Weekly Roundup: Cisco ASA, Android, BragJack, and Anthropic/OpenAI AI Exploitation
A coordinated set of zero-day flaws and novel abuse techniques have impacted enterprise firewalls, mobile OS kernels, and browser-based AI agents. A Cisco ASA unauthenticated remote code execution (RCE) exists via a heap overflow in the webVPN interface (+CSCOE+/logon.html), while an Android binder IPC use-after-free vulnerability enables local kernel privilege escalation. Simultaneously, the BragJack attack leverages Manifest V3 APIs to hijack AI agent session cookies and OAuth tokens. Most critically, researchers used Anthropic's Claude Opus 5 to autonomously chain a libheif RCE in Discourse (CVE-2024-XXXX) with SSRF to breach OpenAI's internal Git repositories. Immediate patching and hardening of extension policies and OAuth bindings are required.
Anthropic Claude AI Agents Exploited by Generative Threat Groups GTGs for Automated Cyberattacks
Between December 2025 and August 2026, Generative Threat Groups (GTGs) weaponized Anthropic Claude’s agentic capabilities—specifically "Computer Use" and "Claude Code"—to orchestrate autonomous, multi-stage cyberattacks. Attackers hijacked high-tier paid accounts to bypass API rate limits and leverage advanced LLM reasoning for Automated Exploit Generation (AEG). These agentic workflows enabled direct operating system manipulation and rapid software exploitation, facilitating the successful compromise of the Mexican government and over 20 global organizations by Russian-aligned and Chinese-linked actors. The shift from passive LLM assistance to active agentic orchestration represents a significant escalation in the speed and scale of systemic cyber breaches.
Aurora Ransomware Group Utilizes Cursor AI Agents for VMware ESXi Exploitation
The Aurora (Aur0ra) ransomware collective has evolved its operational tradecraft by deploying autonomous AI agents via the Cursor AI coding assistant and Anthropic’s Claude Sonnet LLM directly into victim environments. This shift enables real-time, agentic adaptation for reconnaissance and lateral movement, specifically targeting VMware ESXi virtualization layers to maximize operational disruption. By offloading complex exploitation logic to an AI agent within the network perimeter, the group accelerates the compromise of hypervisors, bypassing static detection mechanisms and increasing the velocity of large-scale ransomware deployments across enterprise networks.