SecurityWeek\u2019s weekly cybersecurity news roundup offers a comprehensive and concise overview of critical developments across the global threat landscape. While individual stories may not always receive full standalone coverage, these updates remain deeply relevant to security professionals, system administrators, and policy analysts tracking emerging risks. <\/p>\n
This curated summary highlights significant stories spanning sophisticated vulnerability disclosures, novel attack methodologies, regulatory policy shifts, enforcement actions, and high-profile industry events to help readers stay well-informed about the rapidly evolving cybersecurity ecosystem.<\/p>\n
Among the most inventive emerging threats detailed this week, researchers at Black Lotus Labs have uncovered a novel malware variant dubbed PoeLLM. Active since at least April 2026, the campaign specifically targets exposed artificial intelligence and open-source services\u2014primarily focusing on platforms such as LiteLLM, Ollama, Gotenberg, and Gitea. The primary objectives of the intrusion set are unauthorized cryptocurrency mining and the broad expansion of an automated botnet.<\/p>\n
What sets PoeLLM apart is its unconventional command-and-control (C&C) infrastructure. Once a machine is successfully infected, the malware extracts four specific keywords from a poem hosted publicly on GitHub. These keywords are then algorithmically converted into the IP address of the current C&C server. This mechanism allows the threat actor to seamlessly pivot and switch their operational infrastructure simply by altering the words within the poem. Security assessments indicate the operator is likely an Italian-speaking individual, who has already updated the embedded GitHub poem 11 times to maintain persistent control over the botnet.<\/p>\n
In the realm of software supply chain security, ongoing tracking by GitGuardian reveals that the GhostAction campaign has continued to aggressively propagate. Between August 31 and September 30, the threat actors pushed their secret-stealing GitHub Actions workflow into an additional 772 public repositories, impacting 373 distinct users and organizations. <\/p>\n
The campaign systematically targets 2,577 sensitive secrets, including secure shell (SSH) keys, database credentials, and access tokens for major cloud providers like Amazon Web Services and Microsoft Azure. While the attackers utilized a newly provisioned exfiltration server for this latest wave, the underlying playbook heavily mirrors tactics observed in 2025. GitGuardian\u2019s telemetry underscores that this supply chain threat has remained persistently active rather than coming in isolated waves.<\/p>\n
Turning to law enforcement and financial cybercrime, a federal jury has convicted 36-year-old Jonathan Spalletta of Maryland on multiple counts of computer fraud and money laundering. The conviction stems from a pair of devastating 2021 cyberattacks targeting Uranium Finance, a decentralized cryptocurrency exchange. <\/p>\n
Spalletta exploited fundamental flaws within the exchange\u2019s smart contracts to siphon approximately $1.4 million during an initial test, followed by a staggering $53.3 million in a subsequent attack that ultimately forced Uranium Finance to shut down operations entirely. Following the thefts, he laundered the stolen capital through a complex series of cryptocurrency transactions, utilizing privacy-enhancing tools like Tornado Cash. <\/p>\n
Investigators discovered that the illicit proceeds were subsequently used to purchase high-value alternative assets, including rare Magic: The Gathering and Pok\u00e9mon cards, alongside antique Roman coins. Spalletta now faces a severe legal penalty, with up to 10 years in prison for the computer fraud charge and up to 20 years for money laundering.<\/p>\n
Within the United States federal government, the Cybersecurity and Infrastructure Security Agency (CISA) has announced plans to overhaul its internal talent retention initiatives. CISA will maintain its Cybersecurity Retention Incentive program\u2014which provides bonuses worth up to 25% of an employee\u2019s base salary\u2014through fiscal year 2027. However, the qualification criteria are being significantly tightened.<\/p>\n
Under the updated framework, staff members must maintain an evaluation rating of "exceeds expectations" or higher and dedicate a minimum of 51% of their working hours to core cybersecurity duties within one of three designated job series. Personnel outside of those specific series who spend 75% or more of their time on cyber-related tasks will be required to apply through a formal review board. This strategic policy shift follows an investigation by the Department of Homeland Security\u2019s inspector general, which concluded that the previous iteration of the incentive program was mismanaged and applied far too broadly.<\/p>\n
Addressing critical infrastructure vulnerabilities, the Operational Technology Cybersecurity Coalition (OTCC) has published a detailed policy proposal calling for a CISA Binding Operational Directive (BOD) tailored specifically to operational technology (OT) systems across federal civilian agencies. These agencies depend heavily on more than 8,000 General Services Administration-managed facilities that incorporate complex heating, ventilation, and air conditioning (HVAC), power management, access control, and building automation systems.<\/p>\n
The OTCC proposal urges federal authorities to require agencies to designate a specific senior official or dedicated office with direct accountability for OT security. Furthermore, the framework advocates for the mandatory enforcement of relevant existing security requirements while prioritizing alignment with CISA\u2019s established Cybersecurity Performance Goals to harden federal physical and digital infrastructure.<\/p>\n
In the commercial sector, fast-food giant Domino\u2019s has initiated password resets for a limited number of customer accounts following unauthorized access attempts. The incidents were driven by credential stuffing attacks, wherein threat actors utilized automated tools to test email and password combinations that had been leaked in unrelated, third-party data breaches.<\/p>\n
Domino\u2019s emphasized that its core corporate and ordering systems were not compromised during the incidents and noted that the company does not store customer payment card details directly on its platforms. Nevertheless, out of an abundance of caution, the impacted accounts were proactively locked and reset to prevent further unauthorized access.<\/p>\n
In international security news, South Korean President Lee Jae Myung has highlighted strong indicators that artificial intelligence tools were leveraged during a recent wave of sophisticated cyberattacks targeting the nation\u2019s banking sector. National police have launched a full-scale criminal investigation into the incidents, which successfully breached customer personal data.<\/p>\n
While authorities have not yet disclosed the specific AI models utilized or the full extent of the data compromise, cybersecurity firm CrowdStrike reported uncovering significant artifacts during forensic analysis. Investigators discovered Claude Code session histories, ARTEX configuration files, and Claude memory files embedded within the attacker’s infrastructure. Based on these technical indicators, security analysts express moderate confidence that a Chinese-speaking, financially motivated threat actor group is responsible for the financial institution intrusions.<\/p>\n
In a major milestone for international dark web law enforcement, 30-year-old Raheim Hamilton of Virginia has been sentenced to 40 years in federal prison and ordered to pay a $5 million financial penalty. Hamilton previously pleaded guilty to drug conspiracy charges relating to Empire Market, an illicit dark web marketplace that he co-created and operated alongside Thomas Pavey between 2018 and 2020.<\/p>\n
During its operational lifespan, Empire Market facilitated more than four million distinct transactions valued at over $430 million. While the marketplace was primarily utilized for large-scale illegal drug sales, it also served as a clearinghouse for stolen credentials, compromised personal identifying information, counterfeit currency, and malicious hacking tools. Pavey, who entered a guilty plea late last year, is scheduled to receive his formal sentencing later this month.<\/p>\n
In hardware and infrastructure vulnerability news, security researchers have formally disclosed CVE-2026-47483, a high-severity security flaw affecting Nvidia\u2019s Data Center GPU Manager (DCGM) Exporter monitoring tool. The vulnerability allows unauthenticated attackers to flood device profiling endpoints with crafted requests, resulting in resource exhaustion and service crashes. This disruption can severely degrade or halt critical AI workloads running on the affected host systems.<\/p>\n
During wide-scale scanning conducted between March and May 2026, researchers identified approximately 2,100 individual hosts exposing the DCGM exporter directly to the public internet without authentication. These exposed instances collectively leaked operational telemetry from more than 12,000 graphics processing units. Nvidia has since released security updates addressing the flaw, urging system administrators and enterprise users to upgrade immediately to version 4.8.2 or later.<\/p>\n
Software supply chain risks continue to plague developer ecosystems, highlighted this week by a malicious compromise of version 0.5.144 of The injected malware actively scans infected developer environments to harvest authentication tokens and keys for npm, GitHub, AWS, Kubernetes, HashiCorp Vault, and specialized AI coding tool configurations. Furthermore, the payload possesses the capability to execute arbitrary code supplied remotely by the attacker and can automatically republish the malicious package downstream through any other repositories or packages the victim maintains publishing rights to.<\/p>\n","protected":false},"excerpt":{"rendered":" SecurityWeek\u2019s weekly cybersecurity news roundup offers a comprehensive and concise overview of critical developments across…<\/p>\n","protected":false},"author":13,"featured_media":1293,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[313],"tags":[423,323,368,1298,4,143,360,321,1326,320,902,1269,674,814,322],"class_list":["post-1294","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-incident-response-forensics","tag-attacks","tag-blockchain-analysis","tag-chain","tag-convictions","tag-crypto","tag-cybersecurity","tag-exchange","tag-forensics","tag-heist","tag-incident-response","tag-malware","tag-roundup","tag-supply","tag-targeting","tag-tracking"],"_links":{"self":[{"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=\/wp\/v2\/posts\/1294","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1294"}],"version-history":[{"count":0,"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=\/wp\/v2\/posts\/1294\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=\/wp\/v2\/media\/1293"}],"wp:attachment":[{"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1294"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1294"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/smartcryptosecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1294"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}tensorlake<\/code>, the official npm software development kit for Tensorlake\u2019s AI agent sandboxes. According to security advisories published by Socket and Sonatype, the package was backdoored to execute a credential-stealing worm upon installation, echoing mechanics seen in previous ChainDrop and Shai-Hulud supply chain incidents.<\/p>\n