. The financial and public administration sectors were most targeted, while healthcare dropped to third place.

In October 2026, Railway suffered a data breach in which an attacker exploited a previously unknown flaw in its build system to escape filesystem isolation and obtain internal credentials. Using these, the attacker accessed a production database and decrypted environment variables from approximately 100,000 workspaces, specifically targeting AI provider API keys. The stolen keys were used to generate an estimated $740,000 in unauthorized AI service usage. The attacker also obtained GitHub OAuth tokens and cloud credentials, though no customer database access or code repository exfiltration was confirmed. Railway has taken responsibility for covering costs where providers do not issue refunds and has since hardened its systems, including isolating builds in short-lived VMs and rotating all potentially exposed credentials.

Microsoft released patches for 1,259 vulnerabilities, including an actively exploited Moderate-severity flaw in Microsoft Outlook (CVE-2026-124194) that allows spoofing and potential exposure of NTLMv2 hashes. An unauthenticated attacker can send a specially crafted message file that, when opened, causes Outlook to connect to an attacker-controlled network location without warning, potentially disclosing authentication credentials. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by November 24, 2026. Other notable vulnerabilities include remote code execution flaws in Windows Search, LDAP, Schannel, and Windows Xbox Live Networking Service, as well as a privilege escalation flaw in Azure OpenAI.

eMudhra revoked 8 additional intermediate certificate authorities (CAs) due to a flawed internal Python script used during a key ceremony on April 30, 2025. The script improperly handled private keys by extracting them from hardware security modules (HSMs) into memory and, in the case of ECDSA keys, truncating them to a single byte, resulting in weakened cryptographic strength. Although the RSA keys were not truncated, their private components were exposed in memory, violating internal control policies and preventing eMudhra from proving compliance with its own certificate practice statement. The company had previously declared these CAs unaffected but reversed course after further review, ultimately revoking them due to inability to demonstrate proper key handling, with no known exploitation reported.

Cybersecurity researchers have identified malicious use of the AI-driven penetration testing platform AntiFox, which has been leveraged in attacks to steal AWS credentials and access production secrets from compromised environments. The attacks begin with exploitation of internet-facing IIS applications, leading to the deployment of ASPX web shells via the w3wp.exe process, enabling command execution and credential harvesting. The threat actors then abuse valid AWS IAM identities to enumerate and access cloud services including S3, Secrets Manager, and EC2, with confirmed successful GetSecretValue calls retrieving production secrets. The campaign highlights the growing abuse of autonomous AI-powered pentesting tools like AntiFox and ARTEX by threat actors to conduct rapid, scalable attacks with minimal human intervention.

Zoom has patched two security vulnerabilities in Zoom Workplace for Windows that could allow unauthenticated remote privilege escalation. The critical flaw, CVE-2026-108186, stems from improper input validation and affects versions from 7.1.0 to before 7.1.8. The second vulnerability, CVE-2026-108187, involves origin validation and impacts versions prior to 7.1.5. Exploitation could enable attackers to escalate privileges without authentication, though there is no evidence of in-the-wild exploitation to date.