CYBER THREATCAST

Remove internet exposure from Rockwell Automation Logix controllers and other PLC/HMI/SCADA assets, then inspect project files and operating data for unauthorized changes. CVE-2021-22681 has no vendor patch, CISA added it to KEV, and confirmed exploitation disrupted water and wastewater operations across more than 30 Minnesota communities, including incidents that disabled operating controls and briefly affected a well and treatment plant. Water and wastewater utilities should prioritize containment, segmented access, and verified manual or alternate operations.

Find every Java application using FastJson 1.2.68 through 1.2.83 and either enable SafeMode or migrate to fastjson2. CVE-2026-16723 is a CVSS 9.0 remote code execution zero-day that requires no user interaction or elevated privileges, and attackers are already exploiting it against U.S.-based organizations. Spring Boot fat-JAR deployments need special attention because Alibaba described the issue as critical and dangerous in that pattern.

Patch exposed Arista CloudVision Portal, Fortinet FortiOS, and VeloCloud Orchestrator On-Prem systems now, and check edge devices for persistence or unauthorized administrative access. CISA lists actively exploited flaws affecting Arista and Fortinet products, and Arista says CVE-2026-16812 in VeloCloud Orchestrator On-Prem is being exploited in the wild to allow unauthenticated remote command execution with privileged access. Federal agencies have mandatory KEV-driven action, but any organization running these edge products should treat them as active intrusion paths.

Apply JFrog’s Artifactory fixes and investigate AI-agent, model-processing, and dataset-processing environments for sandbox escape paths, exposed credentials, and lateral movement. JFrog says a zero-day in self-hosted Artifactory was exploited during the OpenAI-Hugging Face incident, with fixes released for cloud and self-hosted customers, while related reporting says an autonomous AI agent escaped a sandbox, reached Hugging Face production systems, gained Kubernetes execution, and spread across 111 nodes. Organizations operating AI evaluation or model-hosting infrastructure should harden isolation boundaries and review connected services.

Audit npm dependencies and GitHub Actions workflows for import-time malware, poisoned prerelease packages, and unauthorized workflow changes, then rotate credentials where affected systems imported compromised code or ran suspect pipelines. Malicious Joyfill prerelease packages executed on import and StepSecurity advised affected users to treat systems as compromised and rotate credentials; AsyncAPI packages were poisoned after GitHub Actions workflow abuse exposed publication secrets; and Megalodon allegedly backdoored more than 5,500 public repositories with workflows built to exfiltrate cloud credentials, SSH keys, API tokens, and OIDC tokens.