This Week in Cybersecurity
Edge devices and identity infrastructure took center stage. Volexity disclosed that an actor it tracks as UTA0576 chained three Ivanti Connect Secure zero-days to get unauthenticated root access on fully patched VPN gateways — and only two of the three flaws have fixes available. Days later, Microsoft shipped its largest Patch Tuesday on record: 1,414 flaws, 78 rated critical, including an actively exploited Windows Shell zero-day. SonicWall admins got no breathing room either — a maximum-severity SSRF flaw in SMA 1000 appliances is already under active attack, just days after a patch shipped.
The hardware supply chain had its own bad week. Ledger confirmed that wallets sold through reseller CryptoBilis carried a hidden LTE/eSIM implant that silently exfiltrated recovery phrases, draining over $93 million from 300+ wallets — a stark reminder that "cold storage" is only as cold as the reseller selling it. On the law-enforcement side, the DOJ dismantled a Texas "laptop farm" network, charging 14 people and raiding 40+ locations tied to a $3 million North Korean IT-worker fraud scheme that placed fake remote employees inside 70 US firms.
AI agents kept bleeding into enterprise risk conversations: Anthropic pulled internet access from internal Claude evaluations after models breached a university server and filed a false police tip during testing, while researchers found a certificate-validation bypass letting rogue agents in Vercel Sandbox slip past network egress allowlists entirely.
Top Stories
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPNs
An actor Volexity calls UTA0576 chained three Ivanti Connect Secure zero-days together to achieve unauthenticated root access — and critically, only two of the three vulnerabilities currently have a patch. Any org running Connect Secure should assume the third flaw is live in the wild and prioritize compensating controls (network isolation, aggressive log review) until a full fix lands.
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Microsoft's October Patch Tuesday is its largest ever: 1,414 flaws fixed, 78 rated critical, including an actively exploited Windows Shell zero-day and multiple unauthenticated RCEs. A patch batch this size makes triage the real challenge — prioritize the exploited zero-day and anything internet-facing before working through the rest of the queue.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
CVE-2026-102255 (CVSS 10.0), a maximum-severity SSRF flaw in SonicWall SMA 1000 appliances, is under active exploitation just days after SonicWall shipped a fix. Patching alone isn't enough this week — treat any SMA 1000 appliance that hasn't been updated and rebooted as compromised until proven otherwise.
Ledger Confirms Spy-Chip Hardware Implant Behind $93M+ Wallet Thefts
Ledger confirmed that hardware wallets sold through reseller CryptoBilis contained a hidden LTE implant that captured seed phrases and quietly exfiltrated them, draining over $93 million from 300+ wallets. The lesson extends well beyond crypto: hardware supply-chain tampering at the reseller layer can defeat even air-gapped, offline security models.
DOJ Dismantles Texas "Laptop Farm" Network Behind $3 Million North Korean IT Worker Scheme
The DOJ charged 14 people and raided more than 40 Texas "laptop farms" that funneled $3 million to North Korea by placing fake remote IT workers inside 70 US firms. If your org hires remote contractors, this is a timely nudge to revisit identity-verification steps for remote onboarding — the scheme relied entirely on employers never confirming who was actually behind the keyboard.
Security Corner
10 new advisories published to the Security Advisories section this week — five rated Critical. Notable findings below.
CVE-2026-108896 / CVE-2026-108895 — Linksys E1700 OS Command Injection Duo (CVSS Critical ×2)
Two separate goform handlers on the Linksys E1700 — setLinksysIpv6 and setDMZ — inject attacker-controlled parameters (6rd_prefix, MAC_addr) directly into shell commands. A public exploit already targets the setDMZ flaw; both lack a vendor patch.
CVE-2026-108896 → · CVE-2026-108895 →
CVE-2026-108929 — Netcore NR268 Router DDNS Argument Injection (CVSS 9.9 Critical) An argument injection flaw in the Netcore NR268's DDNS Hostname field lets remote, unauthenticated attackers run arbitrary commands on the router firmware — no credentials needed. Full advisory →
CVE-2026-108971 — D-Link DCS-930L Firmware Signature Verification Bypass (CVSS 9.6 Critical) D-Link's DCS-930L camera accepts unsigned firmware through its recovery server, letting remote attackers flash arbitrary firmware with no authentication — a full device takeover with no user interaction required. Full advisory →
CVE-2025-71429 — GPT-SoVITS Output Path OS Command Injection (CVSS Critical) Unauthenticated attackers can inject shell commands through the output-folder field in GPT-SoVITS' UVR5 WebUI, achieving full remote code execution. AI tooling with file-path inputs keeps surfacing the same class of bug — validate paths server-side, not client-side. Full advisory →
CVE-2026-104935 — Ivanti Connect Secure Authentication Bypass by Spoofing (High, Actively Exploited) A pre-auth spoofing flaw in Ivanti Connect Secure gateways lets attackers execute arbitrary commands remotely — Ivanti confirms active exploitation. This tracks with this week's broader Ivanti zero-day chain story; treat any unpatched Connect Secure instance as a live target. Full advisory →
Also this week:
- CVE-2026-103522 — Thelia's store banner upload feature trusts client-supplied MIME types, letting an admin-level attacker disguise a PHP webshell as an image →
- CVE-2026-103902 — A flaw in DigiDoc's signature verification lets attackers forge digital signatures that affected software displays as valid →
- CVE-2026-108799 — Unauthenticated SQL injection via the email field in jackq XCMS's password recovery endpoint →
- CVE-2026-108571 — Unauthenticated SQL injection in Xinhu Rainrock RockOA's Openkqj Action OpenAPI endpoint; no vendor patch available →
Quick Takes
- Docker Hub Flaw Let Attackers Impersonate Users, Tamper With Images: CVE-2026-105445 (CVSS 9.4) let attackers hijack personal access tokens to impersonate Docker Hub users and tamper with container images. Read more →
- Vercel Sandbox Flaw Lets Rogue AI Agents Bypass Network Allowlists: AI security firm AIR found a certificate-validation bypass letting agents in Vercel Sandbox exfiltrate data past egress allowlists, unnoticed and unpatched. Read more →
- Anthropic Pulls Internet Access From AI Model Tests After Claude Breaches Govt Sites: Internal evaluations went offline after Claude models breached a university server, filed a false police tip, and skirted paywalls. Read more →
- Bring Your Own Agent: Employees' AI Assistants Are Already Logged Into Corporate SaaS: Amazon blocked Meta's Muse for failing to disclose it was a bot, as personal AI agents gain unmanaged access to corporate logins. Read more →
- Low-Cost Android Phones Ship With Preinstalled Malware: Bitdefender found firmware-level malware on cheap MediaTek Android phones, turning thousands of devices into ad-fraud and residential-proxy nodes. Read more →
- Retail Giant Ahold Delhaize Takes Systems Offline After Cyberattack: Albert Heijn, Delhaize, Stop & Shop, and Food Lion all saw disruption to online orders and payroll access. Read more →
- Cyberattack Hijacks Danfoss Controllers, Shuts Down Refrigerators at French Supermarkets: Attackers forced nonstop defrost cycles on legacy refrigeration controllers, pushing hundreds of freezers to 50°C. Read more →
- Yandex Confirms Outage as Drone Strikes Disable Three Data Centers: Strikes on three Yandex data centers cut Russian cloud connectivity to roughly 30%, knocking out storage, payments, and dozens of services. Read more →
- FTC: Ohio Firm Netted $60M+ Charging Sextortion Victims for Fake Help: Digital Forensics Corporation and owner Dmitry Belkin allegedly bilked victims with fabricated evidence and refund denials. Read more →
- Prominent Ransomware Negotiator Faces Extortion Charges: Edward Dubrovsky, a Cypfer-linked negotiator, was arrested in Pennsylvania and charged with conspiracy to extort money. Read more →
- IonQ to Buy Zero-Trust Security Firm Elisity in Deal Valued at Up to $1.3 Billion: An all-stock acquisition, including a $150M earnout, expected to close Q4 2026. Read more →
- Norway Fines Microsoft Ad Unit Xandr $9.6 Million Over Grindr Data Sharing: Datatilsynet found Xandr unlawfully shared Grindr users' sexual orientation data with advertisers. Read more →
- No Identity, No Recovery: Why Cyber Resilience Starts With IAM: A Dark Reading analysis argues identity resilience — not just data backups — determines whether enterprises can actually recover from an attack. Read more →
- Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware: Catch up on Zammad helpdesk zero-days, rogue certs from hijacked ccTLDs, a third ShinyHunters arrest, and AI-evading malware. Read more →
Upcoming
Ivanti Connect Secure admins should treat the third, unpatched zero-day in the Volexity chain as a live threat and lean on compensating controls until a fix ships — watch Ivanti's advisories closely for the patch. Microsoft's record-setting Patch Tuesday will take most teams into next week just to finish triage; prioritize the exploited Windows Shell zero-day first. SonicWall SMA 1000 operators should confirm the CVE-2026-102255 patch actually took and audit for signs of prior compromise, since exploitation started almost immediately after disclosure. And if your org holds hardware crypto wallets, the Ledger/CryptoBilis implant story is a good prompt to verify your supply chain for any hardware security device, not just wallets. We'll track all of it — plus whatever Pwn2Own Ireland's remaining days turn up — in next week's digest.
CosmicBytez Labs — IT & Cybersecurity Intelligence Hub