The private keys for eight eMudhra intermediate certificate authority certificates have been compromised, prompting emergency blocks in all major browsers and an urgent Go security release. Palo Alto Networks says the Qilin and INC ransomware groups are exploiting a PAN-OS flaw to bypass multi-factor authentication and pivot to hypervisors, while researchers watched criminals use autonomous AI agents built on the Cairn tool to break into company websites, including Australian targets. OVHcloud's CLI releases were hijacked to steal developer secrets.
Reporting window: 24 hours to 7:00 am AEDT, Wednesday 21 October 2026. Open sources only.
Australian focus
- AI agent campaign targets Australian online shops: NorForge found exposed Cairn panels; the largest cluster (AIA0001) sought persistent access to shop and payment systems in the US, Japan and Australia. No Australian victims named. The Hacker News
- AOMEI yet to notify infected customers: victims found by Google span IT services, telecommunications and higher education in almost a dozen countries including Australia; AOMEI has released a detection tool. Follow-up to Episode 5. The Record, Episode 5 notes
- ConnectWise resets credentials; Cloud Backup still offline: Huntress saw a second Microsoft 365 tenant where the app granted itself Global Administrator and planted secrets on other apps; do not reconnect affected apps until formal instructions are issued. Relevant to Australian MSPs. The Hacker News
- Ransomware crews threatening Australian staff: Semperis survey says attackers followed through on threats in 53% of Australian cases (self-reported survey data). Cyber Daily
Global threat activity
- Eight eMudhra CA keys compromised: six TLS and two code-signing intermediates; blocked by Chrome, Firefox, Apple and Microsoft; Mozilla removed emSign ECC Root CA G3 from NSS. Fixes: Go 1.27.3 and 1.26.10 (CVE-2026-111943, rebuild required), Firefox 158.0.1 (CVE-2026-113470), NSS 3.131.1, certifi 2026.10.19, webpki-roots 1.0.10; Node.js pending. The Hacker News, The Hacker News (Go)
- Qilin and INC exploit PAN-OS CVE-2026-0257: authentication bypass used to establish VPN sessions without MFA, then pivot to vCenter and ESXi and dump domain credentials from a virtual disk; Veeam also targeted. The Hacker News, The Register
- OVHcloud CLI releases hijacked: v0.11.0 to v0.15.0 archives swapped for a secret stealer for about 94 minutes on 19 October (12:47 to 14:21 UTC); rotate secrets from another machine and install v0.16.0; possible GlassWorm link (researchers' inference). The Hacker News
- APT28 breaches NATO naval shipbuilder: Symantec links HOOKEDGE backdoor activity against a law enforcement agency, a naval shipbuilder and a military aircraft engine maker in two NATO states; new reflective loader and SSH tunnel. The Hacker News
- FortiSIEM CVE-2026-106173 public PoC: CVSS 9.4 unauthenticated file write to RCE via gRPC service on TCP 27918; fixed in 7.5.1. The Hacker News
- CISA KEV adds six: SiteGuard Server Edition CVE-2026-106931 (OS command injection, root or SYSTEM; preserve diagnostic info before patching), four Plex Media Server flaws and Siemens Software Center CVE-2026-110936. CISA KEV, BleepingComputer (SiteGuard)
- Zeabur breach and shutdown: leaked, never-rotated admin tokens led to 3.2 million environment variable records and 321,810 accounts exposed; service closes by 31 December. BleepingComputer
- California students' data stolen via ETS: SFTP server accessed 22 May to 18 September; records of all public school students over three years. The Record
- Nikkei third breach in a month: 1.83 million records from a development cloud service, about 150,000 identifying. BleepingComputer
- Pegasus on Belgrade rector's iPhone: Citizen Lab confirms zero-click infection days before Serbia's 25 October election; operator not identified. The Hacker News
AI security
- Autonomous AI agents abused via Cairn: more than 1,200 sites attempted and over 100 companies reached (Reuters); about 10% success, roughly 23 hours per success; model use unconfirmed. Exposed panels also leaked victims' secrets. The Hacker News, Dark Reading, iTnews
- NIST, NSA and CISA practices for rogue AI agent incidents: ten voluntary practices across prepare, detect, respond, recover and report. SecurityWeek
- Microsoft treats agents as insiders: per-task Dynamic Permissions and Dynamic Agent Risk scoring. Microsoft Security Blog
- DHS bans DeepSeek across federal civilian agencies: includes third-party products "developed using" DeepSeek; scope criticised as vague. The Register
- WhatsApp's hidden chatbot instructions: invisible help-page text told the support AI not to recommend regulators or cite privacy law; WhatsApp says a bug, now removed. The Hacker News
- UK FCA wants AI failures and near misses reported. The Register
Industry and strategic
- Salesforce acquiring Braze. iTnews
- Drupal critical core fixes: CVE-2026-108097 (Field UI) and CVE-2026-108099 (Entity List), unauthenticated paths via contributed modules; update to 11.4.10, 11.3.19 or 10.6.19. SecurityWeek
Outlook and patch priorities
- Critical: rebuild Go services on 1.27.3 or 1.26.10 and refresh CA bundles (certifi, webpki-roots, container base images); PAN-OS and Prisma Access CVE-2026-0257 patch check plus hunt for gateway sessions and vCenter access; rotate secrets if the OVHcloud CLI was installed or updated on 19 October; SiteGuard Server Edition 8.00 Update 5.
- High (this week): FortiSIEM 7.5.1; Drupal core updates; Zeabur customers rotate all secrets; ConnectWise partners continue tenant reviews.
- Watch: eMudhra root-cause disclosure and Chrome decision on emSign Root CA G1; Node.js fix; naming of Cairn victims; Bullhorn data theft determination.
Indicators
- ConnectWise activity (Huntress): 144.172.64[.]128 (application sign-ins, primary vector); 144.172.64[.]99, 144.172.64[.]60, 144.172.94[.]243 (password spray, likely unrelated).
- APT28 HOOKEDGE C2 (Symantec): 185.82.218[.]119:443.
- OVHcloud CLI swapped v0.15.0 Linux arm64 archive SHA-256: 3833daffcaaaab27e4e0e0833240ffcb1df8df648f4ec0bc4a75c176e28933cb; bad builds report commit 5ead8ef.
- Exposed agent panels often listen on TCP 8000 (NorForge).