Hello, stay ahead with CISO Brief 🚀

🛰️ Cisco Talos has uncovered VOLTA-AUTODOXER, a Windows infostealer that harvests credentials, cookies, payment cards, crypto seeds, OAuth tokens, SSH/cloud keys, Wi‑Fi profiles, and application sessions before feeding a structured evidence bundle into LLMs. The malware queries Gmail receipts and other sources to corroborate identities and then sends prioritized, monetization-ranked dossiers via Telegram across multiple exfiltration stages. VOLTA defaults to Anthropic Claude Opus 4.6 via OpenRouter and falls back to other models to produce a WHAT THEY'RE WORTH assessment and an OPSEC review, enabling operators to triage victims efficiently.

🔒 On October 24, 2026, AWS ran a public technical exercise showing the AWS European Sovereign Cloud can operate without any infrastructure outside the EU. The region, generally available since January 2026 and based in Brandenburg, Germany, is physically and logically separated and managed by European legal entities. During the test, the team disabled global systems and ran services on local EU resources, maintaining customer access and service availability.

🔒 A critical flaw in Canonical's LXD and MicroCloud allowed an attacker to impersonate a trusted client without possessing its private key by presenting that client's public certificate over the network TLS API. The bug, tracked as CVE-2026-112816 with a CVSS score of 10.0, affected several LXD and MicroCloud snap releases; Canonical and the Incus project have released fixes. Administrators should update snaps and restrict network access to the HTTPS API until patches are confirmed.

🛡️ Malicious code replaced a DebugBear page-speed script on Polymarket on October 29, allowing attackers to trigger signed-in traders' wallet signers and transfer positions and tokens to a hacker-controlled address. Blockchain traces show roughly $2.64 million in POL tokens moved within an hour; Polymarket is refunding about $2.7 million to 726 wallets and returning $3.9 million total to affected users. DebugBear says its DNS records were compromised and customers should remove its embed; Polymarket has cleared caches, reset sessions, paused trading and is adding stronger CSPs, pinned versions and sandboxing.

🔒 Chainalysis disclosed an intrusion where an external actor accessed non-sensitive customer data such as user IDs, full names, email addresses, and organization role labels. The company clarified that its investigation content, authentication credentials, and session tokens were not accessed. Chainalysis attributed the attack to an AI-enabled, agentic technique, and said it is patching vulnerabilities and hardening systems across the organization.

🔍 A new Windows infostealer named VOLTA-AUTODOXER harvests extensive credentials and artifacts, then uses stolen sessions to enrich victim profiles. It serializes the data into an evidence bundle and posts it to OpenRouter for an LLM-driven assessment that ranks monetizable assets and evaluates OPSEC. The malware chains multiple models for resiliency and exfiltrates both raw and AI-analyzed reports in a ZIP file.

🔒 CISA has added two Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities catalog after active exploitation was observed. The flaws — CVE-2026-111357 (privilege escalation) and CVE-2026-118527 (predictable identifiers leading to file upload) — form part of an exploit chain used with CVE-2026-104935 to achieve unauthenticated root execution. Patches are available in recent ICS releases and federal agencies have mandatory remediation deadlines.

🛡️ Researchers at Parameter disclosed a flaw in ChatGPT shared links that allowed attacker-supplied code to execute inside the signed-in session of anyone who opened the link. Reported to OpenAI on October 18 and fixed eight days later as a P1 severity, the attack required only opening a shared conversation and, in some variants, clicking the Preview button. The exploit chained a Preview-generated iframe with a vulnerable MathLive listener to inject HTML into the main chat page, letting the attacker call ChatGPT's signed-in APIs and access private conversations. OpenAI patched the issue across web frontends by rejecting the malicious messages; users need not take action. Parameter published details on October 28 and received a $5,000 bounty.

📊 Cloudflare reported it mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in Q3 2026, averaging one attack every 0.44 seconds. The firm ties the surge to DDoS-for-hire booter services and notes a 208% rise in short-burst, low-bandwidth attacks under 10 minutes and 1 Gbps. While hyper-volumetric attacks over 1 Tbps declined 69% from Q2—likely due to law enforcement actions—new variants such as Dysphoria and Evooo1Bot are emerging. Key targets include media, IT, gambling, software, and telecoms across the U.S., China, Indonesia, the U.K., and Türkiye.

🛡️ Buyers in 2026 face consolidated WAAP choices as platforms aim to replace separate WAF, API, bot, DDoS, and client-side controls with a single service. New AMTSO-certified test data from SecureIQLab v5.0 highlights large variance in overall protection and false-positive rates across vendors, making efficacy and tuning effort critical selection criteria. The article recommends probing API protocol coverage, time-to-tune on real traffic, and deployment/licensing scalability during proof-of-value trials.

🔔 Amazon Bedrock now supports OpenAI GPT-5.6 (Terra and Luna) on the bedrock-runtime endpoint in AWS GovCloud (US), and adds cross-Region inference to increase throughput and redundancy. The update enables the Responses, Converse, and Chat Completions APIs for these models and integrates model usage with existing Bedrock account-level controls. Invocation logs and CloudWatch metrics capture usage, latency, and errors, and costs are itemized in Cost Explorer and the Cost and Usage Report. Customers can review GPT-5.6 model cards in the Amazon Bedrock User Guide to get started.

🔎 Kiro web search is now available in AWS GovCloud (US), giving agents real-time access to current internet information so responses can include up-to-date search results and page content. The agent automatically uses web search for queries involving recent developments or topics outside the model's training data, and answers that reference web results include citations. Enterprise administrators can disable web search and web fetch for their organization via the Kiro console under Settings, and teams can remove web tools from individual custom agents or block them using capability-based permission rules. For further details, consult the AWS GovCloud (US) documentation, the monitoring and tracking guide, or contact your AWS account team.

📧 Amazon Connect Customer now automatically saves in-progress emails as drafts so agents can resume work after interruptions without losing content. Drafts restore the message body, recipients, subject line, and attachment references when agents return. Saved draft data is also stored in customer Amazon S3 buckets to enable integrations with other applications and workflows.

🔒 Daybreak Red from OpenAI is now available to eligible customers on Amazon Bedrock in AWS GovCloud (US‑East), providing an AI model tailored for authorized vulnerability research, exploit reproduction, and mitigation development. Built as part of the Daybreak cyber defense initiative, Daybreak Red: GPT‑5.6 Cyber includes stronger identity verification, monitoring, and access controls, and runs on Bedrock’s next‑generation inference engine with zero‑operator access at the chip. Inference data is not used to train models and Daybreak Red data need not be shared with OpenAI. Access requires enrollment through OpenAI and coordination with your AWS account team.

🔒 Amazon CloudFront can now forward two optional headers to origins: CloudFront-Viewer-ISP, which reports the viewer's internet service provider, and CloudFront-Viewer-TLS-Details, which reports the cryptographic details of the viewer TLS connection, including post-quantum indicators. These headers enable traffic and performance breakdowns by network and measurement of post-quantum TLS adoption. To use them, add the desired header(s) to an origin request policy and attach that policy to your distribution.

🔐 The identity landscape now spans humans, service accounts, machine identities, and AI agents, each representing an access decision that must be governed. Boards and regulators expect security leaders to demonstrate who or what has access to critical systems and how access is controlled. Continuous identity security replaces periodic reviews with ongoing discovery, lifecycle management, and evidence collection to maintain up-to-date oversight and meet accountability demands.

🔔 Amazon RDS for Oracle now allows you to disable automatic minor version upgrades for DB instances using the JVM, Spatial, Locator, or OLAP options. This change applies to new and existing instances—previously these options required automatic upgrades. You should still apply minor upgrades regularly for security fixes, or use AWS Organizations upgrade rollout policy to manage upgrade order while keeping automatic upgrades enabled.

🔒 Amazon MSK now supports TLS 1.3 for MSK Provisioned clusters via named encryption policies. Customers can opt in by selecting a security policy that defines permitted TLS versions and cipher suites, with no change to existing clusters until a policy is applied. Policies can permit both TLS 1.2 and 1.3 to enable gradual client upgrades or enforce stricter TLS 1.3-only requirements for compliance.