Product & Security Tips — SamHouston (Veracode) asked a question.

September 30, 2026 at 7:35 PM
Veracode Threat-to-Control Daily Command Brief | 2026-09-30

Written by Andrea Mazzarini, Senior Principal CSM at Veracode

 

Subscribe to these daily briefings on LinkedIn: https://www.linkedin.com/newsletters/daily-threat-intel-brief-7466482445257723904/

 

Join the VERACODE Community Group - Product & Security Tips - for the latest Veracode Daily Threat Intel Brief - Stay current, stay secure!

https://community.veracode.com/s/group/0F9Uf0000001c01KAA/product-security-tips

 

Executive Summary

  1. MemOS / sckit dual-registry worm (23 Sep) — npm @memtensor/memos-cloud-openclaw-plugin 0.1.21/0.1.23/0.1.25 and PyPI MemoryOS 2.0.34 carry a runtime Go stealer that harvests registry, SCM, cloud, SSH, and AI-platform tokens and is built to re-publish. Impact: developer and CI identity takeover, then package fan-out. Atomic Risk 9. Why now: inside last_7_days, install-hook scanners miss it. Veracode: Package Firewall + SCA + SSCI; rotate secrets on any host that imported it.
  2. Shai-Hulud family persistence (ChainDrop + Mini Shai-Hulud GitHub reinfection) — ChainDrop poisoned high-download caching packages (keyv, cacheable, siblings; ~2B monthly downloads) with valid provenance; Mini Shai-Hulud payload still landing in GitHub repos this month. Atomic Risk 9. Why now: worms outlive takedowns; lockfiles and Actions remain dirty. Veracode: Package Firewall + SCA + SSCI + Policy.
  3. Citrix NetScaler dual KEV RCE (CVE-2026-88771 CVSS 9.8; CVE-2026-88772 CVSS 8.1) — unauthenticated command execution / memory-corruption RCE, exploited before patch, federal due 2026-09-30. Atomic Risk 9. Why now: due today. Veracode: EASM + Risk Manager (KEV) + DAST on apps behind the ADC.
  4. TeamCity CVE-2026-63077 now flagged for ransomware use — unauth agent-protocol bypass → OS command as the build-server process; ~160 internet-facing hosts still unpatched. Atomic Risk 9. Why now: last_7_days ransomware flag on a CI/CD crown jewel. Veracode: EASM + Risk Manager + Policy + Container Security / IaC on pipeline artifacts.
  5. Internet-facing app RCEs still hot + dark-web volume high — WordPress Core CVE-2026-87902 (KEV, unauth LFI→RCE), Adobe Commerce/Magento StyleSmuggler CVE-2026-75650 (CVSS 10, in-wild RCE + Rust implants) and CVE-2026-71362 (KEV authz bypass); Apple CoreGraphics CVE-2026-86950 added to KEV yesterday (targeted). Qilin / The Gentlemen lead leak-site volume; rival takeover of a major leak site shows Grav/CMS web flaws in criminal infrastructure. Atomic Risk 8. Veracode: EASM + DAST + Risk Manager; SAST + DryRun + Fix for custom/AI storefront and agent code.

 

Comprehensive Threats Table

 

MemOS sckit worm (npm + PyPI, 23 Sep)

CVSS: N/A (malware). Exploit status: In-wild worm; runtime trigger. Affected: AI-agent memory packages; CI/dev hosts. Atomic Risk: 9. Immediate mitigation: Pin npm 0.1.20 / PyPI 2.0.33 or remove; treat importers as compromised; rotate tokens; block C2. Veracode Tool Mapping: Package Firewall + SCA + SSCI.

 

ChainDrop / Shai-Hulud on keyv/cacheable family

CVSS: N/A (malware). Exploit status: Worm; valid provenance. Affected: npm caching stack, 1,300+ versions. Atomic Risk: 9. Immediate mitigation: Purge bad versions from lockfiles/caches; rotate GitHub/npm/cloud tokens; enforce firewall policies. Veracode Tool Mapping: Package Firewall + SCA + SSCI + Policy Management.

 

Mini Shai-Hulud GitHub reinfection

CVSS: N/A (malware). Exploit status: Ongoing repo infection. Affected: GitHub Actions / cloned repos. Atomic Risk: 8. Immediate mitigation: Hunt hook files and poisoned Actions; revoke PATs; block at install. Veracode Tool Mapping: Package Firewall + SCA + SSCI + Integrations.

 

CVE-2026-88771 NetScaler input validation RCE

CVSS: 9.8. Exploit status: KEV; exploited pre-patch. Affected: NetScaler ADC/Gateway. Atomic Risk: 9. Immediate mitigation: Patch today; isolate internet-facing appliances; forensic triage. Veracode Tool Mapping: EASM + Risk Manager.

 

CVE-2026-88772 NetScaler memory RCE/DoS

CVSS: 8.1. Exploit status: KEV; exploited pre-patch. Affected: NetScaler ADC/Gateway. Atomic Risk: 9. Immediate mitigation: Same as above. Veracode Tool Mapping: EASM + Risk Manager.

 

CVE-2026-63077 TeamCity auth bypass RCE

CVSS: ~9.8. Exploit status: KEV; ransomware use flagged. Affected: TeamCity On-Prem. Atomic Risk: 9. Immediate mitigation: Upgrade 2025.11.7 / 2026.1.3; take off internet; hunt implants. Veracode Tool Mapping: EASM + Risk Manager + Policy Management + Container Security.

 

CVE-2026-87902 WordPress page-template LFI→RCE

CVSS: 8.1 (9.2 alt). Exploit status: KEV; mass probing after patch. Affected: WordPress Core to 4.7 branches. Atomic Risk: 8. Immediate mitigation: Upgrade 7.1.2 or backports; hunt webshells. Veracode Tool Mapping: EASM + DAST + Risk Manager.

 

CVE-2026-75650 StyleSmuggler Magento/Commerce RCE

CVSS: 10.0. Exploit status: In-wild zero-day; implants. Affected: Adobe Commerce / Magento 2.4.4–2.4.9. Atomic Risk: 9. Immediate mitigation: Apply emergency hotfix; rotate store secrets; hunt Rust implants. Veracode Tool Mapping: EASM + DAST + Risk Manager.

 

CVE-2026-71362 Commerce/Magento incorrect authz

CVSS: 9.1. Exploit status: KEV. Affected: Adobe Commerce / Magento / B2B. Atomic Risk: 8. Immediate mitigation: Apply APSB26-92 train; verify authz on admin/API. Veracode Tool Mapping: EASM + DAST + Risk Manager.

 

CVE-2026-65660 SharePoint code injection

CVSS: High. Exploit status: KEV. Affected: Microsoft SharePoint. Atomic Risk: 8. Immediate mitigation: Patch; restrict external SharePoint; hunt webshells. Veracode Tool Mapping: EASM + DAST + Risk Manager.

 

CVE-2026-86950 Apple CoreGraphics OOB write

CVSS: 8.8. Exploit status: KEV yesterday; targeted. Affected: iOS/iPadOS/macOS. Atomic Risk: 7. Immediate mitigation: Update iOS/iPadOS 26.7.1, macOS 15.8.1 / 26.7.1. Veracode Tool Mapping: Risk Manager.

 

CVE-2026-81963 / CVE-2026-85880 Windows EoP

CVSS: 7.8. Exploit status: Exploited; Patch Tuesday. Affected: Windows Update Stack / ALPC. Atomic Risk: 7. Immediate mitigation: Confirm Sept 2026 patches landed. Veracode Tool Mapping: Risk Manager.

 

OpenCode upgrade-API RCE (GHSA-632h-h47v-g4x4)

CVSS: Critical (local agent). Exploit status: Public advisory; content-type confuse. Affected: OpenCode 1.14.30–1.18.21. Atomic Risk: 7. Immediate mitigation: Upgrade agent; bind UI off LAN; disable unauth local serve. Veracode Tool Mapping: SAST + DryRun + Policy Management.

 

Vibe-coded IDOR / broken auth / missing authz

CVSS: App-dependent. Exploit status: Research + live apps; residual. Affected: AI-generated web/API. Atomic Risk: 7. Immediate mitigation: Block merge on authz gaps; DeepScan high-churn services. Veracode Tool Mapping: SAST + DryRun + Fix.

 

Qilin / The Gentlemen / Panzer / INC leak-site surge

CVSS: N/A. Exploit status: Active extortion; OSINT leak sites. Affected: Mid-market + healthcare/tech. Atomic Risk: 8. Immediate mitigation: Assume initial access via creds/KEV/CI; harden identity. Veracode Tool Mapping: Risk Manager + EASM + Package Firewall.

 

Grav CMS unauth upload used on criminal leak site

CVSS: N/A. Exploit status: OSINT secondary. Affected: Exposed CMS. Atomic Risk: 6. Immediate mitigation: Inventory Grav/CMS on EASM; DAST those apps. Veracode Tool Mapping: EASM + DAST.

 

  • 3 answers
  • 19 views

  • SamHouston (Veracode)

    Detailed First-Principles Analysis

     

    MemOS / sckit

    Root cause: maintainer-path publish to two registries, with malicious and clean versions interleaved. Mechanism: payload is not an install script; Python runs on import, npm on agent/memory start — so --ignore-scripts is insufficient. Blast radius: every secret on the developer laptop or CI runner, plus templates to poison other packages and Actions. Control point: Package Firewall policy for malware/typosquat/secrets before resolve; SCA + SSCI to detect known-bad versions already in lockfiles; secret rotation is mandatory after a hit.

     

    Shai-Hulud / ChainDrop / Mini persistence

    Root cause: stolen maintainer GitHub tokens plus install-time or binding.gyp execution. Mechanism: real CI publishes the poisoned tree, so provenance attests a dirty build. Blast radius: billions of monthly downloads and every downstream lockfile. Control point: Package Firewall default + Typosquat + malware policies; SSCI threat feed into SOC; Policy Management as a merge gate on SCA malware findings.

     

    NetScaler 88771/88772

    Root cause: unauthenticated input/memory flaws on the appliance that terminates TLS for many apps. Mechanism: pre-patch exploitation, short federal clock (due today). Blast radius: full control of the edge, then lateral into apps. Control point: EASM to find the appliances; Risk Manager to force KEV priority; DAST only after the edge is patched — do not scan through a owned ADC as if it were healthy.

     

    TeamCity 63077 + ransomware flag

    Root cause: agent polling protocol trusts the network. Mechanism: unauth OS command as the build user → steal pipeline secrets, poison artifacts, encrypt. Blast radius: every application the server builds. Control point: EASM for internet-facing CI; Policy + Container Security/IaC on what the pipeline emits; Risk Manager for KEV + ransomware context.

     

    WordPress 87902 / Magento StyleSmuggler / 71362

    Root cause: template/include and authorization defects in ubiquitous web platforms. Mechanism: unauth include or template-smuggled PHP, then implants that survive version bumps. Blast radius: storefront PII, payment pages, admin. Control point: EASM discovery → DAST confirmation → Risk Manager KEV queue; custom plugins/themes through SAST + Fix.

     

    AI-agent / vibe-code path

    Root cause: agents optimize for "it runs," not object-level authz; local agent UIs accept confused content-types; poisoned repo rules (CLAUDE.md, Cursor rules) turn the agent into the operator. Mechanism: IDOR by ID-in-the-URL, broken session checks, local RCE via upgrade APIs. Blast radius: tenant data and the developer workstation. Control point: SAST as system of record; DryRun for intent/logic/IDOR/broken-auth in PRs (GitHub, GitLab, Cursor, Claude Code, Codex); Fix for generated patches developers can review.

     

    Broader Signals

    KEV additions this week are dense (Citrix pair, Apple yesterday, WordPress, SharePoint, Magento authz, MikroTik, plus earlier TeamCity ransomware update). Supply-chain worms are multi-generation: Shai-Hulud → Mini → Miasma/binding.gyp → Hades/PyPI → ChainDrop → sckit-on-AI-memory; Mini still writes into GitHub repos. Zero-days: Apple targeted; NetScaler and StyleSmuggler pre-patch. APT/spyware inferred only from Apple's "extremely sophisticated / targeted" wording — no named attribution here. AI-code: OpenCode local RCE, poisoned take-home repos driving agents, and studies showing broken access control as the dominant vibe-code class. Dark-web OSINT: high leak-site volume (Qilin, The Gentlemen, INC, Brain Cipher claims in the last 48h); criminal-on-criminal Grav takeover of a leak site; credential-dump markets remain the cheap initial-access layer for the same KEV and CI flaws.

    Expand Post

  • SamHouston (Veracode)

    Veracode Tool Reference with Links

     

    Veracode Recommendations

     

    Malicious Packages & Supply Chain Worms

    sckit + ChainDrop + Mini: why Package Firewall (block before resolve) + SSCI (malware feed) + SCA (already-imported versions). Action: enable malware, typosquat, secrets, and data-exfil pre-built firewall policies; fail the pipeline on SSCI-listed packages. Short names: Package Firewall, SSCI, SCA.

     

    New/KEV CVEs

    NetScaler, TeamCity, WordPress, SharePoint, Magento, Apple, Windows EoP: why Risk Manager (KEV + Best Next Action). Action: filter VRM to KEV + internet-exposed; ticket owners today. Short name: Risk Manager.

     

    Web/Runtime

    WordPress/Magento/SharePoint/CMS: why EASM to find them and DAST/ISM to prove exploitability. Action: mark EASM web apps as DAST candidates and run Full scans on production-like auth. Short names: EASM, DAST, ISM.

     

    Custom Code

    Storefront plugins, TeamCity-built apps: why SAST + Pipeline Scan + Fix. Action: policy-gate High/Very High on the next pipeline. Short names: SAST, Pipeline Scan, Fix.

     

    AI-Assisted / Business-Logic Code

    Vibe-code IDOR/broken auth, OpenCode, agent-memory packages: why DryRun on PRs plus SAST as system of record. Action: turn on DryRun DeepScans for GitHub/GitLab and agent workflows (Cursor, Claude Code, Codex); do not treat DryRun as a substitute for SAST. Short names: SAST, DryRun, Fix.

     

    EASM

    NetScaler, TeamCity, WordPress, Commerce. Action: Deep Discovery on the corporate domain; export DAST candidates. Short name: EASM.

     

    Containers

    Poisoned CI artifacts and base images after TeamCity or npm worms. Action: veracode scan on images plus IaC/secrets rules. Short names: Container Security, IaC, CLI.

     

    Governance

    Worms and KEV need a merge/deploy fail, not a dashboard. Action: Policy Management on SCA malware + SAST Very High + KEV-linked apps. Short name: Policy Management.

    Expand Post

  • SamHouston (Veracode)

    Prioritized Action Plan

    1. By 12:00 ET today — NetScaler + TeamCity internet-facing. Inventory via EASM. Patch or isolate. Forensic triage before declaring clean. Done when: no unpatched public ADC or TeamCity, or a written isolate ticket. First step: EASM query for those product banners. R/I: reversible isolate, irreversible if you skip triage.
    2. Today — worm lockfile hunt. Search SBOMs/lockfiles for MemOS/@memtensor/*, keyv@6.0.0, cacheable@2.5.1, flat-cache@6.1.24, file-entry-cache@11.1.6, and Mini/Miasma IOCs. Done when: Package Firewall is blocking those classes and dirty versions are purged. First step: enable pre-built malware + typosquat policies.
    3. Today — rotate secrets on any host or runner that installed/imported the named malicious versions (npm, PyPI, GitHub, cloud, SSH, Hugging Face). R/I: irreversible if delayed.
    4. This afternoon — WordPress 7.1.2 / Commerce hotfixes / SharePoint KEV. EASM → DAST → hunt implants (webshells, unexpected binaries).
    5. This week — AI pipeline. SAST policy on all AI-touched repos; DryRun on PRs for IDOR/broken auth; IDE Scan in VS Code; Fix for first-party and (LA) SCA upgrades.
    6. Standing — Risk Manager KEV view as the single queue; Security Labs only for developer education on LLM/OWASP lessons, not as a control.

     

    This report is provided for informational purposes only and is not intended as legal, technical, or professional advice. While we strive for accuracy, Veracode does not warrant the completeness or accuracy of the information. Recipients should not rely solely on this report and must conduct their own thorough investigation and verification. Please work with your internal teams and relevant stakeholders to properly assess, implement, and remediate any identified threats or vulnerabilities. The information has been compiled from multiple sources, and Veracode assumes no liability for any errors, omissions, or actions taken based on this content.

    Expand Post

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.