The Executive by MaxwellCTI: October 29, 2026
The Executive by MaxwellCTI: October 29, 2026
Get the full story at intel.maxwellcti.com.
An Anthropic research model chained security flaws into multi-platform exploits, Sony Network Communications exposed over 2.5 million customer records, and Warp Panda exploited a VMware ESX zero-day.
Novel techniques
Anthropic AI Model Chains Flaws Into Multi-Platform Exploits
An unreleased internal research model from Anthropic identified and chained security flaws into working proof-of-concept exploits for Chrome, Safari, Android, Windows, and Linux. The model performed these tasks with initial prompting and little human involvement. All identified vulnerabilities have been patched.
Business
Sony Network Communications Breach Exposes 2.5 Million Customer Records
Sony Network Communications confirmed a data breach that exposed 2,585,481 customer records from its So-net member database. The exposed data includes names, contact details, and 54,401 passwords, affecting current and former So-net and NTT Docomo customers. NTT Docomo warned these customers about fake websites and phishing emails.
Hackers Target Critical Oracle Flaw Despite Recent Security Patch
Defused Cyber reported observing exploratory exploits targeting a critical remote code execution vulnerability in Oracle E-Business Suite. Oracle released security updates on October 20, 2026, to address the flaw.
Critical vulnerabilities
- Microsoft Edge (CVE-2026-45492, CVE-2026-45494, CVE-2026-45495): attackers can execute arbitrary code on Windows, and it is not exploited in the wild; Microsoft has released a patch.
- Broadcom VMware ESX (CVE-2026-102764, CVE-2026-41709): attackers can perform operations without being logged and reduce audit trail visibility, and it is exploited; no fix is mentioned.
- Citrix NetScaler ADC and Gateway (CVE-2026-88779, CVE-2026-104935, CVE-2026-76504, CVE-2026-114625, CVE-2026-104286, CVE-2026-76519, CVE-2026-0322, CVE-2026-109618, CVE-2026-109619): unauthenticated attackers can execute remote code, and some are exploited; no fix is mentioned.
- EmbedThis GoAhead (CVE-2026-115881, CVE-2026-115884): attackers can use revoked certificates or bypass certificate chain length limits; EmbedThis has released a patch.