View Ridge Security
Back to Cyber Hose

k0t hacks firewalls and VPNs, leaks 70,000+ credentials

Threat actor k0t breaches enterprise firewalls worldwide exposing 70,000+ credentials, plus critical GitLab RCE flaws and the first autonomous AI ransomware.

💥 BREACHES & INCIDENTS

  • University Hospitals takes digital systems offline after detecting unusual server activity
    University Hospitals in Ohio shut down IT systems after detecting unusual server activity.

    • University Hospitals, an Ohio-based health system, took digital services offline after finding unusual activity on its servers.
    • The shutdown affects the hospital network's IT systems and digital services.
    • The incident was detected as unusual server activity; details on the attack vector have not been disclosed.
    Sources 📎 Coverage: cleveland.com · 👁 via r/cybersecurity

  • k0t hacks firewalls and VPNs, leaks 70,000+ credentials via FortiWeb and PAN-OS flaws
    A threat actor tracked as k0t breached exposed FortiGate and Palo Alto firewalls, exposing over 70,000 credentials.

    • Campaign targets exposed Fortinet FortiGate, FortiWeb, and Palo Alto GlobalProtect/PAN-OS edge devices worldwide, with ~38% of victims in APAC and ~32% in Latin America.
    • Over 70,000 credentials from network devices and LDAP dumps were harvested; some victims later appeared on Qilin and The Gentlemen ransomware leak sites.
    • Attacks use FOFA/ZoomEye recon, exploits for CVE-2025-64446 (FortiWeb path traversal) and CVE-2026-0257 (PAN-OS/Prisma Access auth bypass) via scripts fortnew.py and exploit_2026_0257.py, plus brute forcing.
    • Post-exploitation uses OpenConnect VPN footholds, AD/SMB enumeration with NetExec, Impacket, Mimikatz, and persistence via MeshCentral, Atera, Teramind, AnyDesk, and AdaptixC2.
    • Stolen data is exfiltrated with Rclone to Wasabi S3 buckets and MEGA; most compromises occurred February–June 2026, overlapping the FortiBleed campaign.
    Sources 📎 Coverage: reddit.com · 👁 via r/cybersecurity

🔓 CVEs & KEV

  • CVE-2026-53942 — conda infrastructure — CVSS 9.9 — Conda Infrastructure GitHub Actions Pwn Request Leads to RCE

  • CVE-2026-115812 — AWS multi-model-server — CVSS 9.3 — Relative path traversal during model archive extraction in Amazon Web Service...

  • CVE-2026-115547 — Okta Access Gateway — CVSS 9.1 — Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands

  • CVE-2026-57845 — huggingface datasets — CVSS 8.7 — Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas BuilderHugg...

  • CVE-2026-115863 — ConnMan — CVSS 7.6 — ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply mess...

  • CVE-2026-106069 — nodejs node — CVSS 7.4 — A flaw in Node.js TLS hostname verification can cause a server certificate to...

  • CVE-2026-105482 — nodejs node — CVSS 7.4 — A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be...

  • CVE-2026-105483 — nodejs node — CVSS 7.4 — A flaw in Node.js TLS hostname verification allows a certificate without a ma...

  • CVE-2026-115813 — AWS multi-model-server — CVSS 6.9 — Server-side request forgery in the model download path in Amazon Web Services...

  • CVE-2026-106072 — nodejs node — CVSS 6.7 — A flaw in Node.js TLS hostname verification allows a certificate with only a ...

  • CVE-2026-105481 — nodejs node — CVSS 6.5 — A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as...

🕵️ RESEARCH & DEEP DIVES

  • AI Agents Run Ransomware: JADEPUFFER Autonomous Attack and Phantom Framework Exposed
    Researchers have documented the first fully autonomous AI-driven ransomware attack (JADEPUFFER) and exposed an AI-agent intrusion ecosystem used by INC and The Gentlemen ransomware affiliates.

    • Sysdig documented JADEPUFFER, the first known ransomware operation executed entirely by an autonomous LLM agent, with no human operator.
    • JADEPUFFER entered via unpatched CVE-2025-3248 (Langflow unauthenticated RCE), then stole credentials, moved laterally, encrypted a Nacos MySQL database, destroyed originals, and dropped a ransom note; the agent self-corrected failed steps in as little as 31 seconds.
    • SOCRadar exposed infrastructure of Russian-speaking affiliates of INC and The Gentlemen ransomware groups running an 'Autonomous Red Team Kill Chain Framework' dubbed Phantom, with ~62 organizations targeted, over 50% in the US, mainly industrial, manufacturing, and energy sectors.
    • The affiliates exploited actively exploited flaws including CVE-2024-57727 (SimpleHelp), CVE-2026-35616 (FortiClient), and CVE-2026-41940 (cPanel/WHM), using OpenCode with OpenRouter-hosted models in an AI-executed, human-approved structure.
    • Their toolkit included Phantom (18 skill modules), WormGPT-MCP (32 MCP servers), Ghost C2 polymorphic implants over Cloudflare/Telegram/DNS, RevSocks reverse SOCKS5 pivoting, and a BYOVD EDR killer abusing the Zemana driver (zam64.sys).
    Sources 📎 Coverage: thehackernews.com · 👁 via The Hacker News

  • AI Tools Are Generating Massive Attacks for Little Cost
    AI tools are enabling massive low-cost attack campaigns, including one targeting 105 sites and another gaining full domain control for $12.

    • Applies to organizations targeted by AI-driven attack campaigns, including website operators.
    • One campaign used open-weight AI models to target 105 sites.
    • In another campaign, public AI models enabled attackers to gain full domain control for just $12.
    • AI dramatically lowers the cost of scaling attacks, forcing changes in cyber-defense.
    Sources 📎 Coverage: darkreading.com · 👁 via Dark Reading

  • Metasploit adds six Langflow exploit modules covering RCE and auth bypass flaws CVE-2026-0768 CVE-2026-0769 CVE-2026-10134 CVE-2026-93680
    Rapid7's Metasploit release adds six new exploit modules targeting Langflow vulnerabilities.

    • Applies to Langflow, the open-source LLM workflow builder, releases 1.0.0 through 1.11.4
    • Six new modules cover an authentication bypass (CVE-2026-93680), three unauthenticated RCE paths (CVE-2026-0768, CVE-2026-0769, CVE-2026-10134), and two authenticated code execution flaws (CVE-2026-7873, CVE-2026-93674)
    • Modules were contributed by rmhowe425 with research credit to Peter Girnus and n0k0
    • The release also adds a pre-auth RCE chain against OpenCTI plus new MongoDB auxiliary modules and an Apache Solr version scanner
    Sources 📎 Coverage: rapid7.com · 👁 via rapid7.com (discovered)

📋 ADVISORIES

  • Ruby Patches Three Onigmo Regex Engine Bugs Behind Four Critical GitLab RCE Flaws
    Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 fixing three Onigmo regex engine bugs that caused four critical GitLab RCE vulnerabilities.

    • Affects any Ruby application that compiles regular expressions from attacker-controlled strings via Regexp.new, Regexp.union, Regexp.compile, or interpolation like /#{input}/; apps using only developer-written regexes are not affected.
    • Crafted patterns corrupt memory during regex compilation, potentially leading to code execution; GitLab issued four CVEs between September 23 and October 21, including CVE-2026-97229 and CVE-2026-110264, both CVSS 10.0 pre-auth RCEs.
    • CVE-2026-110264 affects every GitLab CE/EE version from 7.0 onward; fixed in 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, and 18.11.13.
    • All four flaws were reported by researcher joaxcar through GitLab's HackerOne bug bounty; none were in CISA's Known Exploited Vulnerabilities catalog as of October 23.
    • Ruby 3.2 and earlier receive no fix (EOL April 2026); Regexp.timeout and pattern-length caps do not prevent these bugs, and Ruby has not requested its own CVE identifiers for the fixes.
    Sources 📄 Source: ruby-lang.org · 📎 Coverage: thehackernews.com · 👁 via The Hacker News

  • 📄 Source for LiteLLM 1.107.0 on PyPI backdoored via stolen GitHub tokens, stealing credentials at Python startup — stepsecurity.io

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check