CISO Daily Briefing
ALT CISO BRIEFING
Cloud Security Alliance Intelligence Report
Executive Summary
Today’s theme is vendor trust failing: a compromised ConnectWise Cloud Backup credential has been used to sign in to at least 173 Microsoft 365 tenants, AOMEI’s update servers were tampered with in minutes-long windows, and a malicious npm package hides a shellcode loader. Separately, CISA, FBI and NSA warned that a China-based security vendor doubles as attacker infrastructure. Audit consented third-party M365 apps today and review how much trust your update channels receive.
Overnight Research Output
ConnectWise Cloud Backup Credential Compromise
CRITICAL
Summary: Huntress has reported unauthorized sign-ins in 173 partner and customer tenants using a compromised credential for the ConnectWise Cloud Backup (SkyKick) app. The app holds broad consent over mailboxes, OneDrive, SharePoint, Teams and directory data wherever it is installed, so one credential reaches every tenant. The incident is active. Owner: identity and M365 administrators; confidence: moderate, as reporting rests on a single outlet pending primary-source confirmation.
Key Sources:
AOMEI Backupper Update-Channel Tampering
HIGH URGENCY
Summary: Between May and July 2026, attackers repeatedly altered files on AOMEI’s update servers for five to ten minutes at a time, so only clients that checked in during a window received a backdoor. Google Threat Intelligence Group, Mandiant and ManageEngine’s Threat Analysis Lab disclosed it this week. AOMEI says its servers are fixed, but machines already infected remain compromised. Owner: endpoint security; confidence: moderate, pending primary-source verification.
Key Sources:
MALFEX: Native Node.js Addons as a Loader Path
HIGH URGENCY
Summary: The imgdecode package, uploaded September 30, 2026 and downloaded 979 times, uses a nine-line JavaScript file to load a Windows DLL that fetches encrypted shellcode from GitHub and injects it into dllhost.exe. It belongs to the MALFEX campaign documented by Checkmarx and CloudSEK. Compiled addons evade JavaScript-focused scanners, a particular concern for developer workstations and AI agent environments that install packages automatically. Owner: application security; confidence: moderate.
Key Sources:
Embedded Independent Evaluators: Assurance or Capture?
HIGH URGENCY
Summary: On October 15, 2026 Anthropic reported onboarding six METR staff with employee-level access and publication rights, following a September 18 announcement that Accenture’s Faculty unit would be its first embedded evaluator under a commitment of at least $1 billion from each company over five years. Anthropic also says lab-funded evaluation is not the right long-term model and that no standards yet define evaluator access or reporting. Owner: GRC and third-party risk; confidence: moderate. A reported “White House Accord on Super Intelligence” is unverified and excluded.
Key Sources:
TechCrunch — Anthropic’s First Embedded Evaluator Is Accenture
The Next Web — Anthropic Is Paying the Firm That Will Evaluate It
Security Vendor as Adversary Infrastructure
HIGH URGENCY
Summary: CISA, FBI, NSA and international partners warned on October 8, 2026 that Integrity Technology Group, a China-based cybersecurity company with government ties, acquires or develops cyber tools, hosts infrastructure and compromises networks, with TTPs consistent with Flax Typhoon. Read alongside this week’s ConnectWise, AOMEI and MALFEX incidents, enterprises extend deep trust to vendors, updates and managed apps whose ownership and operating security they cannot verify. Owner: CISO and procurement; confidence: moderate, as details beyond the press release need checking against the advisory text.
Key Sources:
CISA — Joint Warning on China-Based Cybersecurity Company Enabling Threat Actors
Industrial Cyber — CISA, FBI and NSA Expose Integrity Technology Group’s Role
The Hacker News — Hackers Use Compromised ConnectWise Credential
Notable News & Signals
Candiru zero-click spyware delivered via targeted ads
Reported targeting at Al Jazeera. Held in reserve: no confirmed article permalink and no AI relevance.
BlockStrap Magento flaw (CVE-2026-103849)
Held in reserve pending a confirmed permalink; not AI-relevant. Also in reserve: OpenBSD shmat root chain (no CVE) and the Hirudo Android trojan.
Topics Already Covered (No New Action Required)
- Self-replicating small models on IoT devices: Frontier Ready, 2026-10-15.
- CyberXero agent swarms: covered 2026-10-13 and 2026-10-15.
- Record Patch Tuesday and patch volume saturation: covered 2026-10-15.
- Ivanti Connect Secure zero-day chain: covered 2026-10-16.
- Cisco Secure Email Gateway CVE-2026-76519: covered 2026-10-16.
- OpenAI bugging case and frontier lab as target: covered 2026-10-16.
- GPT-6 Astra supply-chain attacks and evaluation containment: covered 2026-10-04 and 2026-10-12.