🔴 WSO2 CVE-2026-5430 KEV-listed under live attack, 🤑 Bitget confirms $351.6M wallet theft, 🎯 SharePoint CVE-2026-65660 re-rated and exploited, ⚔️ Ransomware joins TeamCity exploitation, 🐳 Carbonato AI-agent botnet hijacks Docker hosts, 🔑 RSA HSM signature forgery without key extraction

The day's defining story is CVE-2026-5430: the critical JWT authentication bypass in WSO2's API management stack is now both KEV-listed, as of September 24, and under confirmed active exploitation, with WatchTowr honeypots recording the first in-the-wild attempts and WSO2 warning customers directly. The CVSS 9.8 flaw accepts tokens signed with an algorithm outside the configured set, letting attackers forge administrative tokens and take over accounts across API Manager 4.1.0 through 4.6.0 plus API Control Plane, Traffic Manager and Universal Gateway 4.5.0 and 4.6.0, and with roughly 1,000 enterprise customers in banking, government, telecom and logistics plus thousands of open-source deployments, a scanning wave is the base case now that the federal clock is running. The same KEV batch added Adobe Commerce and Magento CVE-2026-71362, an incorrect-authorization flaw enabling unauthenticated account takeover. Note the disclosure pattern: the fix landed in April under commit titles like "Improve exception handling" and NVD only published months later, so patch-state inventory, not vulnerability feeds, is the only reliable exposure map here.

[NEW] Bitget has confirmed attackers stole about $351.6 million from its hot and warm wallet tiers on the evening of September 24, suspending withdrawals and engaging Mandiant, SlowMist and law enforcement, with reporting pointing to suspected North Korean hackers. The mechanism matters more than the number: the intruders reached the backend wallet-service system and used it to forge transfer information and trigger the authorization-signing process, meaning they produced properly signed withdrawals rather than breaking key storage, so wallet-tier segmentation contained nothing and public on-chain observers caught barely half the total before disclosure. Cold storage and customer balances are stated intact, and laundering is expected across Ethereum, XRP Ledger, Arbitrum and Avalanche.

[NEW] Microsoft's CVE-2026-65660 is the week's reminder that severity labels lie: logged August 11 as moderate spoofing with "exploitation less likely," the SharePoint Server flaw was re-rated on August 27 to code injection RCE at CVSS 8.8 after Viettel's khoadha showed quote-smuggling through RegisterDirective.GetHtml() splitting the payload past VerifyControlOnSafeList() into a fileless in-memory webshell via XamlServices.Parse(), exploitable unauthenticated wherever anonymous page viewing is enabled. Canada's Cyber Centre raised alert AL26-023 on September 24 confirming active exploitation and warning that chaining with other SharePoint flaws yields pre-authentication execution. The August KBs for 2016, 2019 and Subscription Edition disable the vulnerable ToolPane parser by default, so the patch exists and simply needs to be everywhere.

[REVISIT] The TeamCity CVE-2026-63077 story has gained its expected second act: CISA warned in late September that ransomware gangs have joined exploitation of the unauthenticated XStream deserialization RCE, and Rapid7's analysis shows the vulnerable server builds a permissively scoped XStream allowlist that lets attackers ride the agent polling protocol past authentication into OS commands. Every On-Premises version is affected, the login screen and REST API alone are sufficient entry, and fixes have existed since July 27 (2025.11.7 and 2026.1.3, plus a security patch plugin back to 2017.1), so the variable separating victims from non-victims is patch latency on internet-facing CI/CD, where one hit exposes stored credentials and everything the pipeline signs.

[UPDATE] Check Point completed its patch set for the exploited gateway and management trio today with a fix for CVE-2026-91843 in Security Management and Log Servers (sk1000155), while exploitation attempts continue against Spark customers through the pre-auth VPN certificate RCE CVE-2026-85102 and the management path traversal CVE-2026-93616.

[NEW] DepthFirst published a working, retryable exploit for CVE-2026-80521, the AF_UNIX garbage-collector use-after-free that escapes unprivileged Docker containers with default capabilities on Ubuntu 26.04 (kernel 7.0.0-31-generic): the chain races graph publication during multi-descriptor sendmsg(), reclaims the freed vertex via AF_PACKET rings and a /proc/kpagecount oracle, and lands a root shell in the host's mount and PID namespaces while defeating KASLR and slab hardening. The upstream fix has existed since August 6 (7.2 and 7.1.10), but Ubuntu's tracker still lists 26.04, 24.04 and 22.04 LTS, including their AWS, Azure and GCP variants, as unpatched, and the same disclosure carries a second escape, CVE-2026-52910, a reuseport cBPF bug on 24.04. No in-the-wild exploitation or KEV listing yet, but a calibrated public exploit is the next best thing.

[NEW] Carbonato is a wormable Linux botnet that hijacks Docker daemons exposed without authentication on port 2375, mounts the host filesystem from a privileged container, and then does something genuinely new: it installs the stock, legitimate Hermes Agent AI framework and aims it with a 39-line GH0ST persona that ranks AI API keys as loot priority one, takes commands over Telegram, and holds reverse SSH tunnels to Costa Rica behind immutable-bitted cron, systemd and OpenRC persistence. A leaked registry with 59 repositories and 4.3 GB of activity since October 2024 confirms a sustained operation, and because the payload framework is unmodified open source, blocking binaries by name misses it entirely; the fix is closing 2375 and requiring registry authentication, not a patch.

[NEW] Cloudflare disclosed a cross-tenant data exposure in Containers rooted in dm-thin's skip_block_zeroing option: a 4 KiB write to an unmapped disk block left roughly 60 KiB of a prior tenant's residual bytes readable from the raw device, and Accomplish's testing recovered foreign directory inodes (2,700 distinct), .env files, SQLite databases and credential files across 18 of 24 test placements on four continents. Cloudflare removed the option fleet-wide by September 7 and cleared stale snapshots by September 19, covering Containers, Sandboxes and Browser Run with no customer action required, but any secret a workload held on disk before September 7 should be treated as readable by an unknown prior co-tenant and rotated, and anyone running dm-thin elsewhere should audit pools for the same setting.

[NEW] The MacSync macOS stealer chain has been rebuilt around Apple's own infrastructure: Kaspersky documents DMG-delivered droppers whose commands ride inside public iCloud calendar events, piped from caldav.icloud.com into zsh, with payload archives pulled from iCloud hosting so there is no attacker domain to seize, all lured by a fake Toria cryptocurrency wallet promoted on X and Telegram. The Swift and Objective-C stages drop a Finder-disguised backdoor, BLD-150, persisting via a com.apple.finder.agent LaunchAgent, .zshrc hooks and global Git hooks, which turns one compromised developer machine into a source code and credential supply chain problem.

[NEW] The Graphalgo supply chain campaign is the first systematic malware distribution through Terraform providers: the typosquatted kreuzwenker/docker provider, aimed at a 56-million-download original, and its companion Go modules stay completely inert until the SHA-256 of a container's name plus network ID matches one hardcoded value, then decrypt a RAT from a disguised SQLite payload and take commands from an Ethereum smart contract on Arbitrum Sepolia polled every three seconds plus a Slack bot. Aikido counted 18 victim hostnames and 725 plaintext check-ins since July 16, mostly macOS developer machines, with commit dates forged back to November 2025 to make the packages look established; dependency firewalls tuned to npm and PyPI have a structural blind spot here.

[NEW] In "Forging 1024-bit RSA Signatures in Nearly SNFS Time," researchers demonstrate that temporary black-box access to an HSM's unpadded PKCS#11 CKM_RSA_X_509 mechanism, instantiated on Thales Luna K6 and Luna S750, converts into the ability to forge valid signatures for that key indefinitely and offline, without ever extracting or factoring it. Key-compromise detection and rotation-on-suspicion both miss this attack model, so inventory which applications hold raw RSA signing or decryption rights and treat any temporary access to those mechanisms as an incident.

[NEW] Huntress responders documented an actor exploiting CVE-2025-4632, the Samsung MagicINFO 9 Server path traversal patched in May 2025 and KEV-listed that same month, still working against a live victim in September 2026, complete with AnyDesk, a rogue local administrator, silenced Defender, and a novel finishing move: compiling the SilentXMRMiner on-host with csc, MinGW and donut rather than dropping a binary. The same endpoint was re-compromised eight days after remediation because the patch never landed; signage servers running forgotten Java applications on embedded Tomcat hand out SYSTEM with spare CPU, and cleanup without patching just reserves the box for the next actor.

Watchlist: tonight, push WSO2 per-branch updates and the SharePoint August KBs ahead of the scanner waves, confirm TeamCity 2025.11.7 or 2026.1.3 (or the security patch plugin) and Check Point sk1000155 across management and log servers, and treat exposed Docker 2375 endpoints and dm-thin skip_block_zeroing pools as findings rather than risks; this week, screen deposits against Bitget's flagged recipient addresses for laundering bursts on Ethereum, XRP Ledger, Arbitrum and Avalanche, watch Ubuntu for CVE-2026-80521 kernel backports and HSM vendors for CKM_RSA_X_509 guidance, and expect KEV consideration for the container escape now that a working exploit is public.

Generated by zai/glm-5.3-flash. Input tokens: 94,800, output tokens: 33,050, cache read: 1,731,072, cache write: 0.