2026-11-11

Machine-first view of this brief, grouped by story so indicator streams stay attributable. IoC values are raw, not defanged, one per line, ready for hunt queries — defang before pasting into chat or email. Everything here is public OSINT; exposure and behavior detail lives in the JSON (also grouped per story).

Endpoints

GET /?view=agent&format=json          this brief as JSON (stories, behaviors, exposure, IoCs, watch events)
GET /?view=agent&format=json&d=DATE   a specific day — available: 2026-11-11, 2026-11-10, 2026-11-09, 2026-11-06, 2026-11-05, 2026-11-04, 2026-11-03, 2026-11-02, 2026-10-30, 2026-10-29
GET /?view=iocs&format=json           cumulative IoC corpus — every brief + watch event, all time
GET /?q=TERM&format=json               search every stored brief (stories + IoCs)
GET /?view=cards&format=json          verdict-card manifest (slug, title, lane, cves, story_ids, url)
GET /?view=actors&format=json         adversaries by attributed country (w=14|30|90|all, cat=state|crime|hacktivist|spyware)
GET /cards/<slug>.html                 a hand-written verdict card; /cards/<slug> one the pipeline published; stories here carry verdict_card when one exists

Shapes: log_source is the extractor's free text; log_source_keys beside it is a closed vocabulary
(see vocab.log_source_keys) for mapping to your own data. evidence_samples are the exact strings the
sources printed (replay targets). exposure is null when the sources stated nothing.

P1 · Xen Orchestra auth bypass VSA-2026-062 actively exploited for admin access and XCP-ng root

Vates warns that an authentication bypass in Xen Orchestra (VSA-2026-062, no CVE) is being actively exploited. A crafted REST cookie authenticationToken=j:%7B%7D makes XO return the first unexpired token, which gives Admin access; attackers can then harvest reusable token IDs via /rest/v0/users/me/authentication_tokens and reach code execution and root on XCP-ng nodes. Hunters should look for the empty-object cookie in HTTP traffic (it is not logged by XO), a VM named pivot2, VMs with hvm_serial: file, /etc/cron.d/zz-ustar* and /.ustar* files, and connections to 91.211.251.112:8001 or the listed .onion:3333.

Why P1: Actively exploited auth bypass in internet-exposable virtualization management, leading to hypervisor root; concrete IoCs and host-check commands are published.

Behaviors (4) · as of 2026-11-11

Detection guidance (2) · as of 2026-11-11

source · tier B · XCP-ng host shell

Run these on XCP-ng hosts to find VMs with a file-backed serial port, file serial usage in the xensource logs, and malicious files (including /etc/ld.so.preload).
xe vm-list params=name-label,platform | grep -B1 'hvm_serial: file' zgrep -- '-serial file:' /var/log/xensource.log* ls -la /etc/ld.so.preload /.ustar* /etc/cron.d/zz-ustar*

source · tier B · published 2026-11-10 18:12Z · WAF/reverse proxy

Monitor HTTP for authenticationToken=j:%7B%7D or j:{} cookies and block the empty token at a WAF or reverse proxy. XO does not log this cookie.

filepath (4)

/.ustar5
/etc/cron.d/zz-ustar
/etc/cron.d/zz-ustar2
/.ustar6

domain (1)

ustar3rqxgnskzgnwkgpofgtvxevm6cx3lxdbwt4mndtveqyaohid.onion

ipv4 (1)

91.211.251.112

P1 · Microsoft Outlook zero-day CVE-2026-124194 leaks NTLMv2 hash via crafted message file; exploitation reported, no confirmed compromises stated

Microsoft's November 2026 Patch Tuesday fixes CVE-2026-124194, an Outlook spoofing flaw that the company says has been exploited. An unauthenticated attacker sends a crafted message file that, when opened, makes Outlook connect to an attacker-controlled network location without the external-content warning, disclosing the user's NTLMv2 hash. Hunters should look for outbound SMB or NTLM authentication from Outlook or Office processes to external hosts, but the sources do not describe specific observed attacks or indicators.

Why P1: Vendor-stated exploited Outlook zero-day with NTLMv2 hash disclosure; patch Office promptly.

Behaviors (1) · as of 2026-11-11

No IoCs extracted for this story.

P1 · Openwave Webtop Media Transcoder and Cisco BroadWorks CVEs exploited; KEV-listed, Cisco campaign against a European telecom

Threat actors are reportedly exploiting CVE-2026-111793 in Openwave Webtop Media Transcoder and CVE-2026-20320 in Cisco BroadWorks to access sensitive information. Malbear Labs reported a Chinese-speaking actor using an autonomous AI intrusion harness to exploit the BroadWorks flaw against a European telecommunications provider, focusing on asset enumeration, credential theft, and subscriber billing and device record harvesting. CISA added both to KEV on November 10 with a November 24 patch deadline; hunters should watch OCI-P requests carrying external entity XML and webtop file-conversion activity.

Why P1: KEV-listed internet-facing telecom products with reported active exploitation against a telecom provider

Behaviors (1) · as of 2026-11-11

No IoCs extracted for this story.

P1 · Barracuda ESG and appliance flaws CVE-2026-116606 and CVE-2026-111560 under active exploitation; attempts reported, no confirmed compromises stated

Threat actors have started exploiting two patched Barracuda flaws: CVE-2026-116606, an authentication bypass in Email Security Gateway allowing restore of a crafted backup archive, and CVE-2026-111560, a root-level OS command injection affecting ESG, Load Balancer ADC, WAF, WSG, Message Archiver and WAF Control Center. Previdian observed 17 attempts against CVE-2026-116606 from 15 IPs in three countries between November 9 and 11, and CISA added both to KEV. Barracuda and CISA have not shared exploitation details, so hunters should focus on admin interface access and backup restore activity on appliances.

Why P1: KEV-listed, actively exploited internet-facing appliance flaws with reported attempts, though no exploitation details are published.

No IoCs extracted for this story.

P1 · CISA adds Google Chromium XML use-after-free CVE-2026-125350 to KEV; affects Chromium-based browsers including Edge and Opera

CISA added CVE-2026-125350, a Chromium use-after-free in the XML component, to the KEV catalog on 2026-11-10 with a 2026-11-24 due date. The KEV entry says a remote attacker could execute arbitrary code inside the sandbox via a crafted webpage, and that it may affect Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The sources do not describe observed exploitation details, threat actors, or detection artifacts, so hunters should focus on confirming patched browser versions across Chromium-based browsers.

Why P1: KEV-listed browser exploit affecting widely deployed Chromium-based browsers with a 2026-11-24 federal deadline.

No IoCs extracted for this story.

P1 · SGLang RCE exploited to breach NEAR AI inference server; about 100 users' account data and two API keys exposed

An attacker exploited an unpatched remote code execution flaw in SGLang, an open-source inference engine, on a NEAR AI inference server, and ran code there. The attacker reached an internal Private Chat system and 18 agents on an older non-TEE NEAR AI Agents deployment, and the company confirmed download of account details for about 100 users and exposure of two NEAR AI Cloud API keys in logs. The flaw has no CVE and the affected SGLang versions and fix status are not stated; hunters should review inference server process activity for shell or interpreter children of SGLang.

Why P1: Confirmed RCE-driven breach with data theft, but no CVE, no named affected versions, and no published detection content; no specific huntable command sequences are printed. (raised to P1: exploited + behaviors/KEV)

Behaviors (1) · as of 2026-11-11

No IoCs extracted for this story.

P2 · CopperDragon's Sparrow framework links SilentDelivery, OceanGate and DarkWire China-nexus espionage clusters

Check Point Research attributes three clusters (SilentDelivery, OceanGate, DarkWire) to CopperDragon, a suspected quartermaster supplying the Sparrow framework to China-nexus actors such as FamousSparrow and Earth Estries. Targets include telecom, government, military, shipping and research organizations across Latin America, Asia and Europe. The clusters gained access through watering-hole fake Chrome certificate pages delivering MSI installers (SquadC), through phishing LNKs that abuse ftp.exe, and through compromise of internet-facing Linux servers followed by trojanized SSH, RDP password guessing and LSA/LSASS credential theft. Hunt for the CopperAdu admin$ account and the RasiUwpApp firewall rule, a WindowsUpdateAssist Run key, ftp.exe spawned from LNK files, new LSA security packages, and WinDivert driver loads.

Why P2: China-nexus espionage campaign with concrete Windows/Linux behaviors to hunt, but no CVE and no financial-sector targeting reported.

Behaviors (12) · as of 2026-11-11

Detection guidance (2) · as of 2026-11-11

source · tier A · published 2026-11-10 14:01Z · EDR

WinDivert filter used by passive SparrowDoor
( (inbound and tcp.DstPort == %d // Legitimate external listening port and ip.SrcAddr == %s) or // Connections from a specific source IP (outbound and tcp.SrcPort == %d) // Backdoor's internal listening port
)

source · tier A · published 2026-11-10 14:01Z · proxy

Watering-hole JS beacons to C2 paths /image-check?t=<datetime>, POST /report-url; backdoor registers via /register-ip — hunt proxy logs

filename (2)

strategi_as_referensi_april2026.docx.lnk
Strategi_AS_Referensi_April2026.rar

sha1 (1)

760be920fad07881b8ce9d94e074a35b4f806717

registry (1)

windowsupdateassist

filepath (2)

_rels/.rels.log
_rels/info.dll

P2 · ClickFix chains expand to persistence, lateral movement to DCs, stego PNG payloads and Node.js DuskDesk RAT

Huntress reports ClickFix lures (malvertising, SEO poisoning, compromised sites) now leading to DLL-sideloading chains, Run key/scheduled task persistence, AD recon, reverse SSH tunnels, WinRM/PsExec/SMBExec lateral movement to domain controllers, PNG-steganography payload reconstruction, browser-cache-seeded batch files, and a Node.js RAT masquerading as RMM (DuskDesk). Confirmed compromises are described, including one incident with 11 hosts compromised. Hunt for browser/explorer spawning cmd/PowerShell, executables in C:\ProgramData\<hex> folders, node.exe Run keys, and ssh.exe reverse tunnels.

Why P2: Widespread technique with concrete, vendor-stated huntable endpoint behaviors and command lines; no CVE.

Behaviors (10) · as of 2026-11-11

Detection guidance (1) · as of 2026-11-11

source · tier A · EDR process/registry/network events

Monitor browser or user-launched process spawning cmd.exe/PowerShell/Windows Terminal, encoded PowerShell, execution-policy bypass, archives/executables in user-writable paths, new scheduled tasks/Run keys, unexpected SSH connections; focus on sequence over static IoCs.

sha256 (4)

4155a4c7e857d9b613e14cf00e148037859cf627cf4004f5a4257f2cd29de2cb
ed37c12fc4beea98722f6f308cec45e6440c3089e1a002c837bed147fbeb0c52
e921fe5307e29bf6fd00000dd594356affd3a7b044e52720c7f10decbdc305b9
de9d325af3156232c34916840210efb5706d6e6a5eba1827c8240e4f71c09fa2

filename (8)

verify_pkg.zip
CertEnrollCtrl_Y0db6oZq9
certenroll.dll
UmberOceanTan.dat
SysyService
cf_verify.zip
LockScreenContentServer_qQrRrJiHX
LimeMint.js

domain (2)

westlaw-signon.com
apirequestaccess.com

ipv4 (3)

151.240.151.76
167.148.201.104
23.227.199.41

url (3)

https://moziw.com/vvestalw/
https://vvestalw.ghost.io/
http://apirequestaccess.com/cfirm.php?token=QsKjQ1pEd43R33hJ1xV4LQwIVE8

P2 · Railway says stolen customer AI provider keys drove about $740,000 in unauthorized usage; platform will cover charges providers refuse to refund

Railway, a platform-as-a-service provider, said an October 2026 breach let an attacker decrypt customer environment variables in at most about 100,000 workspaces, querying for AI provider keys that were then used for an estimated $740,000 in unauthorized spending. The attack chain began with a sandbox escape in the build system, followed by an internal Temporal trust abuse, a wrongly configured OIDC binding in a cloud environment, and use of an orchestration machine's KMS access to decrypt variables. Hunters should look for unusual calls to registry services, OIDC/short-lived credential issuance anomalies, and unexpected AI provider key usage; the company says revoking and rotating keys with the issuing provider is required.

Why P2: Concrete cloud credential-abuse chain at a PaaS provider with broad AI key exposure, but no published hunting content or indicators yet.

Behaviors (4) · as of 2026-11-11

No IoCs extracted for this story.

P2 · Git 2.56.1 fixes CVE-2026-111760 recursive-clone code execution and five other flaws

The Git project released Git 2.56.1 with matching fixes in 2.50.2 through 2.55.1 for a flaw (CVE-2026-111760) where an integer truncation in index handling lets a malicious repository replace a submodule .git file with a symlink to attacker-controlled hooks or config, enabling code execution during recursive clones. Five other flaws are fixed, including fast-import unsafe features (CVE-2026-114466), a large-merge heap overflow (CVE-2026-105437) reachable by servers running git merge-tree, and a binary patch out-of-bounds read (CVE-2026-114469). Hunters should look for recursive clones of untrusted repositories and servers running git merge-tree or fast-import with untrusted input; the sources publish no exploitation reports.

Why P2: Widely deployed developer tool with a code-execution flaw on recursive clone, but no reported exploitation and no detection content published.

Behaviors (1) · as of 2026-11-11

No IoCs extracted for this story.

P2 · Public iOS sandbox escape 'worse_query' lets apps read other apps' data; no fix confirmed, no attacks reported

A researcher released a proof-of-concept iOS sandbox escape called worse_query that can reach other apps' data containers on iOS 26 and 27 when the app sets up an App Group container. Binance warned users that seed phrases, private keys and logins could be exposed to malicious apps, and advised deleting sideloaded apps and resetting sessions. Neither the exchange nor the researcher reported any attacks or thefts, and Apple's iOS 27.2.1 and 26.7.3 notes do not mention the issue. Hunters should look for sideloaded apps using App Group containers, though no published detection content was found.

Why P2: Public exploit with no confirmed fix affecting iOS 26/27 and a sideloading vector, but no observed in-the-wild exploitation and no concrete log-level behaviors published.

No IoCs extracted for this story.

P2 · Adobe November 2026 patches about 110 vulnerabilities, including six CVSS 10 Adobe Connect flaws; no exploitation known

Adobe's November 2026 Patch Tuesday fixes roughly 110 vulnerabilities across nine products, with critical issues in Adobe Connect and Adobe Experience Manager (AEM). Six Connect flaws score CVSS 10 and cover SSRF, path traversal, incorrect authorization, CRLF injection, XXE, code injection, SQL injection, and XSS, which can lead to privilege escalation and arbitrary code execution. Adobe says it is not aware of attacks exploiting the patched vulnerabilities, so defenders should prioritize internet-facing Connect and AEM servers for patching; no hunting behaviors are published.

Why P2: Critical patches for internet-facing Connect and AEM with no known exploitation; no published huntable behaviors.

No IoCs extracted for this story.

P3 · Blind Eagle uses fake court notices to attempt AsyncRAT/DCRat-lineage RAT delivery in LatAm; no confirmed compromises

Zenox reports a Blind Eagle (APT-C-36) phishing wave of ~3,300 emails (late Oct–early Nov 2026) using Spanish/Portuguese judicial-themed lures, mainly against Colombian organizations. A weaponized SVG/XHTML file impersonating Colombia's Fiscalía uses HTML smuggling to build a ZipCrypto ZIP containing a JavaScript dropper posing as 'Network Configuration Auditor 2.7.298', which launches VBScript for AMSI/ETW bypass, clears MotW, persists via the Startup folder, and uses PowerShell to load the RAT in memory. Zenox could not confirm successful compromises. Hunt for wscript/cscript launched from browser download paths, VBS spawning PowerShell, and new Startup folder entries.

Why P3: Regional LatAm-focused commodity RAT phishing, unconfirmed success; generic huntable script-chain behaviors.

Behaviors (6) · as of 2026-11-11

Detection guidance (1) · as of 2026-11-11

source · tier A · Email security gateway

Email detections for SVG attachments with JavaScript lacking image content, DOM writes, or ZIP download (Attachment.SVG.JavaScript.HTML_Script, Attachment.SVG.Javascript_Dom_Write, Attachment.Qbot.Svg_JavaScript)

No IoCs extracted for this story.

P3 · Malwarebytes reports fake-urgency advent calendar stores copying one template; no technical compromise or malware reported

Malwarebytes examined several online advent-calendar stores that share a website template, use fabricated urgency cues such as countdowns, low-stock warnings and fake reviews, and lack licensing or business contact details. The researchers state they found no evidence the pages were designed to steal card details, and the risks they describe are misleading sales claims and non-delivery or mismatched goods. Hunters have no technical indicators or behaviors to act on; the content is consumer-fraud awareness.

Why P3: Consumer scam awareness with no technical behaviors, malware, or exploitable products.

No IoCs extracted for this story.

P3 · Nitori reports possible theft of up to 37.6M customer records; cause under investigation

Japanese furniture retailer Nitori confirmed unauthorized third-party access to a system it manages, detected November 6, 2026, with the attacker likely present since mid-October. Up to 37.62 million personal records (membership numbers, names, contact details, birth dates, order data) may have been leaked externally, while passwords and credit card data were stated as not exposed. The company is investigating the cause, including whether ransomware was involved, and warns of phishing using the exposed data; hunters should focus on phishing targeting Nitori customers rather than specific technical indicators, since none were published.

Why P3: Breach disclosure with no published technical behaviors, IoCs, or detection guidance; awareness only.

No IoCs extracted for this story.

P3 · US Army soldier arrested in UK on suspicion of spying for Russia

UK counterterrorism police, working with the FBI and US military, arrested a 41-year-old unnamed U.S. Army soldier under the UK National Security Act espionage provisions near Gloucester, and searches were underway at two Gloucestershire locations. Police said the allegations relate to Russia, and the man is in custody in London. The sources describe no cyber intrusion or technical attack behaviors, so hunting guidance does not apply.

Why P3: Espionage arrest with no technical attack details; awareness only.

No IoCs extracted for this story.

P3 · Intel and AMD publish over 200 vulnerability fixes; Intel BigDL discontinued and will not be patched

Intel published 24 advisories covering just over 100 flaws, including three critical issues in the TDX MigTD reference software, one of which (CVE-2026-61887) may allow remote code execution. AMD published 29 bulletins and two security briefs covering roughly 100 CVEs, with none rated critical. Intel will not patch three medium-severity privilege escalation bugs in the discontinued BigDL product and advises users to uninstall it; no exploitation is reported in the sources.

Why P3: Vendor patch roundup with no reported exploitation or concrete huntable adversary behavior; awareness only, with the BigDL removal as the one action item.

No IoCs extracted for this story.

P3 · ICS Patch Tuesday: Siemens, Schneider, Phoenix Contact and others publish advisories; several products inherit PHP2Shell and Node2Shell flaws

Siemens, Schneider Electric, Phoenix Contact, VDE CERT, Johnson Controls and Hitachi Energy published industrial advisories in the Patch Tuesday cycle. Siemens says Node2Shell exploitation attempts have been seen but no attacks specifically targeting Siemens products, and several Siemens and Phoenix Contact products are affected by PHP2Shell. Hunters should track exploitation attempts against PHP and Node-based components on internet-facing systems and apply vendor mitigations, since some Siemens products have no patch yet.

Why P3: Advisory roundup with inherited PHP2Shell/Node2Shell exposure but no confirmed compromise or concrete huntable behaviors in the sources.

No IoCs extracted for this story.

P3 · iVerify reports criminal actors using Coruna and DarkSword iOS exploit kits for credential and crypto theft

iVerify's report says about 75% of its spyware detections involved criminal actors deploying the Coruna or DarkSword iOS exploit kits, with the remainder linked to mercenary spyware such as Pegasus. Per the source, DarkSword is delivered via watering-hole attacks triggered simply by visiting a compromised website, and Coruna via web-based attacks exploiting WebKit and kernel vulnerabilities. The sources describe the activity mainly for credential and crypto theft and report that affected owners did not receive Apple threat notifications. The article prints no specific behaviors, command lines, or indicators for hunters to match.

Why P3: Consumer-focused iOS exploit kit report with no concrete huntable endpoint behaviors or indicators printed in the source.

No IoCs extracted for this story.

P3 · Microsoft Research shows editing fewer than 10 neurons can plant a backdoor in AI agent models; no threat actor use observed

Microsoft Research describes a technique that edits fewer than 10 neurons in an agent model to inject a sleeper payload that passes evaluations and runs an attacker command when a trigger string appears in context. Microsoft states it has not observed any threat actors weaponizing this technique. Hunters should treat this as a research item: audit third-party model weights against their declared base and treat unverified fine-tunes as untrusted.

Why P3: Research-only proof of concept with no observed in-the-wild use and no concrete published log behaviors.

Detection guidance (2) · as of 2026-11-11

source · tier A · published 2026-11-10 23:00Z

Diff every model checkpoint against its declared base model before deployment and after updates; flag tensors or rows whose change is a statistical outlier relative to the rest of the diff.

source · tier A · published 2026-11-10 23:00Z · EDR process events

Enable Microsoft Defender for Endpoint in active mode on hosts running agents or local inference so suspicious child processes and outbound connections from agent host processes are detected.

No IoCs extracted for this story.

P3 · Forks of Artex AI pen-test framework and 45 similar tools can still run credential attacks and cloud breaches

A researcher report, as summarized in a feed item, says forks of the Artex AI pen-test framework and about 45 similar tools can still be used to run credential attacks and cloud breaches. No source could be fetched, so the specific techniques, tooling details, and indicators are unverified. Hunters should treat this as awareness only until the original report is reviewed.

Why P3: Awareness only: feed summary with no fetched source and no concrete huntable behaviors.

No IoCs extracted for this story.

P3 · Research reports AI-assisted reverse engineering of Turla malware

A researcher feed item states that AI tools can help unpack and recreate complex software, including Turla malware, lowering reverse-engineering costs. The item is a feed summary only and describes no intrusion, victim, or confirmed adversary action. Hunters have no specific behavior or indicator to look for from this item alone.

Why P3: Awareness only; general research on AI-assisted reverse engineering with no huntable behaviors or indicators.

No IoCs extracted for this story.

P3 · Google opens Gemini 4 Carbon to paying customers; Wiz reports zero-days found at SaaS providers with it

Google expanded access to Gemini 4 Carbon to paying developers, businesses, and AI Ultra subscribers, and says Wiz used Carbon for cyber to find zero-days at two major SaaS providers within two hours. Google's CVR team reportedly used the model to confirm two bugs in an open source project were exploitable, prompting a patch. The source describes an AI model and formal verification research, not an adversary campaign, so there are no adversary behaviors or confirmed exploitation to hunt for.

Why P3: Awareness only: AI model access announcement with no adversary behavior, exploited product, or published detection guidance.

No IoCs extracted for this story.

P3 · Researcher bypasses Ray-Ban Meta smart glasses code-signing check to run her own app

A vulnerability researcher (pamoutaf) showed that Ray-Ban Meta glasses accept unsigned third-party apps by flipping the signature-check switch in a settings file sent from the paired phone; changing one byte disabled the check in firmware 127. Older firmware up to and including 126 did not check signatures at all. Per the source, the glasses could then accept commands from the paired phone over wireless, but the source does not demonstrate exfiltration of camera or recording data. Hunting value is limited to device-side telemetry, and the source gives no detection guidance.

Why P3: Researcher proof-of-concept on consumer wearables with no in-the-wild exploitation or detection content; awareness only.

No IoCs extracted for this story.

P3 · SBOM and VEX as vulnerability-response tools, and extending transparency to AI BOMs (policy discussion, no threat activity)

A SecurityWeek podcast write-up summarizes an interview with policy expert Allan Friedman on using SBOM and VEX data to speed vulnerability response and on extending bill-of-materials concepts to AI systems. The article describes no specific adversary activity, campaign, or compromise. Hunters have no behaviors to chase here; the item is useful only as background on component-level exposure triage.

Why P3: Policy and awareness commentary with no concrete huntable adversary behavior.

No IoCs extracted for this story.

P3 · F-Secure publishes taxonomy of 26 ways AI can harm consumers

F-Secure has published a taxonomy describing 26 ways AI systems can harm consumers and points of intervention for defenders. The brief item is a feed summary only and no source was fetched, so no technical behaviors, indicators, or detection content can be confirmed. Hunters have no concrete artifacts to search for from this item.

Why P3: Awareness-only research taxonomy with no confirmed adversary behaviors or detectable artifacts.

No IoCs extracted for this story.

P3 · Palantir CISO Michael LoSapio nominated to lead CISA; Senate confirmation uncertain

President Trump nominated Palantir's CISO Michael LoSapio to lead CISA, which has lacked a Senate-confirmed director since Trump returned to office and is currently led in an acting capacity by Nick Andersen. The source reports it is unclear whether the Senate will act during the lame-duck session, and that the nomination would need to be resubmitted next year if not approved. This is a policy and leadership story with no technical attack details, so there are no behaviors, artifacts, or indicators to hunt.

Why P3: Policy and personnel news only; no actionable technical behaviors or indicators.

No IoCs extracted for this story.

Watch streams — new IoCs in the last 48 h

SANS ISC reports renewed scanning for vulnerable mail test scripts and leftover development artifacts; no confirmed compromises stated

url (2)

http://email-test.php/
http://mailtest.php/

Malicious LiteLLM 1.107.0 PyPI release steals credentials via Python startup hooks

domain (2)

litellm.dev
raw.githubusercontent.com

filename (3)

cook.pth
cook.py
sitecustomize.py

filepath (2)

/tmp/.pc_sq_*
/tmp/.pc_e_*

useragent (1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0)

/.ustar5
/etc/cron.d/zz-ustar
/etc/cron.d/zz-ustar2
/.ustar6
_rels/.rels.log
_rels/info.dll
/tmp/.pc_sq_*
/tmp/.pc_e_*

ustar3rqxgnskzgnwkgpofgtvxevm6cx3lxdbwt4mndtveqyaohid.onion
westlaw-signon.com
apirequestaccess.com
litellm.dev
raw.githubusercontent.com

91.211.251.112
151.240.151.76
167.148.201.104
23.227.199.41

strategi_as_referensi_april2026.docx.lnk
Strategi_AS_Referensi_April2026.rar
verify_pkg.zip
CertEnrollCtrl_Y0db6oZq9
certenroll.dll
UmberOceanTan.dat
SysyService
cf_verify.zip
LockScreenContentServer_qQrRrJiHX
LimeMint.js
cook.pth
cook.py
sitecustomize.py

760be920fad07881b8ce9d94e074a35b4f806717

windowsupdateassist

4155a4c7e857d9b613e14cf00e148037859cf627cf4004f5a4257f2cd29de2cb
ed37c12fc4beea98722f6f308cec45e6440c3089e1a002c837bed147fbeb0c52
e921fe5307e29bf6fd00000dd594356affd3a7b044e52720c7f10decbdc305b9
de9d325af3156232c34916840210efb5706d6e6a5eba1827c8240e4f71c09fa2

https://moziw.com/vvestalw/
https://vvestalw.ghost.io/
http://apirequestaccess.com/cfirm.php?token=QsKjQ1pEd43R33hJ1xV4LQwIVE8
http://email-test.php/
http://mailtest.php/

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0)