Identity Under Fire: Vishing via Teams, AI-Accelerated Intrusions, and Edge Device Exploitation
Attackers this week stopped trying to break through firewalls and instead simply called employees on Microsoft Teams, pretending to be IT support. The Spring Ring vishing campaign targeted over 150 employees across 10+ organizations, convincing them to install remote access tools that gave attackers full control of their computers. Microsoft separately documented Teams-based IT impersonation campaigns using Node.js implants and blockchain-based command infrastructure to maintain hidden persistence inside corporate networks. Attackers also proved they can now do in hours what used to take weeks. A Unit 42 investigation revealed an attacker using AI agents to map networks, steal credentials, and hijack cloud infrastructure in under 10 hours. Separately, Operation Bizarre Bazaar showed criminals stealing AWS keys to run expensive AI models at victim expense, costing over $46,000 per day. At the same time, actively exploited vulnerabilities in PaperCut print servers and SonicWall VPN appliances gave attackers direct paths through the perimeter. Organizations should immediately restrict external Microsoft Teams chat access, patch PaperCut and SonicWall devices, and hunt for unexpected Node.js processes on workstations.
Detection / Hunteropenrouter
By the Numbers
- Total articles: 51
- By severity: Critical: 8, High: 36, Low: 2, Medium: 5
- By category: APT: 1, general security news: 6, malware: 15, phishing/social engineering: 5, threat actor: 6, vulnerability: 18
Top Threats
Teams-Based Vishing and Identity Hijack Campaigns Break Through Human Firewall
Coordinated vishing operations abused Microsoft Teams external chat to impersonate IT help desk staff across 150+ employees in 10+ organizations, delivering PowerShell RATs and custom malware via tailored download links. The Spring Ring campaign and a separate Microsoft-documented intrusion both pivoted from social engineering to domain controller compromise using PetitPotam NTLM relay attacks and WinRM lateral movement. Defenders should hunt for rapid chat-to-call transitions from external .onmicrosoft.com tenants, unexpected RMM tool execution by non-technical users, and Node.js processes spawned by Windows Installer.
- https://unit42.paloaltonetworks.com/spring-ring-voice-phishing-campaigns/
- https://www.microsoft.com/en-us/security/blog/2026/09/02/impersonating-it-support-threat-actors-turn-remote-session-into-enterprise-wide-access/
- https://any.run/cybersecurity-blog/major-cyber-attacks-august-2026/
Actively Exploited Vulnerabilities in Perimeter and Print Infrastructure Accelerate Compromise
CISA added PaperCut NG/MF (CVE-2026-81578, CVE-2026-82078) and SonicWall SMA1000 (CVE-2026-83548, CVE-2026-83549) to the Known Exploited Vulnerabilities Catalog this week, with Huntress confirming exploitation completing in under two minutes. ServiceNow patched three CVSS 10.0 vulnerabilities in its AI Platform enabling unauthenticated code injection and SQL injection, while approximately 22,000 Microsoft Exchange servers remain unpatched against CVE-2026-62911 with public exploit code available. The common thread: attackers are chaining authentication bypass and code execution flaws in perimeter-exposed systems to skip credential theft entirely.
- https://research.checkpoint.com/2026/31th-august-threat-intelligence-report/
- https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog
- https://www.huntress.com/blog/papercut-actively-exploited
- https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog
- https://cyber.gc.ca/en/daily-digest/2026-09-02
- https://www.sophos.com/en-us/blog/sonicwall-83548-83549
- https://www.zscaler.com/blogs/security-research/microsoft-exchange-vulnerability-cve-2026-62911-what-administrators-should
- https://www.cisa.gov/news-events/alerts/2026/09/04/cisa-adds-one-known-exploited-vulnerability-catalog
- https://cyber.gc.ca/en/daily-digest/2026-09-04
AI as Attack Accelerant: Agentic Intrusions and Stolen Cloud AI Resources
A Unit 42 investigation documented an attacker using frontier AI models and agentic frameworks to compress weeks of intrusion tradecraft into under 10 hours, mapping microservices, harvesting secrets, and hijacking CI/CD pipelines autonomously. Separately, Operation Bizarre Bazaar cataloged 35,000+ sessions of criminals reselling access to stolen LLM subscriptions via Telegram and Discord, costing victims over $46,000 daily in cloud compute charges. The BREEZE COMET financial crime group and Latin American threat clusters are also actively using LLMs to generate reconnaissance scripts and compress development cycles for custom malware.
- https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/
- https://www.fortinet.com/blog/threat-research/someone-else-is-using-your-ai
- https://cloud.google.com/blog/topics/threat-intelligence/financially-motivated-threat-actor-breeze-comet-targets-brazil/
- https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs/
- https://www.microsoft.com/en-us/security/blog/2026/09/03/ascii-smuggling-crosses-over-from-ai-prompt-injection-to-phishing-evasion/
Trusted Software Distribution Channels Deliver Spyware and RATs to Developers and End Users
The ongoing Shai-Hulud worm campaign continues self-propagating through npm and PyPI by compromising trusted maintainer accounts, producing signed packages that execute malicious payloads at install time inside developer environments. Thirteen malicious Packagist themes delivered iOS spyware exploiting a WebKit-to-kernel chain (CVE-2025-31277, CVE-2025-43529) to steal cryptocurrency wallet seeds from unpatched iPhones, while a tampered Exodus wallet installer deployed a memory-resident modular RAT using Azure Table Storage as a dead-drop C2. The Silver Fox campaign distributed counterfeit software installers across Chinese-speaking users, disabling Defender and deleting shadow copies before establishing scheduled task persistence.
- https://www.morphisec.com/blog/signed-sealed-compromised-why-trusted-packages-are-now-a-ransomware-delivery-vector/
- https://socket.dev/blog/packagist-themes-ios-spyware
- https://www.huntress.com/blog/exodus-crypto-wallet-installer-rat
- https://www.microsoft.com/en-us/security/blog/2026/09/01/counterfeit-installers-system-compromise-tracking-deceptive-software-download-campaign/
- https://securelist.com/valleyrat-backdoor-adware/121175/
- https://research.checkpoint.com/2026/breaking-the-seal-static-deobfuscation-of-jsceals-compiled-v8-bytecode/
- https://asec.ahnlab.com/en/95211/
ICS/OT Vulnerability Cluster Exposes Critical Manufacturing and Energy Systems
CISA issued advisories for multiple Rockwell Automation products including ControlLogix, CompactLogix, RSLinx Classic, and FactoryTalk Historian, alongside critical vulnerabilities in Pyramid Solutions NetStaX EtherNet/IP Stack (CVE-2026-78012, CVSS 9.8) and Tycon Systems power management devices shipping without default credentials. Inductive Automation Ignition shipped with a blank default role configuration permitting any authenticated user to create projects. Several of these flaws require only network access to trigger denial-of-service conditions or remote code execution on devices deployed across manufacturing, energy, water, and chemical sectors worldwide.
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-05
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-06
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-06
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-07
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-05
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08
Trending CVEs
- CVE-2026-81578 (3 mentions) — PaperCut NG/MF authentication bypass actively exploited in the wild; chained with CVE-2026-82078 for unauthenticated remote code execution. Sources: 1, 2, 3
- CVE-2026-82078 (3 mentions) — PaperCut NG/MF unsafe class loading enabling unauthenticated RCE when chained with CVE-2026-81578; CISA KEV listed, exploitation observed completing in under two minutes. Sources: 1, 2, 3
- CVE-2026-83548 (3 mentions) — Critical CVSS 10.0 unauthenticated SSRF in SonicWall SMA1000 Appliance Work Place interface, actively exploited in the wild. Sources: 1, 2, 3
- CVE-2026-83549 (3 mentions) — High-severity OS command injection in SonicWall SMA1000 Appliance Management Console requiring authenticated admin access, actively exploited. Sources: 1, 2, 3
- CVE-2026-85046 (2 mentions) — Type confusion vulnerability in Google Chromium V8 engine actively exploited in the wild; added to CISA KEV catalog. Sources: 1, 2
- CVE-2026-82329 (2 mentions) — Improper authentication vulnerability in JFrog Artifactory actively exploited across multiple version branches prior to 7.161.20. Sources: 1, 2
- CVE-2026-62911 (1 mentions) — Microsoft Exchange Server authentication bypass with public exploit code available; approximately 22,000 servers remain unpatched and internet-exposed. Sources: 1
- CVE-2026-19490 (1 mentions) — Citrix NetScaler ADC/Gateway authentication bypass allowing remote unauthenticated attackers to circumvent authentication on Gateway or AAA virtual servers. Sources: 1
- CVE-2026-75604 (1 mentions) — Critical Windows-specific path traversal in Next.js (Vercel) enabling unauthenticated remote code execution under affected configurations. Sources: 1
- CVE-2026-18885 (1 mentions) — CVSS 10.0 code injection vulnerability in ServiceNow AI Platform allowing unauthenticated attackers to execute code. Sources: 1
- CVE-2026-78012 (1 mentions) — Critical CVSS 9.8 stack-based buffer overflow in Pyramid Solutions NetStaX EtherNet/IP Stack allowing memory corruption or device crash via oversized Class 3 messages. Sources: 1
- CVE-2026-33017 (1 mentions) — Langflow remote code execution via /api/v1/validate/code endpoint exploited by a Go-based IoT botnet for self-propagation. Sources: 1
- CVE-2024-55591 (2 mentions) — Recurring FortiGate firewall management interface vulnerability exploited by The Gentlemen RaaS affiliates for initial access to victim environments. Sources: 1, 2
Sector Trends
- Critical Infrastructure / ICS Manufacturing — Eight CISA ICS advisories this week covered Rockwell Automation controllers, RSLinx Classic, FactoryTalk Historian, Pyramid Solutions EtherNet/IP stack, Tycon Systems power management devices, and Inductive Automation Ignition — collectively exposing manufacturing, energy, water, and chemical sectors to denial-of-service and remote code execution from network-adjacent attackers. Sources: 1, 2, 3, 4, 5, 6, 7, 8
- Financial Services — BREEZE COMET targeted Brazilian payment infrastructure including Pix, STR, and Boleto systems using custom multi-language malware and LLM-generated scripts, while ShinyHunters used vishing to compromise Okta accounts at McKesson and exfiltrate 284 million patient-related records from Salesforce and Snowflake. Sources: 1, 2
- Government — Earth Berberoka compromised Brazilian government web servers with custom Apache modules to serve phishing content via SEO poisoning, while QTFY operated QScan and QTRouter platforms targeting U.S. federal infrastructure including NASA, the Federal Reserve, and the Department of Energy. Separately, hundreds of university and government websites remain hijacked to redirect to fake software stores. Sources: 1, 2, 3, 4
- Technology / Software Development — The continuing Shai-Hulud worm campaign and malicious Packagist themes demonstrate that package ecosystems remain a primary attack vector, with signed packages inheriting maintainer trust to execute payloads at install time. Recorded Future's H1 2026 trends report confirmed 215 actively exploited CVEs and widespread supply-chain abuse via npm lifecycle scripts targeting AI-enabled tooling. Sources: 1, 2, 3
Notable Incidents
- ShinyHunters Vishing Attack Compromises 284 Million Patient Records at McKesson — Attackers used phone-based social engineering to compromise Okta accounts, accessing Salesforce and Snowflake to exfiltrate approximately 1TB of healthcare data — one of the largest patient data breaches on record.
- CrowdStrike Disrupts 20-Year-Old Sality Botnet — Rare operational takedown of a decades-old P2P botnet through peer list manipulation and sinkholing, providing defenders with lighthouse IP indicators for infected machine identification.
- PaperCut Exploitation Completes in Under Two Minutes — Huntress observed the CVE-2026-81578/CVE-2026-82078 exploit chain executing in under two minutes, with 47% of tracked PaperCut installations running vulnerable versions with no patch available.
- 22,000 Microsoft Exchange Servers Unpatched with Public Exploit Code — CVE-2026-62911 authentication bypass has working exploit code publicly available, yet approximately 22,000 internet-exposed Exchange servers remain unpatched as of September 1.
- AI Agents Compress Weeks of Intrusion Tradecraft into 10 Hours — First detailed public account of an attacker using agentic AI frameworks to autonomously map networks, harvest secrets, and hijack CI/CD pipelines, demonstrating machine-speed offensive operations.