Clop Leak-Site Takeover, AI-Targeting Malware and Water-Sector Credential Exposure Lead Security Roundup
Summary
This roundup covers a Clop leak-site takeover, flaws in browser AI assistants, malware targeting secrets and AI keys, water-sector credential exposure, and security updates including an Ubuntu kernel schedule change and a TDengine fix.
Key points
- ShinyHunters defaced Clop’s Tor leak site and claimed it stole server logs, source code and private keys; the group demanded payment and an apology.
- Researchers said BragJack flaws could let malicious browser extensions hijack built-in AI assistants and access sensitive data or device features without user interaction.
- Malicious MemOS packages on npm and PyPI carried a Go implant that searches for secrets; researchers found no evidence it had spread through its built-in propagation templates.
- SpyCloud found infostealer exposure at 1,787 organizations tied to the US water sector, including credentials for OT or remote-access systems at 258; it said these indicate potential access paths, not confirmed intrusions.
- Cisco Talos documented CLOSEDQUORUM, an implant that uses commercial AI models to choose actions, but has not confirmed use in the wild.
- Canonical plans weekly Ubuntu kernel releases and aims to provide workarounds or hardening guidance within 24 to 48 hours of public vulnerability disclosure.
- A TDengine flaw allows unauthenticated denial of service and affects versions 3.4.0.0 through 3.4.1.5; version 3.4.1.6 fixes it. Separately, CARBONATO targets exposed Docker daemons and prioritizes collecting AI API keys.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering threat activity, security research, vulnerability disclosure, and defensive policy changes.
- Impact
- Reported developments include a Clop leak-site defacement and alleged theft of its server logs, source code, and private keys; flaws that could let malicious browser extensions control AI assistants and access sensitive data or device features; malicious AI-agent packages containing a credential-seeking implant; exposed infostealer credentials that may create access paths into water utilities; and malware operations targeting credentials and API keys. The roundup also reports a denial-of-service vulnerability in TDengine. SpyCloud said its utility-sector findings indicate potential access paths, not confirmed intrusions; Cisco Talos had not confirmed CLOSEDQUORUM use in the wild; and Semgrep reported no evidence that the sckit implant had propagated.
CVE
Threat Actors
Malware
CarbonatoThreatDown has detailed CARBONATO, a botnet that compromises Docker daemons exposed without authentication on port 2375 and scans neighboring networks every five minutes to spread further.CLOSEDQUORUMCLOSEDQUORUM swaps C2 servers for commercial AI APIsRemControlGroup-IB has uncovered RemControl, a new Android banking trojan offered as malware-as-a-service.sckitThe packages carry a previously unseen Go implant named sckit.
Vendors
AnthropicIn one US-hosted cluster, more than 4,000 IP addresses in China and Hong Kong (regions that Anthropic, OpenAI and Google exclude) connected to 304 relays that also reached OpenAI, Anthropic, xAI and Google endpoints.CanonicalCanonical promises Ubuntu kernel workarounds within 48 hours of disclosureGoogleIn one US-hosted cluster, more than 4,000 IP addresses in China and Hong Kong (regions that Anthropic, OpenAI and Google exclude) connected to 304 relays that also reached OpenAI, Anthropic, xAI and Google endpoints.OpenAIIn one US-hosted cluster, more than 4,000 IP addresses in China and Hong Kong (regions that Anthropic, OpenAI and Google exclude) connected to 304 relays that also reached OpenAI, Anthropic, xAI and Google endpoints.
Products
Claude in Chrometake control of the built-in AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet and the Claude in Chrome extension.DockerDocker botnet ranks AI API keys above all other lootEdgea set of flaws that let a malicious extension take control of the built-in AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet and the Claude in Chrome extension.Fortinetutilities themselves were mostly for remote-administration tools such as TeamViewer and SonicWall and Fortinet management portals, though SpyCloud stresses the findings reflect potential access paths, not confirmedGoogle ChromeBragJack, a set of flaws that let a malicious extension take control of the built-in AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet and the Claude in Chrome extension.Hermes AgentOn each host, it installs Hermes Agent, a legitimate open source AI agent framework, and replaces its persona file with instructions to follow operators’ Telegram commands, maintain persistence and collect credentials,MemOSAn attacker has published malicious versions of MemTensor’s MemOS packages on npm and PyPI, including a memory plugin for the OpenClaw AI agent harness.OpenClawAn attacker has published malicious versions of MemTensor’s MemOS packages on npm and PyPI, including a memory plugin for the OpenClaw AI agent harness.Opera Neonset of flaws that let a malicious extension take control of the built-in AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet and the Claude in Chrome extension.Perplexity Cometlet a malicious extension take control of the built-in AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet and the Claude in Chrome extension.SonicWallat the utilities themselves were mostly for remote-administration tools such as TeamViewer and SonicWall and Fortinet management portals, though SpyCloud stresses the findings reflect potential access paths,TDenginePre-auth TDengine flaw threatens industrial telemetry uptimeTeamViewerExposed credentials at the utilities themselves were mostly for remote-administration tools such as TeamViewer and SonicWall and Fortinet management portals, though SpyCloud stresses the findings reflect potentialUbuntuCanonical promises Ubuntu kernel workarounds within 48 hours of disclosure
Countries
ChinaIn one US-hosted cluster, more than 4,000 IP addresses in China and Hong Kong (regions that Anthropic, OpenAI and Google exclude) connected to 304 relays that also reached OpenAI, Anthropic, xAI and Google endpoints.Costa RicaLanguage, timezone and infrastructure clues support their assessment that the operators are based in Costa Rica.Hong KongIn one US-hosted cluster, more than 4,000 IP addresses in China and Hong Kong (regions that Anthropic, OpenAI and Google exclude) connected to 304 relays that also reached OpenAI, Anthropic, xAI and Google endpoints.
Industries
BankingBanking trojan’s AI helper thought it was building a quizEnergyRidge Security has published details of CVE-2026-42542, a high-severity flaw in TDengine, a time-series database used in industrial telemetry, energy, utilities and IoT environments.industrial telemetryPre-auth TDengine flaw threatens industrial telemetry uptimeWater and wastewater utilitiesSpyCloud analyzed stolen identity data tied to 10,000 US water and wastewater utilities and the technology vendors that supply them.