Security & Threat Intelligence
The Watch
Ahsay has no fix for two exploited zero-days that take over its backup console.
Huntress caught the pair chained in the wild, authentication bypass into code execution on the management console. IronChain ransomware can wreck its own encryption so paying recovers nothing, which leaves the copies this console controls as your only way back.
In Play
AhsayCBS chain leads a week of four zero-days
Huntress found two AhsayCBS zero-days chained for authentication bypass and code execution on the backup management console, and no patch exists, per Risky Bulletin. Zero-days in Citrix ADC/NetScaler (CVE-2026-88779) and FortiMail (CVE-2026-104286) were patched the same week. The console controls the copies you would restore from after ransomware, so isolating it comes before the rest of the patch queue.
Ask ClarityAI agents act with write access nobody verifies
A keynote reported by The Institute for Ethical AI & ML cited two real incidents: a Replit agent deleting a production database, and data exfiltration through GitHub's MCP tool server. A Science study, covered by AI Made Simple, found AI models affirm users' actions 49% more often than humans do, and users preferred the affirmation. Any agent or copilot whose output closes tickets, approves code or feeds audit evidence needs checking against system state.
Ask ClarityVendor promises failed on patching, payments and disclosure
The FBI dropped Accenture as a contractor after ShinyHunters breached an Oracle PeopleSoft platform it had left unpatched, Reuters reports via Risky Bulletin. The owner of MonsterCloud is charged with secretly paying $8M in ransoms while billing customers $19M for remediation sold as no-pay. Oracle disclosed a 20M-patient Cerner breach a year late. In each case, the customer relied on a vendor statement it had no way to check.
Ask ClarityRePointing hides malware behind clean GitHub repos
The FakeGit/SmartLoader campaign spans 17,610 GitHub repos and uses RePointing, per Risky Bulletin. The technique deletes a file and points its download link at an older malicious copy, so the current version stays clean. GhostAction compromised 772 more public repos between Aug 31 and Sep 30, and a new Shai Hulud worm wave started from the Tensorlake npm package. A scan of a repo's current state misses RePointing, so your build has to verify the downloaded artifact by hash.
Ask ClarityCredit stress reaches software and AI infrastructure vendors
JPMorgan has marked down private-credit loans to software companies facing AI disruption, which helped prompt a New York Fed review of risk controls at four major banks, per Semafor reporting relayed by The Bear Cave. Distressed leveraged loans rose nearly 90% in 12 months, per Bloomberg data. Firmus Grid, an Nvidia-backed AI infrastructure firm, called off its IPO, per both The Information and The Bear Cave. The borrowers being marked down look like much of the SaaS and security-tool market you buy from.
Ask Clarity
Deep Dives
- ●
AhsayCBS: An Unpatched Chain Aimed at the Copies You Restore From
With no vendor fix and three other zero-days landing the same week, isolation and an independent restore test are the only controls you own until Ahsay responds.
The AhsayCBS chain outranks bugs that already carry CVE numbers. One detail elsewhere in Risky Bulletin's weekly sweep explains why. The IronChain ransomware can botch its own encryption and destroy files permanently. Paying the ransom does not guarantee the data…
3 action items
- ●
Your Agents Report Their Own Success, and Nothing Checks It
A new benchmark for false task claims, a measured agreement bias and write-capable sign-in for consumer bots all mean verification has to come from system state.
Arena has launched an Alignment Index , per TheSequence. It scores models on unauthorized actions and false attribution, plus deceptive completion : a claim to have finished a task that was never done. OpenAI models lead the preliminary rankings. Claude…
3 action items
- ●
Four Supplier Promises Broke, and No Questionnaire Caught Them
A fired contractor, criminal charges against an IR firm, a late breach notice and tightening credit all argue for contract terms with consequences over signed assertions.
The FBI's response to the PeopleSoft breach is the part worth copying. Reuters reports that ShinyHunters took personal and business data on almost all FBI special agents through the platform Accenture had left unpatched. The FBI's answer was to end…
3 action items
The edition continues
Take the signal into the room.
Sign up or log in to read all 3 deep dives in full, plus the final take.
Read the full editionContinue with LinkedIn