| Development | Significance |
|---|---|
| AI agents are now operational weapons, not theory. | First publicly confirmed nation-state use of agentic AI in a real supply-chain compromise |
| PHP2Shell is under active mass exploitation. | Approximately 884,000 internet-facing hosts remain unpatched |
| Supply-chain attacks have been industrialized. | Multiple actor groups simultaneously exploiting developer and vendor trust at scale |
| Fortinet multi-product patches trigger an AI-assisted exploit race. | Validated by the FortiSIEM PoC appearing within one week of that patch |
| Oracle October 2026 CPU addresses 1,209 CVEs, including CVE-2026-91403 (Java SE JSSE, CVSS 9.1) - an unauthenticated network-exploitable flaw affecting every supported Java version. | Oracle Fusion Middleware alone received 206 fixes, 134 remotely exploitable without authentication |
| Election infrastructure under confirmed nation-state attack. | 12 days until the November 3 midterms |
| Date | Event | Severity | Relevance to State Government |
|---|---|---|---|
| Oct 2025 | GlassWorm compromises OVHcloud developer via poisoned VS Code extension | HIGH | Supply chain pre-positioning; 7-month dwell time before activation |
| Jul–Sep 2026 | APT28 (GRU Unit 26165) conducts Hookedge espionage campaign against NATO defense firms | HIGH | Nation-state espionage tradecraft evolution; webhook-based C2 |
| Oct 10–14 | Storm-0940 ARTEX agents conduct automated password spraying against 327 accounts across 8 organizations | CRITICAL | AI-driven credential attacks at machine speed targeting MSP customers |
| Oct 15 | Storm-0940 gains access to ConnectWise cloud application identities; pivots to customer M365 tenants | CRITICAL | Any state agency using ConnectWise Cloud Backup is potentially exposed |
| Oct 15 | FortiSIEM CVE-2026-106173 (CVSS 9.8) proof-of-concept published by Horizon3.ai | HIGH | Unauthenticated RCE against security monitoring infrastructure |
| Oct 16 | CISA/FBI Joint PSA261016: APT42 (Iran/IRGC-IO) actively phishing U.S. midterm election officials | CRITICAL | Direct election infrastructure targeting with 18 days to election |
| Oct 20 | PHP2Shell vulnerability details (CVE-2026-109618/109619) leak before patches available | CRITICAL | Zero-day window for ~884,000 unpatched internet-facing hosts |
| Oct 21 | CISA emergency alert for PHP2Shell; H-ISAC shares 9 active exploitation IPs | CRITICAL | Active mass exploitation of PHP citizen portals |
| Oct 21 | Microsoft discloses Storm-0940/ARTEX ConnectWise supply chain compromise | CRITICAL | First confirmed nation-state agentic AI attack |
| Oct 21 | Fortinet announces critical patches for FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator | HIGH | AI-assisted patch diffing could produce exploits within hours |
| Oct 21 | LiteLLM 1.107.0 supply chain compromise discovered — credential stealer + persistent backdoor | HIGH | AI development tooling targeted; cloud credentials exfiltrated |
| Oct 21 | GlassWorm OVHcloud CLI supply chain attack disclosed — malicious binaries available for 93 minutes | HIGH | Developer tool supply chain; ~250 downloads of compromised binary |
| Oct 22 | Oracle October 2026 CPU: 1,209 CVEs including CVE-2026-91403 (Java JSSE, CVSS 9.1) | HIGH | PeopleSoft and Java SE deployments across state agencies directly affected |
| Oct 22 | Fortinet patches released; exploit race begins | HIGH | Patch-to-exploit window potentially measured in hours, not weeks |
Storm-0940 (CovertNetwork-1658/ORB07, Chinese state-sponsored) used ARTEX, a Go-based agentic AI penetration testing framework, to autonomously execute the full kill chain: password spraying at 2,900 sign-in attempts/minute across 327 accounts, identifying successful credentials, abusing OAuth application identities in ConnectWise, authenticating to downstream customer M365 tenants, and escalating privileges - all in under three hours in some cases.
CVE-2026-109618 and CVE-2026-109619 (both CVSS 9.8) enable unauthenticated RCE on any PHP-based web application. DMV portals, tax filing systems, benefits applications, and licensing platforms are frequently legacy PHP. Exploitation was observed before public disclosure; one scanning IP shows reported overlap with UNC5638 telemetry.
Fortinet warned that attackers can use AI-driven patch diffing to develop exploits within hours of patch release - validated by the FortiSIEM CVE-2026-106173 PoC appearing within days. CVE IDs for the new vulnerabilities are embargoed until November 10, forcing defenders to patch blind.
Three supply-chain compromises in 24 hours, each exploiting a different trust relationship: ConnectWise Cloud Backup (Storm-0940), LiteLLM 1.107.0 (credential theft from AI dev environments, the third LiteLLM compromise in 2026), and OVHcloud CLI via GlassWorm - which waited seven months after an initial compromise before activating.
CVE-2026-91403 (Java SE JSSE, CVSS 9.1) affects every supported Java version and allows an unauthenticated network attacker to compromise data confidentiality and integrity. Oracle Fusion Middleware received 206 fixes, 134 remotely exploitable without authentication.
| Predicted Scenario | Probability | Timeframe | Basis |
|---|---|---|---|
| PHP2Shell exploitation against at least one state government web application | HIGH (85%) | 1–7 days | Active mass scanning confirmed; state PHP portals are internet-facing; 884K hosts unpatched |
| Fortinet exploit code emerges for newly patched vulnerabilities | HIGH (80%) | 2–5 days | Vendor's own AI patch-diffing warning; FortiSIEM PoC precedent (1 week to PoC) |
| Additional MSP/SaaS supply chain compromises disclosed | MODERATE-HIGH (70%) | 7–14 days | Three in 24 hours suggests broader campaign; MSP tooling is a proven high-yield vector |
| Storm-0940 or similar actor targets state government M365 tenants via MSP pivot | MODERATE (60%) | 7–30 days | Confirmed TTP; state agencies rely heavily on MSPs; ConnectWise is widely deployed |
| Election infrastructure phishing escalation by APT42 or affiliated actors | MODERATE (55%) | 1–12 days | Confirmed active campaign; election proximity increases motivation; diminishing time window |
| Ransomware group exploits PHP2Shell or Fortinet vulns for initial access to state networks | MODERATE (50%) | 7–21 days | SafePay and Qilin remain active; both groups historically adopt newly disclosed vulns quickly |
| Volt Typhoon/Salt Typhoon activity surfaces in state critical infrastructure | LOW-MODERATE (35%) | 30–90 days | Known pre-positioning behavior; current silence is consistent with operational security, not inactivity |
IOC Blocking Table:
144.172.64[.]99116.98.243[.]14176.236.127[.]109176.236.127[.]3749.87.220[.]6731.223.184[.]16637.19.200[.]5134.209.159[.]64103.114.163[.]18895.217.98[.]37litellm[.]dev
Block the above at perimeter firewalls, proxies, and DNS.
Hunting Hypotheses:
HUNT 01 · T1110.003
Storm-0940 Password Spraying
Monitor Entra ID sign-in logs for authentication attempts from
144.172.64[.]99 or ASN 14956.HUNT 02 · T1190
PHP2Shell Exploitation
Block the listed scanning IPs at WAF and perimeter firewalls immediately.
HUNT 03 · T1133
Fortinet Device Compromise
Monitor FortiOS/FortiManager/FortiAnalyzer management interfaces for unauthorized access or new admin accounts.
HUNT 04 · T1195.002
Supply Chain Credential Theft
Monitor workstations for
litellm==1.107.0 in any Python environment.HUNT 05 · T1566.002
Election Infrastructure Targeting
Monitor email security logs for phishing targeting election officials and voter registration admins.
Financial Services
PeopleSoft
Primary threat
State treasury and revenue agencies face compounded risk from the Oracle CPU and credential theft campaigns; PeopleSoft is the backbone of state financial and HR operations.
Actions
- Patch Oracle PeopleSoft and Java SE for CVE-2026-91403; monitor for ShinyHunters activity against PeopleSoft
Energy
Fortinet
Primary threat
State energy coordination networks using FortiOS as the IT/OT demarcation face a window where the entire Fortinet stack could be vulnerable; Volt Typhoon's silence doesn't mean absence of activity.
Actions
- Prioritize Fortinet patching on OT/IT boundary devices; hunt for Volt Typhoon living-off-the-land indicators
Healthcare
Medicaid
Primary threat
Medicaid enrollment and public health systems frequently run PHP; a successful PHP2Shell exploitation could trigger both a security incident and a HIPAA breach notification.
Actions
- Patch PHP on Medicaid and public health portals immediately; ensure offline backups of Medicaid databases are current and tested
Government
Elections
Primary threats
Core state government faces the broadest threat surface, with election infrastructure adding time-critical urgency given confirmed APT42 phishing against election officials.
Actions
- Implement daily log reviews of election management systems; audit ConnectWise usage and rotate M365 application credentials if in use
Aviation / Logistics
SCADA
Primary threats
Traffic management, bridge monitoring, and tunnel ventilation controls often sit behind Fortinet firewalls; SafePay ransomware uses VPN exploitation as its primary initial access vector.
Actions
- Apply emergency Fortinet patches to devices protecting transportation SCADA; audit VPN concentrators providing DOT system access
No sector cards match the selected filters.
Patch all PHP installations to 8.5.12, 8.4.27, 8.3.36, or 8.2.35 for CVE-2026-109618/109619; prioritize citizen-facing portals, deploy WAF rules if patching is delayed.
Incident Responder
Block all 9 PHP2Shell scanning IPs and Storm-0940 IP 144.172.64[.]99, apply Fortinet patches on all internet-facing devices, and audit ConnectWise usage across all state agencies.
SOC AnalystIncident Responder
No immediate actions for the selected roles.
Update Oracle Java SE across all state systems for CVE-2026-91403; prioritize PeopleSoft deployments and internet-facing Java applications.
Incident Responder
Patch BeyondTrust Remote Support for CVE-2026-102764, audit Python environments for LiteLLM 1.107.0, and implement detection for agentic AI attack patterns.
Incident ResponderSOC Analyst
No 7-day actions for the selected roles.
Commission a state government MSP/SaaS supply chain risk assessment; inventory all third-party OAuth consents and implement conditional access for privileged operations.
CISO / Exec
Establish a 48-hour emergency patch SLA for CVSS 9.0+ infrastructure, develop an AI-specific threat response playbook, and develop/maintain an SBOM for all state agency applications.
CISO / Exec
No 30-day actions for the selected roles.
The Bottom Line
October 22, 2026 marks a turning point. The first confirmed nation-state deployment of agentic AI in a real supply-chain attack is not a future scenario to plan for - it happened last week. An AI agent achieved privileged cloud access in under three hours through an MSP that state agencies may use today.
1
Patch PHP and Fortinet, audit ConnectWise, and block the IOCs today.
2
Patch Oracle and BeyondTrust this week.
3
Start building an AI threat response playbook now.