by sig9
Hacker Wars - November 02, 2026
Your daily dose of infosec chaos
The machines are officially on both sides of the fight today: attackers used agentic AI tooling to breach the firm that half of law enforcement speed-dials after a crypto crime, and a booby-trapped Claude Code extension went hunting on developer machines. We also got classic help-desk social engineering with an AD CS twist, unauthenticated code execution in a popular AI workflow tool, and ransomware crews pounding on NAS boxes. Pour coffee, check your patch queues.
Chainalysis Breached By AI-Driven Attack On Internal Tools
Chainalysis, the blockchain analytics shop that tracks stolen crypto for exchanges and governments, disclosed a breach where attackers used agentic AI techniques to reach its systems and internal tooling. The unnerving part is the tradecraft: recon and lateral movement ran at machine speed against a company whose entire business is catching criminals - imagine being robbed by the concept of automation.
What to do: Treat your internal tooling as a real attack surface - phishing-resistant MFA and tight scoping on anything holding API tokens or sensitive data, plus logging on access to the tools your analysts trust blindly.
Malicious Claude Code Extension Slips Into Cursor Supply Chain
A malicious extension disguised as a Claude Code add-on made it into the Cursor ecosystem, where it performed host reconnaissance and attempted to open a reverse SSH tunnel back to its operators. Developer machines are tier-0 in disguise: one poisoned plugin gets your source repos, your cloud credentials, and your CI/CD pipeline in a single session.
What to do: Vet and pin every editor extension your team installs, review what developer workstations actually run and where they connect outbound, and treat unexplained tunnels as an incident, not a curiosity.
Fake IT Support On Microsoft Teams Leads To Full Domain Compromise
Attackers posing as IT support on Microsoft Teams talked employees into handing over remote control of their PCs, then abused insecure Active Directory Certificate Services settings to mint login certificates for privileged accounts - including one for a domain controller. Help-desk friendliness plus misconfigured AD CS is a straight line to full domain compromise: no malware required, just a phone call and a certificate template nobody audited.
What to do: Verify every IT request out-of-band before granting remote access, and harden AD CS now - lock down enrollment permissions, require manager approval on templates, and alert on certificate requests for privileged accounts.
Unpatched Langflow Servers Offer Free Code Execution
Two critical flaws in Langflow, the open-source tool for building AI agents and workflows, let a remote attacker with no account bypass authentication or run arbitrary code on the server - every release from 1.0.0 through the 1.12 line is affected. These servers tend to sit near model API keys, credentials, and internal dataflows, which makes unauthenticated RCE less “oops” and more “everything is compromised.”
What to do: Patch to the fixed release immediately, and keep Langflow off the open internet - if you cannot patch right now, firewall it to trusted networks only.
Synology NAS Devices Under Siege From C3RB3R Ransomware
Synology is telling customers to update their NAS devices now after a surge of C3RB3R ransomware attacks targeting unpatched appliances. A NAS is ransomware’s favorite target: it holds every backup, family photo, and business archive you own, usually reachable from the internet and rarely patched on schedule.
What to do: Update your NAS firmware today, disable internet-facing admin access, and make sure backups are versioned and stored off-device - ransomware that encrypts your backups is just a very rude data migration.
That’s the chaos for today. Stay sharp out there.
Brought to you by sig9 - sig9.ch | Protecting the unseen, securing the unknown
This bulletin is provided for informational purposes. Contact us for tailored security analysis.