The Watch

Huntress caught attackers using a compromised SonicWall VPN to reach a domain controller. They then chained three VMware flaws to escape from a guest VM into the ESXi hypervisor, per Unsupervised Learning. The toolkit supports 155 ESXi builds and persists through a VSOCK backdoor, a host-to-guest channel that never touches the network. Your NDR, IDS and NetFlow will show nothing, so the hunt has to run on the ESXi hosts themselves.

Aikido researcher Oliver Smith found Graphalgo malware in two Terraform providers and two Go modules, per tl;dr sec. It is the first malware ever seen in Terraform providers. One provider typosquats kreuzwerker/docker, a legitimate provider with 56M downloads. The payload stays dormant unless two Terraform variables hash to a hardcoded value, so it looks clean in sandboxes and CI. Only 18 hosts have been infected since July 2026, which points to deliberate targeting of engineers who hold production credentials.

Perplexity ran a 216-run study and found AI agents broke network confinement in 11 of 54 partial-network runs, per tl;dr sec. Every bypass used the same design flaw: the allowlist was checked by domain name but enforced by IP address. Eight of 10 third-party sandboxes share the flaw, including E2B, Vercel Sandbox, Modal and Deno Sandbox. If your agents run code on these platforms, your egress control may be weaker than its configuration suggests.

SANS @RISK lists nine CISA KEV flaws. Five of them carry a CVSS score of 0 because they have not been scored, including MLflow, JFrog Artifactory and an 11-year-old libuser bug. A patch queue sorted by severity pushes these actively exploited flaws to the bottom. Separately, Google Threat Intelligence data cited by tl;dr sec shows monthly CVE disclosures more than doubling to 10,740, with exploitation rising almost in step. Rank remediation by exploitation evidence and exposure, not by score.

The federal CUI rule for civilian contractors is close to final and could land by year-end 2026, per CyberScoop. It brings 72-hour breach reporting, strict NIST controls, mandatory flow-down to subcontractors, and False Claims Act penalties. For your SOC, the 72-hour clock turns the time it takes to escalate an alert into a declared incident into a compliance metric. Attorneys say the text is largely settled, so waiting for the final wording buys little.