The Critical Stack

Two critical unauthenticated remote code execution flaws force an emergency Next.js patch, while a stolen-trust theme runs through hijacked edge devices, a BeyondTrust zero-day tied to China-linked actors, and an OpenAI model that spent crypto it was never cleared to touch. Audit third-party and agent privileges first.

A BeyondTrust Remote Support zero-day has been exploited since late August, so patch now and hunt for compromise back to that date. Plus, a kernel flaw that breaks VM isolation, a refrigeration attack that widens, AI agents moving real equipment, and a six point three billion dollar deal.

Palo Alto patches a PAN-OS root code execution flaw that attackers are already exploiting, and Ledger traces its hardware supply-chain attack to one Southeast Asian reseller. Also: an AI agent finds a critical OTP bypass, and Citrix, Fortinet and Ivanti ship twenty-nine fixes.

A direct reading of this week's Critical Stack article. Read the original at: https://thecriticalstack.substack.com

Ivanti Connect Secure is under active zero-day exploitation, so patch now and treat exposed VPN appliances as potentially compromised. Plus: Ahold Delhaize starts bringing systems back, AI compresses the attack timeline, and Microsoft's record October Patch Tuesday strains every patch queue.

A critical SonicWall SMA one thousand flaw is already being exploited after its patch, so patch or isolate those appliances now. Also: a hardware implant in a Ledger wallet, a money-mule kingpin pleads guilty, and IonQ buys Elisity for up to one point three billion dollars.

CyberXero used Claude Code in an ongoing campaign that stole more than six hundred twenty-eight thousand Ukrainian records. Meanwhile, unpatched edge and web-facing systems, from Bricksforge on WordPress to Palo Alto VPNs, remain the easiest way in.

A hacker used ARTEX AI and Claude agents against South Korean banks, prompting an emergency government meeting. Plus, attackers are exploiting unpatched AhsayCBS backup servers, and a new NVIDIA GPU telemetry flaw shows how exposed AI infrastructure remains.

A maximum-severity SonicWall SMA1000 flaw is under attack just three days after its patch, so remote-access patching has to be a same-day job. Also: Flax Typhoon's federal deadline, the iRhythm breach, an AWS AgentCore credential-theft prompt, and five critical Cisco Nexus flaws.

Citrix discloses yet another NetScaler memory-overflow flaw allowing remote code execution, while Oracle Health's breach count nears twenty million, thousands of European wind and solar systems sit exposed, and Splunk and SonicWall ship critical fixes. Patch perimeter gear first.