Weekly Security Roundup Covers Hijacked Tor Relays, AI Agents and Data Breaches
Summary
The roundup covers Tor exit relays that redirected SSH traffic to capture passwords, suspected access to Railway customer secrets, PingCAP data theft, APT28-linked activity, bank restrictions on AI agents, and other security developments.
Key points
- A researcher found 333 Tor exit relays redirecting SSH connections to attacker-run servers that captured passwords from users who ignored SSH warnings. The Tor Project removed the relays.
- Railway said an unauthorized party may have accessed encrypted customer environment variables and obtained the decrypted contents of some; it paused deployments and urged customers to rotate secrets.
- PingCAP said an intruder used stolen service-account credentials from September 9 to October 7 to copy internal data and source code. It invalidated compromised credentials and found no evidence that data stored in TiDB was affected.
- Symantec linked Russia's APT28 to Hookedge backdoor attacks. At a NATO shipbuilder, the intrusion lasted at least two months and involved credential theft, a persistent SSH tunnel, and a previously undocumented loader.
- Banks are reportedly detecting third-party AI agents acting within customer accounts; Morgan Stanley has begun blocking them, while other banks are restricting access or moving toward read-only access.
- Researcher Patrick Wardle analyzed Heartbreaker, a macOS ransomware sample that attempts to rebuild itself from embedded source code. Its single hardcoded AES key may allow free file recovery.
- ISO and IEC published ISO/IEC 27090, guidance for detecting and mitigating AI-system threats including data poisoning and model theft.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering ransomware, cyber intrusions, data breaches, and emerging security risks.
- Impact
- Reported incidents involved stolen credentials, intercepted SSH passwords, unauthorized access to internal systems, and copying customer data and source code. Bullhorn and Railway reported unresolved questions about possible data exposure; PingCAP said it found no evidence that data stored in TiDB was affected. The roundup also reports ransomware activity and unauthorized AI agents operating in bank customer accounts.
MITRE ATT&CK
T1078 · Valid AccountsA party used stolen service account credentials to access PingCAP's internal systems.T1486 · Data Encrypted for ImpactHeartbreaker encrypts files in the user's Downloads folder.T1543.001 · Launch AgentHeartbreaker attempted to establish persistence by setting up a macOS LaunchAgent.T1557 · Adversary-in-the-MiddleHijacked Tor exit relays redirected SSH connections, allowing attackers to capture passwords from users who ignored SSH warnings.T1572 · Protocol TunnelingAttackers opened a persistent SSH tunnel into a shipbuilder's internal network.
People
Edward DubrovskyCanadian cybersecurity executive reportedly in frequent contact with Pepijn van der Stap, according to Signal messages accessed by authorities.Patrick WardleResearcher who analyzed the Heartbreaker macOS ransomware sample.Pepijn van der StapA ShinyHunters suspect reportedly arrested in the Netherlands.
Threat Actors
Malware
Vendors
BullhornBullhorn forces credential resets as it restores hacked platformNSO GroupA federal judge has declined to hold NSO Group in contempt over WhatsApp’s claims that the spyware maker violated a 2025 injunction barring it from using WhatsApp’s infrastructure to target users.PingCAPPingCAP intruder copied customer records and source code over four weeksRailwayRailway customers told to rotate all secrets after suspected breach
Products
Bullhorn AutomationBullhorn says there is no indication that Bullhorn Automation, Sourcebreaker, or VMS Sync were affected.macOSHeartbreaker macOS ransomware rebuilds itself from sourceRailwayRailway customers told to rotate all secrets after suspected breachSignalSignal messages that authorities accessed when they arrested ShinyHunters suspect Pepijn van der Stap in the Netherlands reportedly show frequent contact with Canadian cybersecurity executive Edward Dubrovsky and atSourcebreakerBullhorn says there is no indication that Bullhorn Automation, Sourcebreaker, or VMS Sync were affected.TiDBTiDB developer PingCAP says an unauthorized party used stolen service account credentials between September 9 and October 7 to access some of its internal systems, copy data and obtain source code.TiDB CloudExported records included TiDB Cloud user names and email addresses, customer contacts, contract and billing details, and encrypted TiDB Cloud API key values, though the company has found no evidence that data stored inTorHijacked Tor exits harvested SSH passwordsVMS SyncBullhorn says there is no indication that Bullhorn Automation, Sourcebreaker, or VMS Sync were affected.WhatsAppWhatsApp’s guarded evidence fails to prove NSO broke injunction
Countries
Netherlandsmessages that authorities accessed when they arrested ShinyHunters suspect Pepijn van der Stap in the Netherlands reportedly show frequent contact with Canadian cybersecurity executive Edward Dubrovsky and at leastRussiaSymantec has linked Russia’s APT28 (which it tracks as Swallowtail) to Hookedge backdoor attacks on a law enforcement agency, a naval shipbuilder and a military aircraft engine manufacturer in two NATO member states.