Weekly Cybersecurity Recap: Exchange and Cisco Flaws Exploited, npm Worm Spreads
Summary
The weekly roundup covers active exploitation of Exchange and Cisco flaws, TeamPCP-linked npm supply-chain attacks, a fake Hugging Face stealer repository, Instructure’s reported ransom agreement with ShinyHunters, and AI-assisted vulnerability discovery.
Key points
- Microsoft reported active exploitation of CVE-2026-42897 in on-premises Exchange Server; it offered a temporary mitigation while preparing a permanent fix. The actor, targets, and attack success remain unknown.
- Cisco Talos attributed exploitation of Cisco Catalyst SD-WAN Controller flaw CVE-2026-20182 to UAT-8616, which reportedly attempted to add SSH keys, alter NETCONF settings, and escalate privileges.
- TeamPCP-linked attacks compromised TanStack npm packages and spread to related developer ecosystems, reportedly seeking credentials and secrets for cloud access and follow-on attacks.
- A fake Hugging Face repository impersonating OpenAI’s Privacy Filter model distributed a Rust-based information stealer; Hugging Face disabled access to the repository.
- Instructure said it reached an agreement with ShinyHunters after a data theft incident. The group claimed the data was deleted, but the article notes there is no guarantee copies were not retained or shared.
- OpenAI’s Daybreak and Microsoft’s MDASH were presented as AI-assisted vulnerability discovery initiatives; the roundup also reported broader concerns about AI’s use in offensive activity.
Article Details
- Event Type
- Cybersecurity news roundup covering active exploitation, supply-chain compromises, stealer malware delivery, and ransomware negotiations.
- Impact
- Microsoft reported active exploitation of a vulnerability in on-premises Exchange Server, but the attacker, targets, successful compromises, and scale remain unknown. Cisco attributed exploitation of a critical SD-WAN Controller flaw to UAT-8616, which attempted to add SSH keys, alter NETCONF configurations, and gain root privileges. Supply-chain compromises and a fake Hugging Face repository were reported to deliver stealer malware and expose credentials and secrets. Instructure said it reached an agreement with ShinyHunters after data theft and disruption affecting schools; the group claimed the data was deleted, but the article notes that deletion cannot be independently guaranteed.
MITRE ATT&CK
CVE
CVE-2026-20127Cisco · Cisco Catalyst SD-WAN Manager“8616 performed similar post-compromise actions after successfully exploiting CVE-2026-20182, as was observed in the exploitation of CVE-2026-20127 by the same threat actor,” Cisco Talos said.CVE-2026-20182Cisco · Cisco Catalyst SD-WAN Controller; Cisco · Cisco Catalyst SD-WAN ManagerUAT-8616 is abusing Cisco Catalyst SD-WAN Controller flaw CVE-2026-20182 for persistence and privilege escalation.CVE-2026-42897Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft · Microsoft Exchange Server 2019 Cumulative Update 14; +2 moreMicrosoft disclosed active exploitation of CVE-2026-42897 in on-prem Exchange Server.CVE-2026-8181Vendor / Product unavailableExploited —Threat actors are exploiting a critical flaw in the Burst Statistics WordPress plugin (CVE-2026-8181, CVSS score: 9.8), which “allows unauthenticated attackers who know a valid administrator username to
Threat Actors
Mustang PandaA campaign targeting the Asia-Pacific and Japan region was described as consistent with tradecraft associated with Mustang Panda and delivered an updated FDMTP tool using DLL side-loading.ShinyHuntersInstructure said ShinyHunters breached its systems, stole data, and disrupted school services. ShinyHunters claimed the data was deleted after a ransom agreement; the article notes that this claim cannot guarantee that copies were not retained or shared.TeamPCPThe article attributes supply-chain attacks involving compromised TanStack npm packages and related developer ecosystems to TeamPCP, describing credential and secret theft and potential access to organizations' cloud infrastructure.UAT-8616Cisco Talos attributed exploitation of CVE-2026-20182 to UAT-8616 and said the group attempted to add SSH keys, modify NETCONF configurations, and escalate to root. The article also attributes earlier exploitation of CVE-2026-20127 to the same actor.
Malware
DarkVigilMustang Panda Delivers Updated FDMTP Tool —A new campaign consistent with tradecraft associated with Mustang Panda has been observed targeting the Asia-Pacific and Japan (APJ) region to deliver an updated version ofGremlinresearchers disclosed details of various new and emerging information stealers like Salat, Gremlin, and Reaper, the last of which is a new SHub macOS stealer variant that spoofs Apple, Google, andReaperresearchers disclosed details of various new and emerging information stealers like Salat, Gremlin, and Reaper, the last of which is a new SHub macOS stealer variant that spoofs Apple, Google, and Microsoft across aSalatEvolve —Cybersecurity researchers disclosed details of various new and emerging information stealers like Salat, Gremlin, and Reaper, the last of which is a new SHub macOS stealer variant that spoofs Apple, Google, andSHubvarious new and emerging information stealers like Salat, Gremlin, and Reaper, the last of which is a new SHub macOS stealer variant that spoofs Apple, Google, and Microsoft across a multi-stage attack chain to steal
Vendors
AppleApple and Google Roll Out Cross-Platform E2EE for RCS Messages—End-to-end encrypted (E2EE) Rich Communication Services (RCS) messaging is being rolled out in beta between iPhone and Android devices, closing one of theAudiOne of the identified issues has been fixed by Audi and CARIAD.CARIADOne of the identified issues has been fixed by Audi and CARIAD.CiscoThis roundup highlights active exploitation of Microsoft Exchange Server and Cisco Catalyst SD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model pageGoogleApple and Google Roll Out Cross-Platform E2EE for RCS Messages—End-to-end encrypted (E2EE) Rich Communication Services (RCS) messaging is being rolled out in beta between iPhone and Android devices, closing one of theHugging FaceSD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model page that pushed stealer malware.InstructureIt also covers ransom negotiations involving Instructure and ShinyHunters, plus the growing role of AI in vulnerability discovery and offensive tradecraft.MicrosoftThis roundup highlights active exploitation of Microsoft Exchange Server and Cisco Catalyst SD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model pageOpenAIA fake Hugging Face repo impersonated OpenAI’s privacy filter model to deliver a Rust-based stealer.
Products
Burst Statistics WordPress pluginin Burst Statistics Plugin Exploited —Threat actors are exploiting a critical flaw in the Burst Statistics WordPress plugin (CVE-2026-8181, CVSS score: 9.8), which “allows unauthenticated attackers who know a validCanvasReaches Ransom Agreement with ShinyHunters—Instructure, the developer of school information portal Canvas, said it struck a deal with the ShinyHunters group, which breached its systems, stole a massive amount ofCisco Catalyst SD-WAN ControllerThis roundup highlights active exploitation of Microsoft Exchange Server and Cisco Catalyst SD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model pageHugging FaceSD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model page that pushed stealer malware.Microsoft Exchange ServerThis roundup highlights active exploitation of Microsoft Exchange Server and Cisco Catalyst SD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model pagemyAudiFlaws in myAudi Platform —Multiple security flaws have been discovered in the myAudi connected car platform, allowing anyone with knowledge of a vehicle’s VIN to add it to their account as a guest and access sensitiveRCSApple and Google Roll Out Cross-Platform E2EE for RCS Messages—End-to-end encrypted (E2EE) Rich Communication Services (RCS) messaging is being rolled out in beta between iPhone and Android devices, closing one of theTanStack npm packagesServer and Cisco Catalyst SD-WAN Controller flaws, alongside supply chain compromises involving TanStack npm packages and a fake Hugging Face model page that pushed stealer malware.
Tools
Codexits frontier large language models (LLMs) and its artificial intelligence (AI)-powered coding assistant, Codex, to help developers secure their software from the ground up.DaybreakOpenAI Announces Daybreak—OpenAI announced Daybreak, a new initiative based on its frontier large language models (LLMs) and its artificial intelligence (AI)-powered coding assistant, Codex, to help developers secureMDASHIn a related development, Microsoft detailed its own AI-assisted vulnerability discovery system called MDASH, which orchestrates more than 100 specialized AI agents across multiple frontiers and distilled AI models toTruffleHogIn some waves, the attackers used the Trufflehog scanner to validate those credentials.