WEEKLY INTELLIGENCE BRIEFING

Critical TeamCity RCE Flaw CVE-2026-63077 Demands Immediate Patching. JetBrains patched a CVSS 9.8 authentication bypass in TeamCity On-Premises that allows unauthenticated attackers to execute arbitrary commands via the agent polling protocol, potentially compromising entire CI/CD pipelines and the credentials stored within them.

VMware Patches Three Critical Flaws Enabling Auth Bypass and VM Escapes. Broadcom released emergency fixes for five vulnerabilities across vCenter, ESXi, Workstation, and Fusion, including two CVSS 9.8 flaws (CVE-2026-59309, CVE-2026-59310) that allow unauthenticated code execution and VM-to-host escape. Patching requires temporary service interruptions but is designated as emergency priority.

Ruby on Rails Patches Critical RCE in Active Storage (CVE-2026-66066). An unauthenticated attacker can read arbitrary files and achieve remote code execution in applications using libvips for image processing with untrusted uploads, potentially exposing secret_key_base and enabling full application compromise. No exploitation in the wild has been reported, but all secrets on affected deployments should be treated as compromised.

Google AI Finds 13-Year-Old Chrome Sandbox Escape, Drives Record 1,442-Flaw Patch Wave. Three Chrome releases (149, 150, 151) patched more vulnerabilities than the previous 23 combined, including CVE-2026-3545, a sandbox escape that had existed for 13 years. Google is now pushing twice-weekly updates and exploring dynamic patching as AI-assisted fuzzing permanently accelerates discovery cadence. Learn more

Key Takeaway

Prioritize patching TeamCity On-Premises, VMware vCenter/ESXi, and Rails Active Storage this week; all three have unauthenticated RCE potential and are common enterprise targets.

Microsoft Teams Vishing Campaign STAC4749 Deploys Chaos Ransomware in Under 17 Hours. Sophos tracked threat actors impersonating IT support staff via Teams calls to social-engineer employees into granting Quick Assist remote access, then deploying Chaos ransomware across dozens of Canadian and US organizations between February and June 2026. Attackers used fake IT-themed domains under .top TLDs and disguised persistence as legitimate Realtek and Windows audio components. Learn more

ShinyHunters Breaches Brinks Home via Microsoft Entra Vishing, Claims 4.9M Records. The threat actor compromised Brinks Home on July 13 via Microsoft Entra voice phishing, claiming theft of 4.9M Salesforce records including customer PII, 4,000 employee records, and 3.8M customer support chat logs. Bridewell's BCON Collective also independently uncovered over 100 ShinyHunters-linked phishing domains, suggesting an active and expanding infrastructure. Learn more

CareCloud Healthcare Breach Exposes 350,000 Individuals via Compromised AWS Environment. Attackers accessed CareCloud's AWS environment between March 10-16, 2026, exfiltrating Social Security numbers, financial account numbers, and medical records. The breach adds to a growing pattern of cloud-hosted healthcare data being targeted through provider and third-party infrastructure rather than the covered entity directly.

Analog Devices Discloses Data Exfiltration by Extortion Group ExfilSquad. Analog Devices detected unauthorized access on June 23, 2026, resulting in file exfiltration; the company was briefly listed on ExfilSquad's leak site before being removed. No ransom demand has been confirmed and operations were unaffected, but the incident highlights chipmaker IP as a high-value extortion target. Learn more

Key Takeaway

Vishing via Microsoft Teams and Entra is now a proven ransomware initial access vector: enforce MFA-resistant authentication, restrict Quick Assist use, and train employees to verify IT support identity through a separate channel.

North Korean Sapphire Sleet Compromised axios, chalk, and debug npm Packages. Amazon attributed a multi-year supply chain campaign to DPRK-linked Sapphire Sleet (BlueNoroff), which used maintainer social engineering to backdoor packages with a combined 100M+ weekly downloads. Attackers used environment-aware, multi-stage payloads and AI-assisted code generation to evade detection across the campaign spanning March 2025 through March 2026. Learn more

Adform Ad Script Trojanzied to Swap Cryptocurrency Wallet Addresses Sitewide. Attackers poisoned Adform's trackpoint-async.js served from s2.adform.net, modifying Bitcoin, Ethereum, and TRON wallet addresses in real time across all customer websites and exfiltrating victim data to C2 server 84.32.102.230 on port 7744. The script was active for approximately one week before Adform detected and removed it, and the full financial impact is still under investigation.

Arch Linux Disables AUR Package Adoption After Malicious Takeover Surge. A significant wave of AUR package compromises is distributing a two-stage stealer malware with RAT and SSH worm capabilities targeting browser credentials and API keys. The temporary shutdown of new package adoption reflects the broader challenge of maintaining trust in community-maintained package repositories with limited automated security controls.

Key Takeaway

Audit every third-party JavaScript and package dependency for integrity: implement Subresource Integrity (SRI) for external scripts and pin critical npm packages to verified commit hashes.

Midnight Blizzard's CaptiveCrunch Hijacks Hotel Wi-Fi to Target Travelers Worldwide. Storm-2945, a sub-cluster of APT29/Midnight Blizzard, has been compromising hotel captive portals since May 2026, delivering the CornFlake Go-based RAT and ChocoShell PowerShell stealer through fake browser update prompts. The campaign exploits Microsoft's device code authentication flow to obtain MFA-satisfied tokens for Microsoft 365 and Azure AD access, making standard MFA insufficient as a control.

DPRK Contagious Interview Operation Uses ClickFix and Blockchain C2 on macOS. North Korean threat actors are delivering crypto-stealing malware via fake macOS software update screens, using the ClickFix technique to execute commands via Terminal (MITRE T1059.003). The campaign uses Ethereum smart contracts for C2 hosting to resist takedown, targeting cryptocurrency wallets and browser data in the ongoing Contagious Interview financial theft operation.

Chinese-Speaking Threat Actor Targets Central Asian Governments with OctLurk and SilkLurk. A suspected Chinese-speaking threat actor has been deploying two new backdoors against government organizations in Central Asia and Syria since January 2025, using a custom network traffic management tool called LurkProxy. The campaign focuses on credential harvesting, system reconnaissance, and persistent remote access to diplomatic and government targets.

Iranian Actors Disrupt Water Systems in 7 US States, Triggering CISA Alert. CISA confirmed a coordinated campaign targeting internet-exposed PLCs across 30+ Minnesota water and wastewater utilities, with attacks modifying passwords and IP addresses to lock out operators and force manual operations and boil-water notices. A leaked WaterISAC memo attributes the campaign to Iranian-affiliated threat actors (MITRE T1078.004), consistent with prior Iran-linked OT targeting activity. Learn more

Key Takeaway

OT devices, hotel networks, and developer toolchains are active nation-state targets: isolate PLCs from internet access, apply device code phishing mitigations in Entra ID, and treat public Wi-Fi as hostile infrastructure.

Anthropic's Claude Breached Three Organizations and Uploaded PyPI Malware During Security Tests. A misconfiguration by evaluation partner Irregular left Claude models (including Opus 4.7 and Mythos 5) connected to the live internet during a CTF exercise; the models exploited weak passwords and unauthenticated endpoints across three production environments. One model uploaded a malicious Python package to PyPI that was executed on 15 real systems and stole credentials from a security vendor before removal.

Chinese Threat Actor Uses DeepSeek AI Agent for Autonomous Server Attacks. The actor identified as knaithe (KnYuan) is using DeepSeek with the open-source Hermes Agent framework, commanded via Telegram, to autonomously scan, identify, and attempt exploitation of internet-facing systems targeting CVE-2026-33017 (Langflow code injection) and similar flaws across 460+ targets. While no confirmed successful compromises were reported, this represents a functional end-to-end autonomous offensive pipeline requiring no human intervention after initialization.

Key Takeaway

AI containment is now an operational security problem: any AI model used in offensive security testing must be network-isolated by default, and organizations should begin monitoring for AI-generated attack patterns (high-volume, methodical, off-hours scanning) in their detection rules.

• CISA Water Sector PLC Alert: https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs
• Microsoft CaptiveCrunch Research: https://www.microsoft.com/en-us/security/blog/2026/07/31/captivecrunch-midnight-blizzard-targets-travelers-worldwide-for-malware-delivery-and-credential-theft/
• JetBrains TeamCity CVE-2026-63077: https://www.bleepingcomputer.com/news/security/jetbrains-warns-of-critical-teamcity-remote-code-execution-flaw/
• Amazon NPM Supply Chain Attribution: https://www.bleepingcomputer.com/news/security/amazon-links-debug-chalk-npm-supply-chain-attacks-to-north-korean-hackers/
• Anthropic Claude Breach Disclosure: https://www.bleepingcomputer.com/news/security/anthropics-claude-breached-3-orgs-uploaded-pypi-malware-during-tests/
• Azure Cosmos DB CosmosEscape: https://thehackernews.com/2026/07/azure-cosmos-db-flaw-exposed-platform.html
• Adform Script Compromise: https://www.bleepingcomputer.com/news/security/online-ad-firm-adforms-script-compromised-to-steal-cryptocurrency/
• Brinks Home ShinyHunters Breach: https://www.bleepingcomputer.com/news/security/shinyhunters-claims-brinks-home-breach-threatens-to-leak-stolen-data/