Security Stories
BlackX UEFI Bootkit — Active Espionage Campaign (BleepingComputer)
New bootkit exploiting the Baton Drop Secure Boot bypass loads a driver before the OS starts, killing Kaspersky and Avast protection. Survives a full OS reinstall — firmware update is the only mitigation. Active since early 2026 with indicators of a targeted espionage campaign.
Autonomous AI Attack Agent — "Skynet Mode" (The Register)
Symantec documented the first well-evidenced case of offensive AI-on-AI tooling in the wild. The agent hijacks exposed AI model endpoints and runs attack sequences autonomously — up to 100,000 steps with zero human approval. Full instruction set published by Symantec.
Ransomware Week — Qilin, Whitearmor, N0n, Emperador
Qilin claimed Castle Howard Estate (UK) among 14+ victims across six countries. Whitearmor posted unverified claims against JB Hunt ($5M demand) and Whirlpool. Emperador claimed AB InBev ($1M, PKI certs and supplier databases). N0n published healthcare victim data immediately — no negotiation — including an Argentine health insurer (139,000 client records) and a California rheumatology clinic.
Telegram Desktop CVE-2026-107181
High-severity flaw in Telegram Desktop below version 7.2.9: malformed tg:// links inject commands via IPC and can silently exfiltrate local files including session tokens, leading to account takeover. Update to 7.2.9 immediately.
EDR-Killing Driver Market Commoditisation
Actor "garcia_lorca" selling Windows kernel drivers with memory R/W designed to terminate EDR and AV processes. Claims HVCI bypass and FUD status at $1,500 per driver, with weekly new variant additions. Endpoint bypass tooling is no longer reserved for nation-state operators.
HTTP2Shell (CVE-2026-111497) (Aikido Security)
Escalation of the Node2Shell attack chain into Python HTTP/2 libraries. Multiple packages confirmed vulnerable with a broad blast radius across HTTP clients and server frameworks. Pin dependencies if shipping Python web services.
Key Themes
Firmware persistence goes mainstream. BlackX demonstrates that pre-OS persistence — previously a nation-state technique — is now deployed in what appears to be a broader espionage campaign. Fleet-level firmware update management has moved from best practice to urgent operational requirement.
AI as an attacker capability. The Skynet agent story, combined with the NCSC's agentic AI guidance, underscores that AI is no longer only a defensive tool. Exposed AI inference endpoints are now an attack surface. The cost of running complex multi-stage attacks is dropping.
Ransomware diversification. Groups are splitting between negotiation (Whitearmor, Emperador with ransom demands) and immediate publication (N0n). The latter makes remediation significantly harder and patient harm significantly more likely in healthcare cases.
NCSC — Managing the Cyber Risk of Agentic AI
Managing the cyber risk of agentic AI — Toby W, Principal Security Architect, NCSC
The NCSC's interim practical guidance covers seven safeguard areas for agentic AI deployment: scoping required autonomy proportionately, assessing model-level safeguards and their limitations, planning additional controls for higher-risk deployments, conducting threat modelling before deployment, crafting prompts with explicit scope constraints, calibrating human oversight to risk level, and implementing robust sandboxing. Critically, the NCSC frames agentic AI observability as a security operations function — logs and monitoring should feed into SOC workflows, not just application dashboards. Emergency shutdown capability is treated as a hard requirement. Aimed at system designers and operators deploying agentic AI with significant degrees of autonomy.
HaveIBeenPwned Activity
Four new breaches added to HaveIBeenPwned this week:
- Crunchbase (added 14 Oct) — 559,908 accounts; names, employers, job titles, social profiles, phone numbers. High value for spearphishing.
- Sharecare (added 12 Oct) — 318,185 accounts; dates of birth, government IDs, health data, employer details.
- Gîtes de France (added 18 Oct) — 117,574 accounts; booking details, names, addresses, contact data.
- Assurance Retraite (added 20 Oct) — 70,372 accounts; French pension service; government IDs, income levels, family data.
Read the full show notes on apjone.uk