Happy Thursday!
In this week's brief:
- CrackArmor Linux Apocalypse: Nine vulnerabilities in AppArmor, hiding since 2017, let any unprivileged user escalate to root on 12.6 million enterprise Linux servers. Patch now.
- AI Malware Is Real: IBM X-Force caught ransomware group Hive0163 deploying AI-generated malware in a live attack, while CrowdStrike reports 82% of detections are now malware-free.
- Google's $32B Wiz Bet: The largest deal in Google's history closed this week, alongside $500M+ in stealth launches from Armadin, Kai, Jazz, and Bold. The next generation of security infrastructure is being built right now.
Threats
Push Security Finds Cybercriminals Launch InstallFix Attacks Against Claude Code Users
- Threat actors are cloning legitimate CLI tool installation pages and distributing them through malvertising on Google Search, targeting users searching for tools like Claude Code with pixel-perfect fake websites containing malicious install commands.
- The attack leverages the widespread developer practice of running "curl to bash" one-liners by presenting victims with familiar-looking installation commands that actually download Amatera Stealer malware instead of legitimate software.
- Push Security researchers identified multiple campaigns using this technique across popular developer tools, with attackers abusing legitimate hosting services like Cloudflare Pages and Squarespace to host cloned sites and evade detection.
AI-Generated Malware "Slopoly" Signals New Era of Low-Effort, High-Impact Threats
- IBM X-Force identified a new malware framework called Slopoly, suspected to be AI-generated and deployed by financially motivated threat actor Hive0163 during ransomware post-exploitation to maintain persistent server access for over a week.
- The malware demonstrates how AI tools allow threat actors to develop functional malware frameworks in a fraction of the traditional development time, lowering the barrier to entry for creating custom post-exploitation tooling.
- Security teams should update detection signatures for AI-generated code patterns and ensure post-exploitation monitoring covers persistence mechanisms on servers, not just initial access vectors.
Nine CrackArmor Flaws in Linux AppArmor Expose 12.6 Million Servers to Root Takeover
- Qualys TRU disclosed nine confused deputy vulnerabilities in AppArmor, the default mandatory access control module for Ubuntu, Debian, and SUSE, that have existed since 2017 (kernel v4.11) and allow unprivileged users to escalate to root, break container isolation, and trigger kernel panics.
- The flaws let attackers manipulate AppArmor profiles through trusted tools like Sudo and Postfix without needing admin credentials, meaning any local access foothold on an affected system is enough to compromise the entire host, including Kubernetes nodes and cloud instances.
- Apply vendor kernel patches immediately for all AppArmor-enabled distributions, scan infrastructure with Qualys QID 386714, and monitor
/sys/kernel/security/apparmor/for unauthorized profile modifications that may signal active exploitation.
Mandos
IBM X-Force 2026: Public-Facing App Exploitation Up 44%, Supply Chain Attacks Quadrupled
- The IBM X-Force Threat Intelligence Index 2026 found that exploitation of public-facing applications surged 44% year-over-year to become the most common initial access vector, driven by expanding vulnerability surfaces and configuration errors in complex application stacks.
- Major supply chain and third-party breaches quadrupled over five years, with attackers systematically targeting the development pipeline and management-plane tools that organizations consistently under-patch relative to production infrastructure.
- The report reinforces that advanced AI-driven protections offer minimal benefit when foundational controls remain weak. Security leaders should prioritize patch cadence for public-facing apps, harden CI/CD pipelines, and treat identity as critical infrastructure with centralized governance.