CISO Daily Briefing – 2026-10-17

Executive Summary

This window is defined by software-trust failures: vendor-operated credentials, update channels, and package feeds that were trusted once approved. A compromised ConnectWise Cloud Backup credential is being used against 173 Microsoft 365 tenants in an active incident. AOMEI Backupper’s update servers were tampered with in minutes-long windows, and a MALFEX npm package hides a native shellcode loader. A CISA/FBI/NSA advisory on a China-based security vendor reinforces the need to review third-party trust now.

ConnectWise Cloud Backup: 173 M365 Tenants Hit

CRITICAL

A compromised vendor credential for the ConnectWise Cloud Backup (SkyKick) app is being used to sign in to at least 173 Microsoft 365 tenants. The incident is active.

App holds broad consent over mail, OneDrive, SharePoint, Teams
One credential works across every consenting tenant
Audit and contain consented third-party apps now

AOMEI Backupper Update Channel Tampered

HIGH

Attackers altered AOMEI’s update servers for five-to-ten-minute windows between May and July 2026, delivering a backdoor only to clients that checked in.

Disclosed by GTIG, Mandiant, and ManageEngine
Short windows evade infrequent integrity sampling
Already-infected machines remain compromised

MALFEX: Native npm Addon Shellcode Loader

HIGH

The imgdecode npm package (979 downloads) loads a Windows DLL that fetches encrypted shellcode from GitHub and injects it into dllhost.exe.

Compiled addons evade JavaScript-focused scanners
Part of the MALFEX campaign (Checkmarx, CloudSEK)
Developer workstations and AI agents auto-install packages

Embedded AI Evaluators: Assurance or Capture?

HIGH

Anthropic onboarded six METR staff with employee-level access and publication rights, after embedding Accenture’s Faculty unit, in a live test of AI assurance credibility.

Anthropic itself says lab-funded evaluation is not the right long-term model
No standards yet define evaluator access or reporting
Relevant to CSA STAR and AI audit work

Security Vendor as Adversary Infrastructure

HIGH

CISA, FBI, and NSA warned on October 8 that China-based Integrity Technology Group hosts infrastructure and compromises networks, with TTPs consistent with Flax Typhoon.

Same trust pattern as this week’s ConnectWise, AOMEI, and MALFEX incidents
Treat state-linked vendors, MSPs, and backup tools as one exposure
Advisory details need verification against advisory text

Overnight Research Output

ConnectWise Cloud Backup Credential Compromise: One Vendor App, 173 Microsoft 365 Tenants

CRITICAL URGENCY

Summary: Huntress has confirmed unauthorized sign-ins in 173 partner and customer tenants using a compromised credential for the ConnectWise Cloud Backup (formerly SkyKick) app. The app holds broad consent over mailboxes, OneDrive, SharePoint, Teams, and directory data, and the single credential works against every tenant where it is installed. The incident is ongoing.

Key Sources:

The Hacker News — Hackers Use Compromised ConnectWise Credential to Access Microsoft 365 Tenants

Why This Matters: Multi-tenant OAuth app credentials are a single point of failure, and CSA has no detection or containment guidance for consented third-party apps in M365 yet.

Read Full Research Note

AOMEI Backupper Update-Channel Tampering: Minute-Long Windows That Delivered a Backdoor

HIGH URGENCY

Summary: Attackers repeatedly modified files on AOMEI’s update servers for five to ten minutes at a time, so only clients that checked in during a window received a backdoor. AOMEI says its servers are fixed, but infected machines remain compromised. The short-window technique evades update-integrity monitoring that samples infrequently.

Key Sources:

The Hacker News — Attackers Tampered with AOMEI Backupper Update Servers

Why This Matters: CSA supply chain coverage centers on package registries and AI toolchains; vendor update-channel integrity (signing, pinning, transparency logs) for endpoint software is a gap.

Read Full Research Note

MALFEX: Native Node.js Addons as a Shellcode Loader Path in npm

HIGH URGENCY

Summary: The imgdecode package, uploaded September 30, 2026, uses a nine-line JavaScript file to load a DLL that pulls encrypted shellcode from GitHub and injects it into dllhost.exe. Compiled addons evade JavaScript-focused static scanners, which matters for developer machines and AI agent environments that install packages automatically.

Key Sources:

The Hacker News — MALFEX npm Package imgdecode Hides Windows Shellcode Loader

Why This Matters: Earlier CSA coverage addresses JavaScript-level npm worms; binary payloads inside packages and the scanner blind spot they create are not covered.

Read Full Research Note

Embedded Independent Evaluators: Assurance or Capture? Reading Anthropic’s METR, SecureBio, and Accenture Arrangement

HIGH URGENCY

Summary: On October 15, 2026 Anthropic reported onboarding six METR staff with employee-level access and publication rights, following a September 18 announcement that Accenture’s Faculty unit would be its first embedded evaluator. Anthropic acknowledges that lab-funded evaluation is not the right long-term model and that no standards yet define evaluator access or reporting.

Key Sources:

TechCrunch — Anthropic’s First Embedded Evaluator Is Accenture

The Next Web — Anthropic Is Paying the Firm That Will Evaluate It

Why This Matters: CSA has not analyzed evaluator independence, funding conflicts, access scope, or what enterprises should require from a frontier vendor’s evaluation evidence.

View Full Research Note

When the Security Vendor Is the Adversary’s Infrastructure: Integrity Technology Group and Vendor-Trust Concentration

HIGH URGENCY

Summary: CISA, FBI, NSA, and international partners warned on October 8, 2026 that Integrity Technology Group, a China-based cybersecurity company with government ties, develops cyber tools, hosts infrastructure, and compromises networks. Read alongside this week’s vendor-channel incidents, enterprises extend deep trust to vendors whose ownership and operating security they cannot verify.

Key Sources:

CISA — Warning on China-Based Cybersecurity Company Enabling Threat Activity

Industrial Cyber — CISA, FBI, and NSA Expose Integrity Technology Group’s Role

Why This Matters: CSA does not yet address security-vendor provenance and state nexus as a third-party risk criterion, or how AICM and STAR assurance would handle it.

View Full Research Note

Notable News & Signals

Candiru Zero-Click Spyware via Targeted Ads

Candiru spyware reportedly delivered via targeted ads at Al Jazeera. Source permalink unconfirmed; held in reserve.

Source: intelligence scan (article link not confirmed)

BlockStrap Magento Flaw (CVE-2026-103849)

A Magento flaw in BlockStrap was identified in the scan. Source permalink unconfirmed; held in reserve.

Source: intelligence scan (article link not confirmed)

OpenBSD shmat Root Chain and Hirudo Android Trojan

An OpenBSD shmat root chain (no CVE assigned) and the Hirudo Android trojan were flagged. Not AI-relevant; held in reserve.

Source: intelligence scan (article link not confirmed)

Topics Already Covered (No New Action Required)

Self-replicating small models on IoT devices: Frontier Ready, 2026-10-15
CyberXero agent swarms: 2026-10-13 and 2026-10-15
Record Patch Tuesday and patch volume saturation: 2026-10-15
Ivanti Connect Secure zero-day chain: 2026-10-16
Cisco Secure Email Gateway CVE-2026-76519: 2026-10-16
OpenAI bugging case and frontier lab as target: 2026-10-16
GPT-6 Astra supply-chain attacks and evaluation containment: 2026-10-04 and 2026-10-12

← Back to Research Index