Threat Landscape Briefing – October 2026

In this month’s briefing we explore:

• Open-Source AI Agents Breach Online Retailers – Michel Hebert (01:40)
  • Gambit Security reported on September 22 that a financially motivated operator is using three open-source AI agent tools against online retailers.
  • See Info-Tech’s research on how to Build Cyber Resilience in Connected Retail
• New Malware Hands Command and Control to AI – Bob Wilson (10:43)
  • On September 22, Cisco Talos made a blog post summarizing its research on a Windows malware implant that hands its post-compromise decisions to commercial large language models (LLMs).
  • Learn how Info-Tech can help you Get Ready for Augmented Security Operations.
• Passkey-Themed Helpdesk Phishing Fuels Microsoft 365 Data Theft – Kate Wood (21:20)
  • Microsoft Security Research is tracking active cloud intrusions across multiple organizations.
  • Explore Info-Tech’s guidance on how to Modernize Your Identity Authentication Practices.
• AI Agents Exploit PaperCut Servers Worldwide – Michel Hebert (31:40)
  • An attacker used hundreds of AI agents in a global exploitation campaign against PaperCut NG/MF print management software.
  • Discover how Info-Tech can help you Reassess Cybersecurity Exposure in the Age of AI-Driven Vulnerability Discovery