In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

2026-10-23T19:23:59Z•f2a87146a0b6b88b4937142634a01f9072dde4ead69f787efffc17d084516111
AI-assisted attacksASLR bypassArista VeloCloud OrchestratorAtlassianChina APTConnectWiseDockerIranian APTLiteLLMMirai botnetPHP2ShellPyPISQL injectionToractive exploitationdata breachhealthcare dataransomwaresupply chain compromisezero-day

What happened

SecurityWeek RSS roundup covering active exploitation and emerging threats, including Mirai-linked PHP2Shell attacks, a China-linked APT targeting ConnectWise with an AI penetration-testing tool, an exploited critical Arista VeloCloud Orchestrator SQL injection zero-day, major breaches at Capcom and Quest Diagnostics, a LiteLLM software supply-chain compromise, extensive Atlassian third-party vulnerability fixes, and Iranian APT infrastructure changes. The most urgent item is the actively exploited Arista VCO zero-day; other high-impact items involve privileged access, large-scale data theft,

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
f2a87146a0b6b88b4937142634a01f9072dde4ead69f787efffc17d084516111
Enrichment time
2026-10-23T19:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.