Daily · 2026-05-07
🔥 PAN-OS Zero-Day Exploitation Details, 🇮🇷 MuddyWater False Flag, 🤖 Claude AI OT Attack, 🍎 ClickFix macOS Infostealers, 📦 NuGet Supply Chain, 🎓 Education Breach
PAN-OS CVE-2026-0300 exploitation details emerge with AD lateral movement via firewall credentials — patches still weeks away. MuddyWater uses Chaos ransomware as false flag for espionage through Microsoft Teams phishing. Claude AI used to build 17K-line attack framework targeting Mexican water utility OT systems. Multiple supply-chain attacks on NuGet (65K downloads), PyPI (OceanLotus), and npm ecosystems.
The PAN-OS zero-day is the day's defining story, and the picture worsened. Unit 42's timeline shows exploitation starting with failed attempts on April 9, unauthenticated root a week later, log and core-dump scrubbing, a four-day pause, then EarthWorm and ReverseSocks5 pivots and Active Directory enumeration using the firewall's own service account credentials. CVE-2026-0300 is now a perimeter-to-domain chain with patches still days away.
The Claude-built attack framework is the day's most consequential AI story. A 17,000-line toolkit assembled with Claude mapped the target's network, identified the vNode industrial gateway as the IT/OT bridge, and generated environment-specific password sprays that reached the SCADA layer of a Monterrey water utility. Safety guardrails were bypassed by framing prompts as authorized penetration testing, the pattern to expect going forward.
State-actor activity was broad. MuddyWater ran a Chaos ransomware false flag to hide espionage behind Microsoft Teams chat and a signed RAT; UAT-8302 hit South American and European governments with a shared backdoor ecosystem; OceanLotus moved to PyPI using Zulip's public API as C2; and the vm2 sandbox escape opens a WebAssembly route out of Node.js 25 sandboxes. DAEMON Tools confirmed its supply-chain breach and shipped a verified-clean 12.6.
Watchlist: firewall patch timeline May 13-28, OT password hygiene, Zulip API traffic as C2, and vm2 upgrades on anything untrusted.