# GRC Intelligence Report - 2026-09-28
**Generated:** 2026-09-28T18:29:50.109304Z
**Date of Issue:** September 2026
**Analysis Period:** September 2026
**Source:** [SentryDigest](https://ricomanifesto.github.io/SentryDigest/feed.xml)
**Source Issue:** [SentryDigest 2026-09-28](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/)
**Articles Analyzed:** 30
**GRC-Relevant Articles:** 30
**Authoring Model:** nvidia/nemotron-3-ultra-550b-a55b:free
**Requested Route:** openrouter/nvidia/nemotron-3-ultra-550b-a55b:free
**Analysis Mode:** Model-backed

## Executive Summary

Active exploitation of critical infrastructure vulnerabilities demands immediate patching and compensating controls. CISA has added two Citrix NetScaler remote code execution flaws (CVE-2026-88771, CVE-2026-88772) and a Microsoft SharePoint code injection vulnerability (CVE-2026-65660) to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild [CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally](https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html) [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) [SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild](https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html). Citrix has released security updates for both NetScaler vulnerabilities [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/).

Threat actors are bypassing traditional perimeter defenses and targeting identity and AI infrastructure. The ShinyHunters extortion group is using a URL-encoding technique to circumvent web application firewall protections for Oracle PeopleSoft CVE-2026-35273, enabling continued exploitation [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/). Simultaneously, infostealer malware has compromised AI account credentials across more than 80,000 corporate domains, fueling an emerging LLMjacking threat vector [80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking](https://www.bleepingcomputer.com/news/security/80-000-plus-organizations-had-ai-logins-stolen-from-shadow-ai-to-llmjacking/). A new botnet, Carbonato, is hijacking exposed Docker daemons to deploy Telegram-controlled Hermes AI agents [Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent](https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html).

Cloud identity compromise enables destructive operations at scale. The JADEPUFFER threat actor (tracked as Storm-3168 by Microsoft) leveraged compromised service principals to delete Azure resources over an 18-hour period in June 2026 [JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources](https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html). This incident underscores the risk of excessive permissions on non-human identities and the need for rigorous service principal governance.

Financial crime and law enforcement actions signal escalating consequences for attackers. A $387.5 million cryptocurrency heist attributed to North Korean actors targeted the Bitget exchange [Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist](https://www.bleepingcomputer.com/news/security/bitget-resumes-bitcoin-withdrawals-after-3875-million-crypto-heist/), while Dutch authorities arrested a ShinyHunters associate, triggering retaliatory escalation including data theft from the FBI and extortion of the Cl0p ransomware group [Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation](https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/). A former U.S. Army soldier received a 70-month sentence for hacking and extorting at least 10 technology and telecommunications firms between April 2023 and December 2024 [US soldier gets 70 months in prison for extorting 10 tech, telecom firms](https://www.bleepingcomputer.com/news/security/us-soldier-gets-70-months-in-prison-for-extorting-10-tech-telecom-firms/).

## Key Regulatory Developments

| Regulatory Action | Framework/Standard | Business Impact | Source |
|-------------------|-------------------|-----------------|--------|
| CISA adds CVE-2026-88771, CVE-2026-88772 to KEV catalog | Binding Operational Directive 22-01 | Federal Civilian Executive Branch agencies must remediate within mandated timelines; private sector guidance for prioritized patching | [CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally](https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html) **Evidence:** [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) |
| CISA adds CVE-2026-65660 to KEV catalog | Binding Operational Directive 22-01 | Mandates remediation of actively exploited SharePoint code injection flaw for covered entities; advisory for all SharePoint deployments | [SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild](https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html) |

## Industry Impact Analysis

| Sector | Primary Exposure | Observed Threat Activity | Strategic Implication |
|--------|-----------------|-------------------------|----------------------|
| Financial Services | Cryptocurrency exchanges, payment infrastructure | $387.5M North Korean heist against Bitget [Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist](https://www.bleepingcomputer.com/news/security/bitget-resumes-bitcoin-withdrawals-after-3875-million-crypto-heist/) | Enhanced transaction monitoring, cold storage governance, and attribution-sharing with law enforcement required |
| Technology & Telecommunications | Remote access infrastructure (Citrix NetScaler), collaboration platforms (SharePoint), ERP systems (PeopleSoft) | Active exploitation of CVE-2026-88771, CVE-2026-88772, CVE-2026-65660, CVE-2026-35273 across multiple advisories | Accelerated patch cycles, WAF rule validation, and zero-trust network access for admin interfaces **Evidence:** [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/); [SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild](https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html); [CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally](https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html); [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) |
| Cloud Service Providers | Identity and access management (service principals), container orchestration (Docker) | JADEPUFFER/Storm-3168 destructive Azure operations [JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources](https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html); Carbonato botnet targeting Docker [Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent](https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html) | Mandatory service principal inventory, least-privilege enforcement, Docker daemon exposure elimination |
| All Sectors (Cross-cutting) | AI/ML model access credentials, shadow AI deployments | 80,000+ corporate domains with exposed AI logins [80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking](https://www.bleepingcomputer.com/news/security/80-000-plus-organizations-had-ai-logins-stolen-from-shadow-ai-to-llmjacking/); only 47% of CISOs confident in AI agent visibility [Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI](https://thehackernews.com/2026/09/webinar-how-to-govern-ai-agents-reduce.html) | Enterprise AI governance frameworks, credential rotation for AI service accounts, discovery controls for unauthorized AI agents |

## Risk Assessment

| CVE Identifier | Affected Product | CVSS | Exploitation Status | Attack Vector | Source |
|----------------|------------------|------|---------------------|---------------|--------|
| CVE-2026-88771 | Citrix NetScaler ADC and Gateway | 9.5 | Active exploitation; CISA KEV | Unauthenticated remote code execution via improper input validation | [CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally](https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html) [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) |
| CVE-2026-88772 | Citrix NetScaler ADC and Gateway | Not specified | Active exploitation; CISA KEV | Unauthenticated remote code execution | [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) |
| CVE-2026-35273 | Oracle PeopleSoft | Not specified | Active exploitation; WAF bypass observed | URL-encoding bypass of WAF mitigations enabling remote exploitation | [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/) |
| CVE-2026-65660 | Microsoft Office SharePoint | 8.8 | Active exploitation; CISA KEV | Code injection via crafted requests | [SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild](https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html) |

**Emerging Risk Themes**

- **AI Supply Chain Compromise**: Stolen AI credentials enable unauthorized model access, data exfiltration from conversation histories, and compute resource hijacking (LLMjacking) [80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking](https://www.bleepingcomputer.com/news/security/80-000-plus-organizations-had-ai-logins-stolen-from-shadow-ai-to-llmjacking/).
- **Non-Human Identity Proliferation**: Service principals, AI agents, and botnet-deployed frameworks (Hermes Agent) operate with excessive permissions and insufficient monitoring [JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources](https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html) [Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent](https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html) [Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI](https://thehackernews.com/2026/09/webinar-how-to-govern-ai-agents-reduce.html).
- **WAF Evasion Maturity**: Threat actors are developing encoding and obfuscation techniques that bypass signature-based protections, reducing the efficacy of perimeter-centric defense [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/).
- **Retaliatory Escalation**: Law enforcement actions against threat groups trigger immediate destructive or extortive retaliation against high-value targets [Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation](https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/).

## Recommendations for Action

| Priority | Action | Owner | Timeline | Rationale |
|----------|--------|-------|----------|-----------|
| Critical | Apply Citrix NetScaler security updates for CVE-2026-88771 and CVE-2026-88772; if immediate patching is infeasible, implement mitigations per vendor guidance and restrict management interface exposure | Infrastructure/NetSec | Within 48 hours | Active exploitation confirmed; CISA KEV listing mandates urgent remediation for federal agencies and signals critical risk for all sectors [CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally](https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html) [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) |
| Critical | Deploy SharePoint patches for CVE-2026-65660; validate WAF rules against code injection patterns; audit SharePoint administrative access | AppSec/Infra | Within 72 hours | CISA KEV confirmation of active exploitation; CVSS 8.8 reflects high impact [SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild](https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html) |
| High | Validate WAF rule effectiveness against URL-encoding bypasses for Oracle PeopleSoft CVE-2026-35273; apply Oracle security patches; implement behavioral anomaly detection for ERP access | AppSec/SOC | Within 1 week | ShinyHunters demonstrated reliable WAF evasion; widespread exploitation ongoing [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/) |
| High | Conduct enterprise-wide inventory of AI service accounts, API keys, and agent identities; rotate compromised credentials; enforce MFA and conditional access for AI platform access | IAM/CloudSec | Within 2 weeks | 80,000+ corporate domains exposed; LLMjacking market emerging [80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking](https://www.bleepingcomputer.com/news/security/80-000-plus-organizations-had-ai-logins-stolen-from-shadow-ai-to-llmjacking/) |
| High | Enumerate all service principals in cloud environments; enforce least privilege, conditional access, and activity logging; implement just-in-time elevation for destructive operations | CloudSec/IAM | Within 2 weeks | JADEPUFFER/Storm-3168 used compromised principals for mass resource deletion [JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources](https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html) |
| Medium | Audit Docker daemon exposure across development and production environments; disable unauthenticated TCP sockets; deploy runtime threat detection for containerized workloads | DevSecOps/CloudSec | Within 30 days | Carbonato botnet automates exploitation of exposed Docker APIs to deploy AI agent frameworks [Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent](https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html) |
| Medium | Establish AI governance board; define approval workflows for AI agent deployment; implement discovery controls for shadow AI; align with Okta CISO Insights finding that 53% of CISOs lack full AI agent visibility [Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI](https://thehackernews.com/2026/09/webinar-how-to-govern-ai-agents-reduce.html) | CISO/GRC | Within 60 days | AI agents operating without human-equivalent controls; regulatory scrutiny increasing |
| Ongoing | Integrate threat intelligence feeds for KEV-listed vulnerabilities, ShinyHunters/JADEPUFFER TTPs, and North Korean crypto-targeting indicators into SIEM and vulnerability management workflows | Threat Intel/SOC | Continuous | Multi-vector campaigns demonstrate adaptive adversaries; timely detection reduces dwell time |

## Source Highlights

- [CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally](https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-d10d67a734db)
- [Citrix confirms two NetScaler RCE zero-days exploited in attacks](https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-0954e8dba9d8)
- [ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks](https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-77ddfbcd4e34)
- [SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild](https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-049c4c6d156c)
- [Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation](https://krebsonsecurity.com/2026/09/dutch-police-arrest-reformed-hacker-in-shiny-hunters-investigation/) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-c919c2b059f3)
- [80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking](https://www.bleepingcomputer.com/news/security/80-000-plus-organizations-had-ai-logins-stolen-from-shadow-ai-to-llmjacking/) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-cdfc9fd9c096)
- [Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI](https://thehackernews.com/2026/09/webinar-how-to-govern-ai-agents-reduce.html) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-e51480e96d84)
- [Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent](https://thehackernews.com/2026/09/carbonato-botnet-compromises-docker.html) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-a2739f1e6c8a)
- [Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist](https://www.bleepingcomputer.com/news/security/bitget-resumes-bitcoin-withdrawals-after-3875-million-crypto-heist/) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-2098b2b0b957)
- [JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources](https://thehackernews.com/2026/09/jadepuffer-linked-attackers-used.html) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-6170da865280)
- [US soldier gets 70 months in prison for extorting 10 tech, telecom firms](https://www.bleepingcomputer.com/news/security/us-soldier-gets-70-months-in-prison-for-extorting-10-tech-telecom-firms/) · [View in SentryDigest](https://ricomanifesto.github.io/SentryDigest/archive/2026-09-28/#reporting-55c3c36e526c)