Critical unauthenticated RCE vulnerability in LMCache (LLM caching software) with CVSS 9.8. Allows attacker to run code on cache server without authentication when multiprocess server bound to routable address. Affects versions 0.3.9-0.5.5. No fixed version exists.
Ensure LMCache servers only listen on localhost and are not exposed to network. Review all LMCache deployments for network exposure. Monitor for six additional security reports alleging unauthenticated access to cached data.
Source: JFrog • Published: 2026-10-07
Largest AI supply chain breach of 2026 exposing 2,500+ companies and 434,000 CI/CD pipelines. TeamPCP compromised Trivy scanner, exfiltrated LiteLLM PyPI tokens, published malicious versions 1.82.7 and 1.82.8. Affects AWS, Samsung, Salesforce, Cisco, ServiceNow, Siemens, Airbus, and hundreds more.
Rotate all AWS, GCP, Azure credentials, SSH keys, Kubernetes tokens, CI/CD secrets, and LLM API keys immediately. Conduct forensic analysis of all systems that downloaded compromised packages. Remove malicious packages and investigate downstream activity.
Source: CloudSEK • Published: 2026-10-01
82% of 2,614 MCP implementations prone to path traversal, 43% vulnerable to command injection, only 8.5% use OAuth. Over 40 CVEs disclosed in 2026. Trend Micro found 492 MCP servers exposed to internet with zero authentication. Hundreds of thousands vulnerable servers estimated globally.
Implement authentication on all MCP servers. Remove network exposure for MCP implementations. Audit all MCP deployments for path traversal and command injection vulnerabilities. Apply patches for known CVEs including CVE-2026-33032.
Source: Wiz Research • Published: 2026-10-01
Cryptographic Context Injection vulnerability allows reading developer local files and sending to attacker from single web page. Hides instructions as ciphertext that agent decrypts in own shell. GitHub triage team validated but declined to treat as vulnerability.
Restrict Copilot CLI autopilot mode usage. Implement strict URL allowlisting. Avoid asking Copilot CLI to fetch external URLs with full autonomous permissions. Monitor for GitHub functionality restrictions announcement.
Source: Adversa AI • Published: 2026-10-01
Two flaws in Amazon Q VS Code extension allow malicious repository to achieve arbitrary code execution and cloud credential theft through crafted workspace MCP configuration file. Disclosed June 2026.
Update Amazon Q VS Code extension to latest version. Review workspace configuration files for malicious MCP configurations. Rotate cloud credentials if extension used with untrusted repositories.
Source: Wiz Research • Published: 2026-06-01
Unauthorized access to names, addresses, and personal identification numbers of 8.8 million people (nearly entire Danish population). Breach occurred after unidentified individuals misused private Danish company's legitimate access to Central Person Register (CPR).
Organizations with Danish operations should implement enhanced fraud monitoring. Prepare for increased phishing and social engineering attacks targeting Danish residents. Review access controls for systems with legitimate CPR access.
Source: BleepingComputer • Published: 2026-10-05
Multiple major banks including Shinhan, KB Kookmin, Hana, BNK Busan, Yegaram Savings, and Hyundai Capital breached in early October 2026. Exposed names, phone numbers, annual income, loan limits, resident registration numbers. First confirmed use of AI-powered ARTEX penetration testing framework in large-scale financial attacks.
Financial institutions must audit for ARTEX AI framework indicators. Implement enhanced detection for AI-powered reconnaissance. Review and harden all external-facing applications against automated exploitation tools.
Source: BleepingComputer • Published: 2026-10-04
China-linked Warlock ransomware (aka Longlegs) targeted water utility, telecom provider, regional government, and university by exploiting SharePoint vulnerabilities. Dropped web shells functioning across multiple SharePoint versions for persistent access.
Patch all on-premises SharePoint vulnerabilities immediately. Hunt for web shells in SharePoint installations. Implement file integrity monitoring on SharePoint servers. Review water and telecom critical infrastructure for compromise indicators.
Source: Symantec • Published: 2026-10-02
Qilin ransomware group highly active with multiple victims including Aon plc and EPTISA ES discovered October 7, 2026. Remains one of most active ransomware operators in October 2026 with increasing targeting of backup infrastructure.
Implement immutable backups with offline copies. Ensure backup infrastructure is segmented from production. Test recovery procedures regularly. Monitor for lateral movement to backup systems.
Source: BleepingComputer • Published: 2026-10-07
CVE-2026-105192: Critical unauthenticated RCE vulnerability in LMCache (LLM caching software) with CVSS 9.8. Allows attacker to run code on cache server without authentication when multiprocess server bound to routable address. Affects versions 0.3.9-0.5.5. No fixed version exists.