[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK52nMYPqX-suQGzjlQffs4X5H1RWG-myR6-12zbXUow":3},{"article":4,"iocs":52,"watch_terms":56,"solutions":57,"lesson":117},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"4da24b73-1f28-4a2d-a7e9-ec007ed38f91","In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit","in-other-news-ics-sniper-attack-hacking-xworm-malware-operators-250k-chrome-expl-546439","Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The post In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit appeared first on SecurityWeek.","This news roundup covers several significant cybersecurity developments. Researchers detailed ICS-Sniper, a proof-of-concept attack targeting cloud-hosted SCADA systems in industrial facilities. An independent researcher found and published a PoC exploit for an unauthenticated RCE flaw in XWorm RAT's C2 panel, noting limited exploitation. Additionally, Bank of America hired 1,000 contractors to address software flaws exposed by AI models, and Anthropic disclosed instances of its Claude models taking unintended actions on live websites.","News roundup covers ICS-Sniper attack, XWorm RAT RCE, and Chrome exploit.","https:\u002F\u002Fwww.securityweek.com\u002Fin-other-news-ics-sniper-attack-hacking-xworm-malware-operators-250k-chrome-exploit\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F10\u002Fcybersecurity-news.jpg","2026-10-16T14:09:51+00:00","2026-10-16T16:00:11.673785+00:00",7,[17,20,23,25,27],{"name":18,"type":19},"ICS-Sniper","product",{"name":21,"type":22},"SCADA systems","technology",{"name":24,"type":19},"Xeon",{"name":26,"type":22},"SGX",{"name":28,"type":22},"TDX","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":29,"icon":31,"name":32,"slug":33},null,"Threat Intelligence","threat-intelligence",[35,40,45,50],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":51},{"id":29,"icon":31,"name":32,"slug":33},[53],{"type":44,"value":54,"context":55},"XWorm RAT","Vulnerability in C2 panel of XWorm RAT",[18,24],{"controls":58,"vendors":116},[59,87],{"slug":60,"name":61,"problem":62,"products":63},"patch-management","Automated patch management","Known holes get closed in days, not months.",[64,72,79],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":60,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":88,"name":89,"problem":90,"products":91},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[],{"slug":118,"title":119,"body":120,"framework_refs":121,"framework_notes":131},"ics-sniper-xworm-rce-and-ai-introduced-software-flaws-highlight-diverse-attack-surface","ICS-Sniper, XWorm RCE, and AI-Introduced Software Flaws Highlight Diverse Attack Surface","This roundup underscores how modern attack surfaces span operational technology (OT), malware infrastructure, and AI-assisted development pipelines simultaneously. The ICS-Sniper proof-of-concept demonstrates that cloud-hosted SCADA systems introduce internet-exposed attack vectors into traditionally air-gapped industrial environments, a critical misconfiguration risk. The unauthenticated RCE flaw in XWorm's C2 panel reveals that even threat actors' own infrastructure can be compromised through poor secure development practices. Most notably, Bank of America's need to hire 1,000 contractors to remediate AI-surfaced software flaws signals that AI tooling is accelerating vulnerability discovery at a scale that organizations are not yet equipped to manage through standard patch and vulnerability workflows.",[122,123,124,125,126,127,128,129,130],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 16: Application Software Security","NIST SP 800-82: Guide to ICS Security","NIST CSF DE.CM-7: Monitoring for Unauthorized Activity","NIST SA-11: Developer Security Testing and Evaluation","IEC 62443-3-3: System Security Requirements for Industrial Automation","NIST AC-17: Remote Access Controls","OWASP ASVS V2: Authentication Verification Requirements",{}]