AI-Assisted Intrusions, Active Exploitation and Security Industry Moves Feature in Weekly Roundup
Summary
The roundup covers stolen AI API keys, an AI-agent PaperCut campaign, fake helpdesk and passkey lures, actively exploited Cisco and GitLab flaws, and security industry and regulatory developments.
Key points
- Anthropic reported criminals reused stolen customer API keys in intrusions; selected cases also included AI use by suspected ShinyHunters affiliates and a Russian espionage actor.
- GreyNoise traced an operator using hundreds of AI agents across at least 440 compromised PaperCut instances; domain-admin access was confirmed at 12 organizations.
- Microsoft described fake helpdesk calls and messages used to lure employees into passkey, MFA, or SSO setup flows and steal cloud access.
- Cisco confirmed exploitation of an unauthenticated email-gateway flaw that can enable root command execution; on-premises customers need fixed software.
- GitLab patched an unauthenticated file-read flaw, while researchers also reported exploitation of other GitLab authentication and privilege-escalation flaws.
- The Cyber Resilience Act’s reporting obligations took effect, requiring covered manufacturers to provide an early warning within 24 hours and a notification within 72 hours for specified security events.
- Other coverage included AI security debates, security product and funding announcements, and research showing a physical attack against Intel TDX’s default integrity mode.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering reported AI-assisted intrusions, exploitation of software vulnerabilities, targeted spyware, and security product and company developments.
- Impact
- Anthropic reported criminals reusing stolen customer API keys in further intrusions, including cases involving suspected ShinyHunters affiliates and a Russian espionage actor. GreyNoise attributed compromises of at least 440 PaperCut instances across 395 organizations in 48 countries to an operator using AI agents, with domain-admin access confirmed at 12 organizations. Microsoft described helpdesk impersonation and passkey or MFA setup lures used to gain cloud access and collect data. Cisco, GitLab, and other products were also reported affected by active exploitation; specific impacts and remediation details vary by incident.
MITRE ATT&CK
T1078 · Valid AccountsStolen AI API keys were reused to conduct further intrusions.T1087 · Account DiscoveryAttackers enumerated Microsoft tenants through Microsoft Graph.T1110 · Brute ForceMicrosoft described attackers registering an attacker-controlled authentication method after gaining access.T1113 · Screen CaptureCHOSEN BRICK can capture screens.T1123 · Audio CaptureCHOSEN BRICK can record audio.T1530 · Data from Cloud StorageAttackers collected data from SharePoint, OneDrive, and Exchange.T1566 · PhishingMicrosoft tracked intrusions initiated through helpdesk impersonation and phishing links presented as passkey, MFA, or SSO setup.T1573 · Encrypted ChannelCHOSEN BRICK uses Telegram bots for command and control.
CVE
CVE-2026-20079CVE-2026-20079, CVSS 10.0, allows unauthenticated root access; CVE-2026-20316 exposes static credentials that can support further escalation.CVE-2026-20316CVE-2026-20079, CVSS 10.0, allows unauthenticated root access; CVE-2026-20316 exposes static credentials that can support further escalation.CVE-2026-42016Wiz caught attackers chaining CVE-2026-42018 and CVE-2026-42016 to obtain an anonymous-user token and elevate it to admin.CVE-2026-42018Wiz caught attackers chaining CVE-2026-42018 and CVE-2026-42016 to obtain an anonymous-user token and elevate it to admin.CVE-2026-76461Cisco confirmed exploitation of CVE-2026-76461, CVSS 9.8, which lets an unauthenticated attacker run commands as root by sending a crafted email.CVE-2026-81578The campaign exploited CVE-2026-81578 and CVE-2026-82078.CVE-2026-82078The campaign exploited CVE-2026-81578 and CVE-2026-82078.CVE-2026-82329It also confirmed exploitation of the separate CVE-2026-82329 authentication bypass.CVE-2026-85706GitLab patched CVE-2026-85706, CVSS 10.0, an unauthenticated file-read flaw in its repository commits API under certain conditions.
People
Threat Actors
Cyclops BlinkIdentified as an espionage cluster among three intrusion clusters exploiting Cisco Firewall Management Center.QilinIdentified as a ransomware group among intrusion clusters exploiting Cisco Firewall Management Center.ShinyHuntersSuspected affiliates used Claude to understand unfamiliar environments, build collection tools, and steal downstream customer data.
Malware
Vendors
AnthropicThis issue of The Cybersecurity Pulse covers major security news, including AI safety debates, Anthropic’s report on stolen API keys, and active exploitation of flaws in PaperCut, Cisco, GitLab, and MicrosoftCiscoAI safety debates, Anthropic’s report on stolen API keys, and active exploitation of flaws in PaperCut, Cisco, GitLab, and Microsoft authentication workflows.GitLabdebates, Anthropic’s report on stolen API keys, and active exploitation of flaws in PaperCut, Cisco, GitLab, and Microsoft authentication workflows.GreyNoiseGreyNoise linked AI-driven abuse to hundreds of compromised PaperCut instances.MicrosoftAnthropic’s report on stolen API keys, and active exploitation of flaws in PaperCut, Cisco, GitLab, and Microsoft authentication workflows.PaperCutincluding AI safety debates, Anthropic’s report on stolen API keys, and active exploitation of flaws in PaperCut, Cisco, GitLab, and Microsoft authentication workflows.
Products
Firewall Management CenterCisco Talos also found three intrusion clusters exploiting Firewall Management Center, including Cyclops Blink espionage and Qilin ransomware.Intel TDXDDRop let researchers read protected VM data and fake the proof that a VM was trustworthy, defeating protections in Intel TDX’s default integrity mode.Microsoft Exchange ServerCollect: SharePoint, OneDrive, and Exchange data, generally below 1,000 files or emails an hour, continuing for hours or days.Microsoft GraphStay in: Register an attacker-controlled authentication method, then enumerate the tenant through Microsoft Graph.Microsoft OneDriveCollect: SharePoint, OneDrive, and Exchange data, generally below 1,000 files or emails an hour, continuing for hours or days.Microsoft SharePointCollect: SharePoint, OneDrive, and Exchange data, generally below 1,000 files or emails an hour, continuing for hours or days.