Exostar, the Herndon, Virginia-based secure-collaboration provider, announced on August 20, 2026 that it is supplying its “Exostar Managed on Microsoft 365” environment-building technology for Fujitsu Limited’s new “Fujitsu Trusted Supplychain Service,” which Fujitsu is launching in Japan for the country’s defense and critical-infrastructure sectors.
The service will run on ISMAP-registered infrastructure in Japan — ISMAP being Japan’s government cloud-security assessment program — giving customers in-country data residency while inheriting security controls Exostar has already deployed for the U.S. Defense Industrial Base. The arrangement extends a collaboration between the two companies that began in 2019.
Executive Summary
The announcement is a technology-provision deal: Exostar builds and manages the secure Microsoft 365 environment inside Fujitsu’s service, while Fujitsu operates and sells the offering in Japan. The environment includes a managed enclave — a walled-off cloud workspace where sensitive files stay put rather than scattering across suppliers’ own systems — plus centralized identity and access management, multi-factor authentication, partner onboarding, information-sharing controls, and audit-ready activity logging.
Why it matters: cybersecurity requirements for defense suppliers are converging across allied nations. The U.S. Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) program, built on the NIST SP 800-171 standard, governs contractors that handle controlled unclassified information (CUI). Japan’s Ministry of Defense and its Acquisition, Technology & Logistics Agency (ATLA) have introduced closely aligned requirements, alongside Japan’s Economic Security Promotion Act of 2022. Multinational supply chains increasingly need one trust layer that satisfies both regimes.
For Exostar, the deal exports a platform proven in U.S. defense environments — a Microsoft GCC High enclave with FedRAMP Moderate Equivalency — into a second allied market through a local operator. For Fujitsu, it adds vetted enclave technology to a domestic compliance service without building it from scratch.
Allied Cybersecurity Mandates Are Converging on a Common Standard
The most significant context in this release is regulatory, not technical. NIST SP 800-171 — a U.S. catalog of security controls for protecting sensitive-but-unclassified government information on contractor systems — has become a de facto international baseline. The U.S. enforces it through CMMC; Japan’s defense ministry and ATLA have adopted closely aligned supplier requirements. When two allied procurement regimes converge on the same control set, a vendor that has already operationalized those controls at scale can sell essentially the same capability into both markets.
That is the strategic logic here. Exostar says its platform is used by more than half of the U.S. Defense Industrial Base, including 98 of the top 100 firms — a company-provided figure, but one that, if accurate, represents exactly the kind of installed-base credibility Japanese defense suppliers facing new mandates would want to borrow rather than rebuild. For smaller suppliers especially, achieving NIST 800-171-level security independently is expensive; inheriting controls from a managed enclave is the shortcut the compliance market has been moving toward.
The Shared-Responsibility Enclave Model, and Its Limits
The service uses what the release calls a shared responsibility model: Exostar’s managed environment provides many of the technical controls (encryption, access management, logging), while customers remain responsible for organizational requirements — policies, training, personnel vetting, and physical security. This is an honest framing worth noting, because “compliance in a box” claims in this market often gloss over it. An enclave can dramatically reduce a supplier’s technical burden; it cannot make an organization compliant by itself.
The economics still favor the model. Concentrating sensitive information in one controlled environment, rather than distributing it across dozens of supplier systems of varying maturity, shrinks the attack surface and the audit surface simultaneously. The trade-off is concentration risk and dependency: suppliers’ most sensitive collaboration flows through a single third-party-managed environment, which raises the stakes on that environment’s own security and availability — a question the release, understandably, does not explore.
Data Sovereignty as a Design Requirement, Not an Afterthought
The structure of the deal is itself instructive. Exostar did not simply extend its U.S.-hosted service to Japanese customers; its technology is integrated into a Fujitsu-operated service running on ISMAP-registered infrastructure inside Japan. Data residency — keeping data physically and legally within national borders — and in-country operation are explicit features. This reflects a broader pattern in allied technology cooperation: security capabilities cross borders, but data and operations increasingly do not.
For the infrastructure industry, that pattern has real consequences. Every allied market that mandates in-country operation for sensitive workloads creates demand for sovereign cloud capacity, local data centers, and partnerships pairing a foreign technology provider with a domestic operator. The Exostar–Fujitsu structure — U.S. platform expertise, Japanese infrastructure and go-to-market — is a template likely to recur as other allies formalize supplier-security regimes.
Winners, Losers, and the Competitive Field
The clearest beneficiaries, if the service performs as described, are mid-tier Japanese defense and critical-infrastructure suppliers that face rising security requirements without the IT resources of a prime contractor. Fujitsu gains a differentiated compliance offering; Microsoft benefits indirectly, since the enclave is built on Microsoft 365. The competitive pressure falls on standalone secure-collaboration and governance/risk/compliance vendors targeting Japan, who now face an incumbent domestic integrator paired with the dominant U.S. defense-collaboration platform.
That said, the release is a technology-provision announcement, not a results announcement. It names no customers, no adoption targets, no pricing, and no launch date beyond “launching in Japan.” The 2019-era Fort# Forum collaboration shows the relationship has history, but the market impact of this new service is, at this stage, a projection rather than a demonstrated outcome.
Background
Exostar was built around the U.S. defense supply chain’s need to collaborate on sensitive programs without leaking controlled information. The company says more than half of the U.S. Defense Industrial Base — including 98 of the top 100 defense firms — transacts business over its platform, and that over 25 of the top global biopharmaceutical companies also use it. Its U.S. defense offering runs in a Microsoft GCC High enclave with FedRAMP Moderate Equivalency, the assurance tier used for handling controlled unclassified information.
The Japanese market context has shifted markedly since the companies first partnered in 2019 on Fujitsu’s Fort# Forum offering. Japan’s Economic Security Promotion Act of 2022 and new Ministry of Defense and ATLA supplier requirements — closely modeled on the U.S. NIST SP 800-171 standard — have pushed Japanese defense and critical-infrastructure suppliers toward the same kind of formalized cybersecurity compliance that CMMC now enforces in the United States.
Kasm Technologies and Everfox announced a strategic technology partnership on August 20, 2026, combining Kasm Workspaces — a container-based platform that streams desktops and applications to users in disposable, policy-controlled sessions — with Everfox’s Trusted Thin Client, a purpose-built zero-trust endpoint for accessing networks at different security classification levels. The joint solution, available now, targets government, defense, and intelligence agencies that today issue multiple devices or run parallel virtual-desktop stacks to keep classified networks separated.
Executive Summary
The announcement pairs two specialized vendors around one problem: giving cleared personnel access to applications and desktops across multiple classification levels from a single device. In classified environments, networks at different levels (for example, unclassified versus secret) are deliberately kept apart, which historically means separate computers, separate virtual desktop infrastructure (VDI) stacks, and the cost and desk clutter that come with them. Everfox contributes the cross-domain access layer — its Trusted Thin Client bridges those separated networks on validated hardware — while Kasm contributes the workspace layer, streaming containerized desktops and applications into ephemeral sessions that are centrally managed and fully wiped when they end, so no data persists on the endpoint.
The companies emphasize that adoption does not require a rip-and-replace: Kasm Workspaces integrates with existing hypervisors, cloud environments, and identity providers, letting agencies layer modern workspace delivery onto current infrastructure and migrate at their own pace. The announcement is a technology partnership with immediate availability, but it names no customers, contract values, or accreditation milestones — it establishes a joint offering, not demonstrated adoption.
The Economics of Endpoint Sprawl
The clearest business case in this release is cost consolidation. In many classified settings, working across networks means a physical computer per classification level on each desk, or a separate VDI environment per network — each with its own licensing, patching, and support burden. The release frames the joint solution as a direct replacement for these “multi-endpoint, multi-VDI-stack approaches,” collapsing them into one validated device and one workspace platform. If the technology performs as described, the savings show up not just in hardware counts but in operational overhead: fewer stacks to patch, fewer images to maintain, and central policy enforcement instead of per-device configuration.
That said, the release quantifies none of this. There are no cost-comparison figures, seat counts, or reference deployments, so the economic argument rests on the general premise that fewer endpoints and fewer parallel stacks cost less — plausible, but unproven in this document.
Containers as a Challenger to Legacy VDI
The more interesting technical bet is architectural. Traditional VDI runs each user a full virtual machine, which is resource-heavy and rigid. Kasm’s model instead streams desktops and applications from containers — lightweight, fast-starting software packages — into browser-delivered sessions that exist only for the duration of use and are destroyed at termination. In security terms, ephemerality is a feature: a session that is fully wiped leaves no residual data on the endpoint, which matters enormously when the endpoint touches multiple classification levels.
Defense environments, however, are conservative adopters for good reason. Cross-domain solutions face some of the most demanding assurance expectations in government IT, and the release does not address how the combined stack is accredited or evaluated for cross-domain use — only that Everfox’s hardware is “validated” and its solutions are “purpose-built” for high-assurance environments. Whether container isolation plus a trusted thin client satisfies each agency’s specific approval processes is the question that will actually determine adoption, and it is not answered here.
The No-Rip-and-Replace Pitch
Both companies clearly understand their buyer. Agencies running classified missions cannot take infrastructure offline for a wholesale migration, so the release leans hard on incrementalism: Kasm integrates with existing hypervisors, clouds, and identity providers, and agencies can “transition at a pace that does not put critical missions at risk.” Kasm’s chief product officer, Daniel Ben-Chitrit, also stresses the absence of vendor lock-in and the platform’s on-premise deployment model — both sensitive points for government buyers wary of dependency on any single supplier or on commercial cloud availability.
Strategically, the partnership is complementary rather than overlapping: Everfox gets a modern desktop-delivery story to pair with its cross-domain plumbing, and Kasm gets a credentialed route into classified networks it could not plausibly enter alone. The risk cuts the other way too — a technology partnership without disclosed go-to-market commitments, joint contract vehicles, or named integrator support can remain a datasheet exercise. The release states the joint solution is available now, which is a stronger claim than a roadmap announcement, but availability and adoption are different things.
Background
Kasm Technologies builds an open-core platform for streaming containerized desktops, browsers, and applications to users through the web browser — a container-based alternative to virtual desktop infrastructure (VDI), the long-standing enterprise approach of hosting each user’s desktop as a virtual machine in a data center. Everfox operates in the cross-domain solutions market, supplying trusted access and secure data transfer between networks at different classification levels for government, defense, and intelligence customers, where high-assurance requirements have historically favored purpose-built hardware and specialized vendors.
The partnership lands amid a broader government push to modernize classified-environment IT, where the default pattern of one endpoint per network has become an acknowledged cost and usability burden. It also extends a run of alliance announcements from Kasm, which recently shipped Kubernetes support in Workspaces 1.19 and a stealth-networking integration with Dispersive, suggesting a deliberate strategy of pairing its workspace layer with specialized security partners rather than building those capabilities alone.
Corero Network Security (AIM: CNS; OTCQX: DDOSF), the London-headquartered DDoS protection specialist, announced AI-Augmented Cloud-Assist for its SmartWall ONE platform on August 20, 2026. The new capability layers cloud-delivered AI analysis, threat intelligence, and policy optimization on top of Corero’s existing on-premises, edge-based DDoS mitigation.
The system analyzes attack telemetry in Corero’s cloud, recommends new protection policies that can be applied manually or automatically in seconds, and keeps Corero’s security experts in an oversight role. It targets AI data centers, NeoCloud providers, service providers, and digital enterprises.
Executive Summary
The announcement is Corero’s answer to a problem the whole DDoS defense industry is wrestling with: attackers are using AI to develop and evolve attack campaigns faster than human security teams can write countermeasures. Corero’s proposed remedy is a continuous intelligence loop — on-premises SmartWall ONE appliances at the network edge feed attack telemetry and forensic data to Corero’s cloud, where AI identifies emerging attack behaviors and generates recommended protection policies, which flow back to the edge devices with human experts supervising the loop.
Why it matters: a distributed denial of service (DDoS) attack floods a network or service with junk traffic until legitimate users cannot get through, and mitigation speed is measured in seconds, not hours. If cloud-scale AI can genuinely shorten the gap between a novel attack pattern appearing and an effective policy being deployed, that is a meaningful operational improvement — particularly for AI data centers and cloud GPU providers (so-called NeoClouds) whose expensive workloads make downtime costly. The release, however, offers no benchmarks, pricing, availability dates, or named customers, so the launch is best read as a directional architecture statement rather than a proven result.
Fighting Automation With Automation
The premise of the launch is an arms-race argument: as attackers use AI to mutate DDoS campaigns mid-attack, defenses that depend on humans hand-tuning mitigation policies fall behind. Corero frames AI Cloud-Assist as restoring symmetry — machine-generated attacks met with machine-generated countermeasures, applied “in seconds.” That framing is consistent with where the broader security industry is heading, and the underlying logic is sound: policy generation is the slow, human-bottlenecked step in DDoS response, so it is the rational place to apply AI.
What the release does not provide is evidence of the improvement. There are no response-time figures, detection-accuracy comparisons, or before-and-after case studies. “Reduce response times, improve protection accuracy, and strengthen operational efficiency” are the intended outcomes, not measured ones. Buyers evaluating the claim will need to ask for data the release does not contain.
The Hybrid Architecture: Cloud Brains, Edge Muscle, Human Oversight
The design choice worth noting is what Corero did not do: it did not move mitigation to the cloud. Traffic scrubbing stays on the on-premises SmartWall ONE appliances at the network edge — close to the applications and AI workloads being protected — which preserves low latency, while the computationally heavy analysis moves to the cloud where scale is cheap. This is a sensible division of labor, and it plays to Corero’s installed base: the AI works from SmartWall ONE’s existing telemetry and forensic data rather than requiring a new sensor footprint.
Equally deliberate is keeping humans in the loop. Recommendations can be applied automatically or manually, with Corero’s security experts providing oversight. That addresses the real operational fear about AI-driven security — a false positive that auto-deploys a policy blocking legitimate customer traffic is itself a denial of service. The trade-off is that human oversight reintroduces some of the latency the automation was meant to eliminate; how customers tune that dial will determine how much of the promised speed they actually realize.
Reading the Target Market: AI Data Centers and NeoClouds
Corero names its target buyers explicitly: AI data centers, NeoCloud providers (the newer class of specialized GPU cloud operators), service providers, and digital enterprises. That ordering tells a market story. AI infrastructure operators run revenue-dense, latency-sensitive workloads and are attractive DDoS targets precisely because their downtime is expensive and visible. Positioning a DDoS product launch around them signals where Corero sees growth — and follows its recent momentum with infrastructure operators, including the deal in which its technology powers TierPoint’s Adapt DDoS protection service.
Competitively, Corero claims the capability “is largely missing in most DDoS solutions.” That is a contestable assertion in a market where large cloud-delivered DDoS providers also advertise machine learning and automated mitigation. Corero’s genuine differentiation argument is narrower and more defensible: combining cloud AI with on-premises edge mitigation and the forensic-grade telemetry its appliances already collect. The release asserts the broader claim without a competitive comparison, so readers should treat the “largely missing elsewhere” framing as positioning rather than established fact.
What Is Substantiated — and What Is Not
Substantiated by the release: the product exists as an announced extension of SmartWall ONE; it uses cloud-based AI analysis of attack telemetry; recommendations can be applied manually or automatically; human experts oversee the loop; and it targets edge mitigation for AI-era infrastructure. Unsubstantiated as yet: any quantified performance gain, the nature of the AI models involved, general availability timing, pricing, and customer adoption. None of this is unusual for a product launch release, but the gap between the confident claim that “this is the future of DDoS protection” and the absence of measurable evidence is exactly the space a prospective buyer’s proof-of-concept should fill.
Background
Corero Network Security has spent years as a pure-play DDoS specialist, selling automatic detection and mitigation for complex edge and subscriber environments — the kind of always-on, real-time protection that internet service providers and hosting operators embed in their networks. The company is dual-listed on London’s AIM market and the US OTCQX, with operational centers in Massachusetts and Edinburgh.
The launch continues a run of activity for the company: Corero was recently recognized as a leader and innovator in the 2026 DDoS SPARK Matrix vendor assessment, and its technology powers TierPoint’s new Adapt DDoS protection service — evidence of its strategy of reaching enterprises through infrastructure and service-provider partners. AI Cloud-Assist extends that installed edge footprint with a cloud intelligence layer rather than replacing it.
Security firm Huntress reported a 155x increase in password spraying attacks in the first half of 2026, driven largely by a campaign targeting Microsoft’s Azure CLI that generated more than 81 million login attempts and 78 account compromises in a single two-week window in mid-June. The traffic originated from an IPv6 range operated by hosting provider LSHIY LLC under a bring-your-own-IP arrangement.
The striking finding: most compromised organizations had multi-factor authentication (MFA) deployed. Attackers succeeded anyway by abusing Resource Owner Password Credentials (ROPC), a legacy OAuth login flow that bypasses MFA prompts entirely.
Executive Summary
Password spraying — trying one common password against many accounts, slowly enough to dodge lockout rules — is one of the oldest tricks in the attacker playbook. What Huntress documented in H1 2026 is that trick industrialized: a 155-fold volume increase, with a single campaign against Azure command-line logins producing 81 million attempts in two weeks. The attackers sharpened the technique by recycling valid username-and-password pairs from old breaches that were never rotated, making each attempt far more likely to land than a blind guess.
The deeper story is not password hygiene but policy scoping. Of 23 affected businesses Huntress analyzed, eight had no MFA at all — but the other 15 did, and were breached anyway because their Conditional Access policies (Microsoft’s rules engine for when to demand MFA) excluded the specific sign-in path the attackers used. The abused path, ROPC, is a deprecated OAuth grant that sends the username and password straight to the token endpoint with no interactive prompt where an MFA challenge could occur.
For any organization running Microsoft Entra ID — and for the infrastructure providers hosting them — the takeaway is blunt: MFA that is deployed but incompletely scoped provides the feeling of protection without the fact of it.
MFA You Bought Isn’t MFA You’re Getting
The most commercially significant number in the Huntress data is not the 155x surge — it is that 15 of 23 breached organizations had MFA deployed and it simply did not apply to the attack. Their Conditional Access policies were limited to certain applications or user groups, trusted ‘safe’ network locations, or sat in report-only mode, a testing setting that logs violations without blocking them. Each of those is a reasonable-sounding operational compromise, usually made to avoid locking out legitimate users or breaking a line-of-business app.
This reframes the identity-security market. The gap is no longer ‘do you have MFA?’ — adoption is widespread — but ‘can you prove every authentication path enforces it?’ That favors vendors and managed service providers selling policy auditing, attack-path validation, and identity posture management over those selling MFA seats. It also shifts liability conversations: an organization that attests to having MFA for cyber-insurance purposes, while ROPC sits unprotected, may find that attestation contested after a breach.
ROPC: The Legacy Door That Skips the Guard
Resource Owner Password Credentials is an OAuth grant designed years ago as a migration bridge: it lets an application collect a username and password directly and exchange them for an access token, with no interactive login screen. No login screen means no place to insert an MFA prompt. The grant is deprecated in OAuth 2.1, yet it remains available in many Microsoft Entra tenants — often because some old script or application still depends on it, and nobody wants to be the person who breaks it.
That is the economics of legacy authentication in miniature. The cost of leaving ROPC enabled is invisible until an incident; the cost of disabling it is an immediate, attributable helpdesk headache. Attackers systematically arbitrage that asymmetry. As Huntress’s Andrew Brandt put it, ROPC is technically ‘an impersonation method’ — a reused password that still works becomes an active session, no second factor required.
BYOIP and IPv6 Turn Blocking Into Whack-a-Mole
The campaign’s infrastructure choices matter as much as its authentication trick, and they land squarely on the hosting industry. The attackers used a bring-your-own-IP (BYOIP) service — a legitimate offering that lets a hosting customer route traffic through a provider using address space the customer owns. When LSHIY terminated the activity, the spraying resurfaced from FranTech-hosted IPv6 ranges, then from 3xK Tech on IPv4. Combine provider-hopping with IPv6’s effectively unlimited address pool and IP-based blocklists become a losing game: defenders block a range, attackers announce a new one.
For hosting and connectivity providers, this is a growing abuse-desk and reputation problem. BYOIP customers bring their own address space and, with it, their own history — providers that vet BYOIP onboarding lightly are effectively renting their network’s reputation to whoever shows up. Expect pressure, commercial if not regulatory, for stronger BYOIP due diligence and faster abuse response as these campaigns keep routing through legitimate infrastructure.
81 Million Attempts, Zero Follow-Through — and Why That’s Ominous
Huntress observed no post-compromise activity after the successful logins — no lateral movement, no data theft. Their assessment is that the operators were likely validating credentials for resale on dark-web markets. That points to a maturing supply chain: one group industrializes the guessing, verifies which credentials actually work, and sells confirmed access to others who specialize in monetization through business email compromise or ransomware.
The practical consequence for defenders is counterintuitive, and Huntress states it directly: do not prioritize response by spray volume. The most heavily sprayed tenants were often the least compromised. The right triage signal is credential validity — whether any attempt actually succeeded — not how much noise the attacker made. A quiet, successful login against a stale account is worth more attention than a million failures.
Background
Password spraying has been a staple of credential attacks for over a decade precisely because it exploits policy, not software: lockout rules watch for many failures on one account, while spraying spreads failures thinly across many. Its effectiveness has been amplified by the steady accumulation of breach dumps — billions of real username-and-password pairs that attackers replay against organizations where rotation never happened. Meanwhile, the industry’s answer, multi-factor authentication, has gone from rarity to near-mandate, pushed by cyber insurers and frameworks alike.
The unresolved seam between those two trends is legacy authentication. Protocols and grants that predate MFA — ROPC among them — persist inside cloud identity platforms like Microsoft Entra ID for backward compatibility, and each one is a path where a password alone still suffices. Campaigns like the one Huntress documented are best understood as the market discovering, at industrial scale, exactly where those seams are.
An AI-assisted cybersecurity tool has been credited with helping secure a satellite communication system in the aftermath of the 2022 Russian hacking campaign, according to a report from the Associated Press. The 2022 incident — the most consequential known cyberattack on commercial satellite communications to date — struck at the opening of Russia’s full-scale invasion of Ukraine and disrupted connectivity for users across Europe.
The report positions the tool as a working example of artificial intelligence applied to defending space-based connectivity infrastructure, an area regulators and militaries have flagged as critically exposed since that attack.
Executive Summary
The announcement, carried by AP, describes an AI-assisted tool that helped secure a satellite communication system following the 2022 Russian hack — widely understood to reference the attack on Viasat’s KA-SAT network on the day Russia invaded Ukraine. That attack used wiper malware to disable tens of thousands of satellite modems, cutting off Ukrainian users and collateral customers across Europe, including remote monitoring for thousands of German wind turbines.
Why it matters: satellite links carry traffic that terrestrial fiber cannot reach — rural broadband, maritime and aviation connectivity, military communications, and backup paths for critical infrastructure. The 2022 attack proved a nation-state could take a commercial satellite network’s user base offline in hours. Evidence that AI-assisted tooling has since been used to harden such a system marks a shift in defensive AI from lab pilots and vendor demos to operational deployment on infrastructure that has already been targeted in wartime.
For infrastructure operators, the signal is that AI-augmented defense is becoming table stakes for any network — space-based or terrestrial — that adversaries consider a strategic target.
From Pilot to Proven: Defensive AI Grows Up
For years, ‘AI in cybersecurity’ mostly meant anomaly-detection features bolted onto marketing decks. What makes this report notable is the context: the tool is credited with helping secure a system that suffered one of the most damaging real-world attacks on record, not a simulated range exercise. Securing a post-breach environment is the hardest test in the discipline — the adversary has demonstrated capability and intent, and defenders must assume they will return.
AI’s genuine advantage in this setting is scale and speed of pattern analysis. Satellite ground networks generate enormous telemetry streams from modems, gateways, and management servers. Human analysts cannot review that volume; machine-learning systems can flag deviations — an unusual firmware push, an unexpected management-plane login path — fast enough to matter. That is precisely the vector the 2022 attackers exploited, reaching modems through a compromised management network.
The Ground Segment Is the Soft Underbelly of Space
A persistent misconception is that hacking a satellite network means attacking the spacecraft. The 2022 incident showed otherwise: the attackers never touched the satellite. They compromised the terrestrial management infrastructure — the ‘ground segment’ — and used it to push destructive commands to customer modems. Wiper malware, which destroys a device’s software rather than stealing data, rendered the modems inoperable.
That architecture lesson generalizes across all infrastructure: the management plane is the crown jewel. Data centers, carrier networks, and cloud platforms share the same exposure — whoever controls the orchestration layer controls everything downstream. AI-assisted monitoring of that layer, rather than only the customer-facing edge, is where defensive investment is now flowing.
Market Stakes: Space Cybersecurity Becomes a Line Item
The commercial satellite connectivity market has expanded rapidly since 2022, driven by low-Earth-orbit constellations, in-flight and maritime connectivity, and government demand for resilient communications. Every new terminal is an endpoint an adversary can target. Insurers, defense customers, and regulators have all raised security expectations for satellite operators since the 2022 attack, and demonstrated AI-assisted hardening gives operators something concrete to point to in procurement and compliance conversations.
Winners in this shift are operators who can prove security posture, and vendors selling AI-driven monitoring for operational-technology environments. Under pressure are smaller operators and legacy VSAT (very-small-aperture terminal) networks running aging ground infrastructure that predates modern security assumptions — retrofitting is expensive, and the talent to do it is scarce.
The Limits: AI Defends, But Humans Still Own the Outcome
Caution is warranted. AI-assisted defense narrows the detection gap but does not eliminate the fundamentals: patching, segmentation of management networks, and credential hygiene — the exact weaknesses exploited in 2022. AI models also introduce their own attack surface, from data-poisoning risks to false-positive floods that exhaust analysts. And adversaries use AI too, accelerating vulnerability discovery and phishing at the same pace defenders accelerate detection.
The realistic read is that AI has become a force multiplier for well-run security programs, not a substitute for them. The systems most likely to benefit are those where operators pair AI tooling with disciplined architecture — which, based on this report, appears to be the path taken here.
Background
Commercial satellite communications became a wartime target on the first day of Russia’s 2022 invasion of Ukraine, when the KA-SAT broadband network operated by Viasat was hit with wiper malware delivered through its ground-based management systems. The attack disabled tens of thousands of modems, disrupted Ukrainian communications at a critical moment, and caused collateral outages across Europe. Western governments formally attributed it to Russia, and the incident became the canonical case study in space-infrastructure cybersecurity.
Since then, satellite connectivity has grown strategically and commercially — low-Earth-orbit constellations, aviation and maritime services, and military resilience programs have multiplied the number of networked terminals in orbit and on the ground. That growth has drawn sustained investment into securing the ground segment, where artificial intelligence is increasingly applied to detect intrusions and harden systems at a scale human teams cannot match.
On August 19, 2026, San Francisco-based Harness announced six new security capabilities — AI SAST, LLM Scan Orchestration, a Triage Agent, a Remediation Agent, a Zero-Day Agent, and virtual patching — all available now on its AI Software Delivery Platform. The agents are designed to compress the gap between the roughly six hours attackers now need to weaponize a disclosed vulnerability and the 50-plus days enterprises take on average to fix one.
The launch landed the same day Palo Alto Networks unveiled its multi-vendor Frontier AI Critical Defense Program to protect critical infrastructure from AI-discovered vulnerabilities, and MarketsandMarkets projected the critical infrastructure protection market will grow from $160.28 billion in 2026 to $206.31 billion by 2031.
Executive Summary
Harness is betting that the vulnerability-response problem is no longer a detection problem but a speed problem. Frontier AI models — the most capable large language models — are being used by attackers to find and chain vulnerabilities faster than ever, with first exploits appearing as little as six hours after disclosure. Defenders are gaining the same scanning power: Harness cites Project Glasswing partners surfacing roughly 10 times more vulnerabilities with LLM-based scanning. But more findings without faster remediation just means a bigger backlog.
The new agents cover the full vulnerability lifecycle inside the delivery pipeline itself: AI SAST pairs deterministic scanning with an AI layer that filters false positives and catches complex flaws like IDOR (insecure direct object references, where an attacker manipulates identifiers to access data they shouldn’t); the Triage Agent prioritizes what is actually exploitable; the Remediation Agent writes, validates, and opens a pull request with a fix; the Zero-Day Agent monitors disclosures around the clock and generates validated fixes often within minutes; and virtual patching shields production immediately with no code changes while the real fix is finished.
Why it matters: as Harness application-security GM Rahul Sood put it, the same AI models helping customers ship software faster are what attackers use to exploit it faster — and the only way to close that gap is to make security a first-class part of the delivery pipeline rather than a disconnected process. The simultaneous Palo Alto Networks program launch suggests the whole industry has reached the same conclusion on the same day.
The Six-Hour Exploit Window Breaks the Old Security Model
The economics of vulnerability management were built on a comfortable assumption: defenders had weeks between a disclosure and real-world exploitation. Harness’s numbers — six hours to first exploit versus more than 50 days to an average fix — show that assumption is dead. When AI can read a vulnerability disclosure and generate a working exploit before most security teams have finished their morning stand-up, any process with human handoffs between scanning, ticketing, triage, and deployment is structurally too slow, regardless of how well each step is staffed.
This reframes what security products have to sell. For two decades, the pitch was visibility: find more vulnerabilities. Harness’s own framing concedes that visibility now makes things worse — Project Glasswing partners finding 10x more vulnerabilities via LLM scanning simply produces a 10x bigger backlog if remediation speed stays flat. The scarce resource is no longer detection; it is validated, deployable fixes. Products will increasingly be judged on time-from-disclosure-to-deployed-patch, a metric most enterprises today cannot even measure.
Security Is Collapsing Into the Delivery Pipeline
Strategically, this launch is a land grab by a DevOps platform into application security territory. Harness’s argument is architectural: standalone scanners produce findings that must cross organizational and tooling boundaries to become fixes, and every boundary adds days. By putting scanning, triage, remediation, and deployment on one platform — with every agent working from the same reachability data, meaning analysis of whether vulnerable code is actually invoked in a given application — Harness claims fixes ship in hours without added headcount. The 2025 Traceable merger, July 2026’s Agent DLC governance launch, and the Kong and Google integrations show this has been a multi-year build, not a feature bolted on for a press cycle.
The winners and losers logic is straightforward. Platform vendors that own the pipeline (Harness, and by extension GitHub, GitLab, and the cloud providers) gain a structural advantage over point-solution SAST and vulnerability-management vendors, whose findings now have to flow into someone else’s remediation loop. For buyers, the trade-off is the classic platform bargain: faster outcomes and fewer tools to manage, in exchange for deeper dependence on a single vendor.
A Coordinated Industry Response — and a $206 Billion Market
Harness did not announce alone. The same morning, Palo Alto Networks introduced the Frontier AI Critical Defense Program, described as a collaboration of leading technology providers to protect critical infrastructure against the rapid rise of AI-discovered vulnerabilities. When the largest pure-play security vendor organizes a multi-vendor defense program on the same day a DevOps platform ships machine-speed remediation agents, the signal is clear: AI-discovered vulnerabilities have moved from a research concern to the organizing threat model of the industry.
The money follows. MarketsandMarkets projects the critical infrastructure protection market growing from $160.28 billion in 2026 to $206.31 billion by 2031, a 5.2% compound annual growth rate. That is steady rather than explosive growth — but the composition of that spend is what matters. Budgets built around perimeter appliances and manual patch cycles will be re-allocated toward automated response, and vendors positioned on the remediation side of the ledger stand to capture a disproportionate share of it.
The Trust Problem: Machines Propose, Humans Still Approve
Harness has kept a human in the loop at the critical moment — the Remediation Agent opens a pull request for a developer to review and approve rather than pushing fixes straight to production. That is the right call for adoption, but it also means the last mile of the process still runs at human speed. If AI agents generate 10x more validated fixes, code review becomes the new bottleneck, and enterprises will face pressure to auto-merge low-risk patches — a governance question this launch raises but does not resolve.
Virtual patching, which shields production immediately without code changes, is the pragmatic hedge: it buys time at machine speed while humans finish the real fix. The risk to watch is complacency — virtual patches that quietly become permanent, accumulating an invisible layer of compensating controls. The enterprises that win with these tools will be the ones that treat machine-speed response as a bridge to actual remediation, not a substitute for it.
Background
Harness began as a continuous-delivery company and has grown into what it brands the AI Software Delivery Platform™ — automating the software lifecycle after code is written, from builds and testing through deployment and cost management. Customers such as United Airlines, Morningstar, and Choice Hotels use it to accelerate releases by up to 75% and cut cloud costs by 60%, and the company is backed by Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, and Citi Ventures. Its security push dates to the early-2025 merger with API-security firm Traceable and continued through 2026 with Agent DLC governance for AI coding agents and integrations with Kong and Google.
The market backdrop is an arms race: the same frontier AI models that help developers ship faster let attackers find and chain vulnerabilities in hours, and let defenders surface an order of magnitude more findings than their patching processes were built to absorb. That dynamic — visibility outrunning remediation — is driving both vendor consolidation around delivery pipelines and industry-wide efforts like Palo Alto Networks’ new Frontier AI Critical Defense Program.
Source: Harness Launches AI Agents for Machine-Speed Vulnerability Response — Harness press release via PR Newswire, August 19, 2026, with same-day context from Palo Alto Networks’ Frontier AI Critical Defense Program announcement and MarketsandMarkets’ critical infrastructure protection market forecast.
Two senators, one from each party, have proposed a law to prepare the power grid for quantum computers. These are a new kind of machine that could one day crack the digital locks protecting the grid’s control systems.
The bill gives the Energy Department one year to study the danger and set up a test lab where power companies can try stronger locks.
Why it matters: the huge computer warehouses that run artificial intelligence depend on the grid. If the grid’s security slips, their electricity is at risk too.
Legis1 reported that Sens. Chris Coons (D-DE) and Mike Rounds (R-SD) introduced the Quantum Grid Utility Assurance and Resilient Defense Act, or Quantum-GUARD Act, on August 14, 2026. The bill targets a future threat: quantum computers powerful enough to break the encryption that protects the electric grid’s IT and control systems.
The bill would require the Federal Energy Regulatory Commission (FERC) to weigh quantum risks when it reviews grid reliability standards. It would give the Department of Energy one year to stand up a post-quantum cryptography testing sandbox with utilities, grid operators and vendors, and one year to report to Congress on quantum risks to the bulk-power system. IonQ, American Binary, the Quantum Industry Coalition, the Quantum Economic Development Consortium and the Cyber Threat Alliance endorsed it.
Executive Summary
The Quantum-GUARD Act is the first bill aimed specifically at moving the electric grid onto post-quantum cryptography. These are encryption methods designed to withstand attacks from quantum computers. The bill does not order utilities to replace anything. It directs regulators to study the problem, build a joint testing environment and factor quantum risk into the rules that govern grid reliability. Sen. Rounds described it as codifying parts of President Trump’s June executive order on advanced cryptographic attacks, which set a federal policy of moving government systems to NIST-approved post-quantum standards and helping critical infrastructure owners do the same.
For the data center industry, the significance lies in the dependency, not the quantum computers themselves. AI campuses are among the largest new customers of the grid, and their uptime rests on utility control systems they neither own nor secure. Encryption upgrades to those systems are slow to plan and deploy. A bill that starts one-year federal clocks on assessment and testing marks the point at which grid cryptography becomes something power-hungry operators should track alongside capacity, interconnection and price.
Why Grid Encryption Belongs on the AI Power Risk List
A data center’s power is only as dependable as the systems that run the grid behind it. Those systems include substation controls, generator dispatch and the communications between control rooms and field equipment, which engineers call operational technology, or OT. Much of that traffic is protected by public-key cryptography, the same family of math that quantum computers are expected to threaten. The Quantum-GUARD Act names this directly: it would require FERC to consider post-quantum cryptography in both IT and OT systems, and it tasks the Energy Department with identifying obstacles to moving ‘high-value systems’ to new standards.
The one-year deadlines explain why operators should track this now rather than later. Under the bill, DOE’s Office of Cybersecurity, Energy Security, and Emergency Response would have twelve months to launch a testing sandbox and twelve months to deliver findings to the Senate Energy and Natural Resources and House Energy and Commerce committees. Those are the first steps of a migration, not the end of one. Grid control equipment often stays in service far longer than office IT, so any cryptographic change moves through procurement, testing and field replacement over years. For a company planning an AI campus that depends on a particular utility for a decade or more, how that utility handles the transition is a real long-term risk, even though the bill never mentions data centers.
In practice, this is a due-diligence item rather than an alarm. Large-load customers already question utilities about capacity, redundancy and restoration times. The bill’s framework makes it reasonable to add a question about cryptographic readiness, and to expect that the answer will be shaped by whatever the DOE study and sandbox produce.
What the Bill Does, and What It Leaves Open
The bill’s verbs matter. FERC would have to ‘consider’ quantum risk when reviewing proposed reliability standards. That makes quantum risk a factor in rulemaking but sets no deadline for migration. DOE would ‘study’ and ‘establish’ a sandbox, with no requirement that utilities adopt what it finds. This is a framework bill. It builds the evidence base that later mandates, if any, would rest on.
That restraint has advantages. Utilities run a very wide mix of legacy and modern equipment, and a mandate issued before anyone has tested post-quantum algorithms on real grid hardware could cause more reliability problems than it solves. The sandbox exists to test that, bringing utilities, vendors, federal agencies and state and local organizations into one environment to find where new cryptography breaks old equipment. The cost is time. By design, the bill’s first concrete output is a report, and the harder questions of who pays, on what schedule and under what enforcement come after it.
Why Now: The Standards Exist, the Threat Does Not Yet
The timing follows the standards. NIST finalized its first three post-quantum cryptography standards in August 2024 and has encouraged organizations to begin transitioning, which means there is now a defined target to migrate toward. Before that, a grid-specific migration bill would have had nothing concrete to point at.
The threat, by contrast, is still prospective. The bill is framed around protecting the grid ‘before sufficiently powerful quantum computers can undermine existing encryption,’ and it does not say when that might happen. That is the right way to frame it. The argument for starting early rests on how slowly large infrastructure changes its cryptography, not on any fixed date for when quantum machines will arrive. Readers should treat claims of an imminent quantum break, from any side, with the same caution the bill’s own wording shows.
A Quantum Industry Coalition Behind a Grid Bill
The endorsements come mainly from the quantum and cybersecurity sectors: IonQ, a quantum technology company; American Binary; the Quantum Industry Coalition; the Quantum Economic Development Consortium; and the Cyber Threat Alliance. Support from companies that build quantum and security technology is expected and does not weaken the bill’s reasoning, which rests on NIST’s published standards and an existing executive order. It does mean that the people who would carry out the migration, meaning utilities, grid operators and state regulators whose ratepayers ultimately fund utility upgrades, will shape how practical the plan turns out to be, and their public positions on the bill are worth watching.
Background
The US electric grid runs under mandatory reliability standards, including cybersecurity rules. These are largely developed by the North American Electric Reliability Corporation and approved by FERC. The Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (CESER) leads the department’s work on energy-sector security. Grid cybersecurity has historically focused on present-day threats such as intrusions and ransomware. Quantum computing adds a longer-horizon concern: that a sufficiently powerful machine could defeat the public-key encryption that protects much of the grid’s communications.
NIST’s finalization of its first three post-quantum cryptography standards in August 2024 gave organizations a concrete target for migration. Federal policy has since moved toward requiring that transition for government systems and supporting it for critical infrastructure. Meanwhile, rapid data center construction, driven largely by AI, has made grid reliability a central concern for the digital infrastructure industry.
The American government will now let approved private companies break into, and even wreck, computers run by foreign criminal hacking gangs. In March, officials said they would not do this.
Each company must set aside at least $1 million, which it loses if it breaks the rules. Every attack needs written approval from the Justice Department and Homeland Security.
The catch: hackers working directly for a foreign government are off-limits. That matters because the order came after suspected Iranian attacks on water suppliers in 45 American towns.
Tom’s Hardware reported that President Donald Trump signed a presidential memorandum on August 12 creating the first US program that lets vetted private companies conduct offensive cyber operations against foreign cybercrime organizations. These include operations that destroy data and systems. Participating firms must post at least $1 million in escrow, which they forfeit if they break program rules. Every operation needs written approval from Department of Justice and Department of Homeland Security officials.
A National Coordination Center will run the program. Implementation guidance is due within 60 days. The policy reverses public statements administration officials made in March.
Executive Summary
The memorandum authorizes two kinds of activity. “Cyber Surveillance Operations” means getting into foreign systems without permission to gather intelligence while staying undetected. “Cyber Effects Operations” means disrupting or destroying those systems and their data. Both large firms and smaller specialists will be eligible. Participants may also sign commercial deals with other private firms and with state and local agencies to receive threat data and propose operations based on it.
This matters for two reasons. First, it turns offensive cyber activity, long treated as a government monopoly in the US, into something a licensed private sector can do under supervision. Second, its target definition is narrow. A group qualifies as a target unless “clear intelligence exists” that it is part of a foreign government or wholly run at a government’s direction. So the program is aimed at criminal ransomware crews, not at the state-directed actors behind many attacks on physical infrastructure. For operators of water, power and data center infrastructure, that distinction shapes what the program can and cannot do for them.
The Target Line Runs Straight Through Critical Infrastructure
The memo arrived after suspected Iranian cyberattacks on water suppliers in 45 US municipalities. It also followed a CISA alert about Iranian hackers targeting programmable logic controllers (PLCs), the small industrial computers that open valves, run pumps and switch equipment at water and energy companies. Yet state-directed hackers fall outside the program’s own definition of a valid target. Private operators could go after a ransomware crew that encrypts a utility’s billing systems. They could not go after a government-run unit tampering with its treatment-plant controllers.
The line is drawn deliberately. Ransomware crews that operate with a state’s tolerance but not under its formal control stay within scope, a description that fits much of the Russia-based ransomware ecosystem. Once an actor is clearly an arm of a foreign state, the matter stays with government. For utility and industrial security teams, the practical conclusion is that nothing changes for defending operational technology against nation-state intrusion. Segmentation, monitoring and incident response for control systems remain their responsibility. The new program targets the financially motivated threat, not the geopolitical one.
There is also an ambiguity problem. Eligibility turns on whether “clear intelligence” ties a group to a government, and in practice attribution is often contested and slow. A group judged criminal today may later prove to have state links. That question will matter a great deal to any firm whose operation lands on the wrong side of the line.
A $1 Million Bond on a Destructive Capability
The escrow requirement is the program’s main economic control. A minimum of $1 million, forfeited for rule-breaking, is a meaningful commitment for a small specialist firm. Whether it is proportionate to the harm a destructive operation could cause is a separate question. Wiping servers that turn out to be shared with innocent third parties could produce losses well above that figure. The minimum works as a deterrent and an entry filter. It is not obviously a compensation fund.
The commercial provisions may matter more for the market’s shape. Participants can contract with other private firms and with state and local agencies, receive threat data and propose operations based on it. That creates a potential new service line for security vendors: selling disruption, not just detection. Two background facts point the same way. Congress earmarked $1 billion for offensive cyber operations in last year’s spending bill. Google said in August last year that it was preparing to take part in disruptive actions against cybercriminals. Large platform companies with deep telemetry into criminal infrastructure look like natural participants. Smaller firms may compete on specialized tasks, as the eligibility rules anticipate.
Escalation, Legal Exposure and a Classified Annex
DOJ and DHS officials cannot approve operations likely to cause loss of life or amount to an armed attack under international law. The memo does not prohibit such operations outright, however. Approval authority for them sits in a classified annex. Companies weighing participation, and the public, therefore cannot see the full rulebook for the highest-risk cases.
Personnel face exposure too. Jake Williams, vice president of research and development at Hunter Strategy, told TechCrunch that Americans involved in these operations “could easily be classified as non-uniformed combatants while traveling overseas.” That is a risk that falls on individual employees, not only on their employers, and firms will need to account for it in staffing, travel policy and insurance.
The speed of the reversal adds uncertainty. In March, Thomas Lind, then a senior adviser at the Office of the National Cyber Director, said the administration had no plans to authorize private offensive operations: “We’re not interested in fighting pirates with pirates.” National Cyber Director Sean Cairncross said the same week that companies running offensive campaigns were not what the administration meant when it asked industry for help. A policy that changed direction within months could change again, which makes long-term investment in offensive capability a harder bet.
Collateral Risk Is Written Into the Rules
The memo requires any company that unintentionally hits a US person or a system on US soil to halt operations and notify the government immediately. That clause concedes that operations aimed abroad can land at home. Criminal groups commonly route activity through rented servers and compromised machines owned by unrelated parties. Hosting providers, cloud platforms and data center operators therefore have a direct interest in how approvals weigh that possibility, and in how quickly they would be told if their infrastructure were affected.
Defenders more broadly face a quieter risk: retaliation. A criminal group whose systems are destroyed by a US firm may not distinguish between that firm and US targets generally. The memo’s safeguards govern how operations are approved. They do not change who absorbs the response.
Background
For decades, US law and policy have treated breaking into someone else’s computer as illegal, even when that someone is an attacker. Offensive cyber operations have been reserved for government agencies such as the military and intelligence community. Proposals to let private victims “hack back,” including the Active Cyber Defense Certainty Act introduced in Congress in 2017, never became law. Critics warned of misattribution, collateral damage and escalation.
Pressure grew as ransomware crews, many operating from jurisdictions beyond the reach of US law enforcement, hit hospitals, pipelines and municipalities. Some large technology firms have already worked with authorities to take down criminal infrastructure, and Google said last year it was preparing to take part in disruptive actions. The August 12 memorandum is the first formal framework for private firms to go further, under federal supervision.
Security researchers at Symantec say a small hacking crew based in China spent months reading the email of government officials across Asia and the Middle East. It also ran a cryptocurrency scam business from the same control screen.
Its most effective move: instead of breaking into government ministries one at a time, it broke into the single company that hosted all of their email. One planted piece of code reached more than 15 government email systems at once.
The takeaway is simple. When many organizations rely on one shared provider, one break-in can expose all of them.
Industrial Cyber reported on August 14 that Symantec’s Threat Hunter Team, working with Carbon Black researchers, has exposed Jewelbug, which Symantec describes as a China-based hackers-for-hire group. According to Symantec, the group ran espionage campaigns against governments, militaries and state telecom operators across the Middle East, Southeast Asia and South Asia. It also ran a cryptocurrency fraud operation aimed at Chinese-speaking victims, and both activities were managed from a single browser-based control panel called XG-Web.
In under three months, Symantec found, the group logged more than one million implant check-ins and stole over 580,000 browser cookies, thousands of credentials and more than 2,300 email bodies. An implant is a piece of malware that reports back to its operators. Its largest operation compromised a shared web-hosting platform run by a Middle Eastern state telecom provider, which placed malicious code in front of more than 15 government webmail tenants at once.
Executive Summary
Symantec’s research is unusually detailed. It is built on visibility into the group’s own control panel and victim database, so it describes more than a list of intended targets. It documents actual compromises: harvested mailboxes of senior officials, intercepted internal network traffic, and implants running on Windows machines, Linux servers and network devices. Jewelbug is also tracked under other names, including Earth Alux, REF7707 and CL-STA-0049.
For infrastructure operators, the most important finding is architectural rather than about any single piece of malware. Jewelbug did not breach each ministry one by one. It gained write access to a centrally hosted webmail system run by a state telecom and planted one script, and that script fired for every ministry employee who logged in. A second finding points in the same direction. The group’s Linux and router implant, ClientKing, is built to reach servers and network equipment, the layer that carries everyone else’s traffic.
Symantec also reported that some ClientKing builds were configured to route traffic through the internal corporate proxy of a major U.S. aerospace and industrial manufacturer. That extends the group’s footprint beyond Asia and the Middle East into industrial infrastructure.
One Write Permission, Fifteen Ministries
The shared-hosting compromise is the clearest demonstration in Symantec’s report of how multi-tenancy changes the economics of an attack. Multi-tenancy means many customers running on one platform. The Middle Eastern government’s ministries did not each run their own mail servers. They were tenants on a web-hosting platform operated by the state telecommunications provider. Once Jewelbug had write access to the central webmail system, it needed only one malicious script. That script ran each time any ministry staff member logged in or checked their email, across more than 15 government tenants.
The attack chain that followed was conventional, and that is part of the lesson. The injected code captured session cookies and email addresses. Session cookies are the small tokens that keep a user logged in, and stealing one can let an attacker impersonate that user without a password. Windows users were then shown a fake Adobe Flash update prompt, which installed Antino, the group’s backdoor. Antino added a malicious browser extension that gave operators control of the browser and a route into internal government networks. None of these steps required a novel exploit against each ministry, because the shared platform had already delivered every tenant to the attacker.
Symantec’s own summary makes the point directly: compromising a shared hosting provider and placing a watering hole on every government tenant turned a single intrusion into access across an entire national webmail estate. A watering hole is a trusted site rigged to infect the people who visit it. The implication for telecoms, hosting providers and data center operators that serve government or regulated customers is that the provider’s control plane is part of every tenant’s attack surface. The control plane is the administrative layer with write access to shared code. Tenant isolation at the data layer does little if one set of credentials can change the code all tenants run.
The Network Layer Is in Scope
Most espionage reporting centres on endpoints: laptops, email and browsers. Jewelbug’s toolkit goes further. According to Symantec, ClientKing is a Linux and router implant that can reach servers and network devices, and all of the group’s implants feed one victim database. Routers and Linux servers sit below the level where most endpoint detection tools operate. They often run for years between refreshes, and they see traffic from many downstream users at once.
That matters for the telecom operators Symantec says were targeted. A foothold on network infrastructure can outlast a cleaned-up laptop and can observe traffic rather than just one user’s files. Symantec noted that the group intercepted internal network traffic, and that the common thread across its espionage targets was government communications and the providers that host them. The researchers said that combination would give an intelligence customer broad, durable access to official correspondence.
The detail about the U.S. aerospace and industrial manufacturer needs careful reading. Symantec said a couple of ClientKing builds were configured to beacon through that company’s internal corporate proxy. That shows the group’s tooling was set up to operate inside or through that environment. The report as described does not establish the extent of any compromise there.
A Hack-for-Hire Business Model, Visible From the Inside
Symantec’s central attribution finding is that foreign-government espionage and commodity cryptocurrency fraud ran on the same infrastructure, by the same small team, from one control panel. The researchers call that pairing the signature of a hack-for-hire entity running for-profit crime on the side. They tied the fraud and search-engine-optimisation arm, with high confidence, to the sole legal representative of an SEO company in Changsha, Hunan Province. That attribution rests on identity documents, a business license and a stamped authorization letter. Symantec was explicit that the link between this individual and the espionage operators is not fully established. Its assessment is that the SEO business most likely supplied access, infrastructure and delivery.
The operational discipline is notable for defenders. The group has built five generations of command-and-control code, the servers and software attackers use to direct their malware. A scheduled job checked its own domains against VirusTotal every 12 hours so operators could rotate away from anything flagged. VirusTotal is a widely used public malware-scanning service. Antino disguised its communications as ordinary Microsoft cloud traffic. Taken together, these choices suggest that blocklists and domain reputation alone will lag this kind of operator. Behavioural monitoring and integrity checks on shared code are better placed to catch it.
For hosting and telecom operators, the practical questions are about blast radius. Who holds write access to code that every tenant executes? Is that code monitored for unauthorized changes? Are session tokens bound tightly enough that a stolen cookie is of limited use? None of these are exotic controls. The Jewelbug case shows what happens when one of them fails on a platform many customers share.
Background
Symantec is one of the longest-established names in enterprise security. Its enterprise business has been part of Broadcom since 2019, and its Threat Hunter Team publishes research on state-linked and criminal hacking groups alongside Carbon Black, another Broadcom-owned security brand. Different vendors often track the same group under different names, which is why Jewelbug also appears in industry reporting as Earth Alux, REF7707 and CL-STA-0049.
Telecom operators and hosting providers have long been attractive espionage targets because they sit upstream of many customers at once. Governments in many regions consolidate ministry email and web services onto shared platforms, often run by a state telecom, to cut cost and complexity. The Jewelbug case shows the other side of that trade-off: consolidation also concentrates risk. Earlier in 2026, Symantec reported on Seedworm, an Iran-linked group whose campaigns spanned government, airport, manufacturing and financial targets.
Government agencies in the United States and South Korea have jointly warned about a criminal hacking group called Gunra. It breaks into organizations, copies their private files, locks everything up, then demands payment, threatening to publish or sell the stolen files if victims refuse.
Its main way in is the security equipment that lets employees log in to work networks from home. Once inside, it erases its tracks and works overnight, between 10 at night and 6 in the morning.
Hospitals, banks, utilities and universities are among its targets. One bright spot: a flaw in one version lets some victims unlock files without paying.
Industrial Cyber reported that the FBI, the Cybersecurity and Infrastructure Security Agency (CISA), the Department of Defense Cyber Crime Center (DC3), the National Security Agency (NSA), the US Secret Service and South Korea’s National Police Agency (KNPA) released a joint advisory Monday on Gunra, a ransomware operation derived from leaked Conti source code. Gunra steals data, encrypts systems and threatens to publish or sell the stolen data on its leak site, with victims listed across the Americas, Europe, the Middle East, Africa and the Asia-Pacific region.
The advisory says Gunra gets in mainly by exploiting known flaws in internet-facing firewall and VPN appliances, including two authentication-bypass vulnerabilities in specific FortiOS and FortiProxy versions (CVE-2024-55591 and CVE-2025-24472), deletes logs to hide, and works primarily between 10 p.m. and 6 a.m.
Executive Summary
Six US and South Korean agencies have published a detailed account of how Gunra ransomware operates, from initial access to extortion. Gunra emerged in April 2025, added a Linux variant by mid-2025, and by early 2026 had become a ransomware-as-a-service operation that recruits affiliates on dark web forums. Its leak site lists victims in more than ten sectors, including healthcare, finance, utilities, transportation and government.
For infrastructure operators, the advisory’s significance is where the attack begins and how it hides. Entry runs through the edge: firewall and VPN appliances with known vulnerabilities, default credentials or weak access controls. Once inside, the actors delete system and network access logs, clear command history, work overnight and run an encryptor that produces no observable network indicators. That combination leaves appliance logs held somewhere the attacker cannot reach, and watched after hours, among the most useful signals a defender has.
The advisory also contains a rare point in defenders’ favor: as of March 2026, Gunra’s Linux variants use weak, time-seeded randomness that lets encryption keys be reconstructed and files recovered without payment, though that does nothing about data already stolen.
The Front Door Is the Security Appliance Itself
The most consequential detail for infrastructure operators is how Gunra gets in. The FBI observed the group obtaining initial access primarily by exploiting known vulnerabilities in internet-facing devices, including firewall and VPN appliances, and named two authentication-bypass flaws in specific FortiOS and FortiProxy versions: CVE-2024-55591 and CVE-2025-24472. An authentication bypass lets an attacker reach functions that should require a login without valid credentials. South Korea’s National Police Agency separately observed Gunra exploiting credential exposure and Secure Shell (SSH) access-control weaknesses on internet-facing VPN gateways.
The intrusion the agencies describe shows how modest the first step can be: default credentials on an SSL-VPN appliance, the encrypted gateway remote staff use to reach internal systems, with no account lockout to stop repeated guessing. After compromising an administrator workstation, the actors reached the appliance’s administrative console, found an unused account with access to both external and internal networks, and modified it to skip a mandatory password change, creating a persistent backdoor that looks like an ordinary account.
For data center, colocation and network operators, firewalls and VPN concentrators sit at the boundary of nearly everything they run, including remote administration paths into their own environments. Because both named CVEs are known vulnerabilities, the defense here is patch cadence and asset inventory rather than anything exotic. The practical test is whether an operator can list every internet-facing appliance it owns, its firmware version and every account configured on it, including dormant ones.
Why Edge Appliance Logs Belong Off the Box
Gunra is built to leave few traces where defenders usually look. According to the advisory, the actors delete system and network access logs and clear command history while active, conduct reconnaissance and encryption primarily between 10 p.m. and 6 a.m., and run the encryptor as a self-contained binary that produces no observable network indicators. Data is exfiltrated before encryption, so by the time files lock, the extortion leverage has already left the network.
Taken together, those facts narrow the useful evidence to a short list, and the advisory’s own incident-response guidance points at it: review network appliance logs for anomalous privileged activity and audit file creation to detect exfiltration. Logs that exist only on the compromised appliance or host are exactly what the actors delete. Logs forwarded in near real time to a separate, access-controlled collector survive that deletion, and they only help if someone, or an automated rule, is watching during the overnight window the group favors.
This falls hardest on organizations that run round-the-clock infrastructure with thin overnight staffing, and on managed service providers that administer appliances for many customers. An after-hours login to a VPN administrative console, a dormant account suddenly modified, or a change to appliance traffic controls are low-volume events that are straightforward to alert on, provided the record sits where the attacker cannot erase it. None of this is new practice, but Gunra’s combination of edge entry, log wiping and night-time activity turns off-device logging from a best-practice line item into the difference between catching the intrusion before encryption and discovering it from a ransom note.
MFA and Credentials Fail at the Seams
The advisory is a reminder that multi-factor authentication (MFA) protects a login step, not the systems behind it. Against one victim, Gunra modified files on the virtual desktop infrastructure (VDI) authentication portal, the gateway to remotely hosted desktops, so it would accept a designated one-time password. The actors also manipulated SSL-VPN traffic controls to harvest credentials and session cookies, hijacked sessions to impersonate legitimate users, and entered the internal VDI environment with stolen session tokens.
Inside, the playbook targets the identity core. Using Impacket libraries over SMB, the Windows file-sharing protocol, the actors moved laterally to the VDI authentication server, the Active Directory server that governs who can access what, and IT staff desktops. They ran secretsdump.py against the NTDS database where domain controllers store password hashes, enabling pass-the-hash and pass-the-ticket attacks that reuse stolen credentials without cracking them. At one victim they reached a Hiware system access control server over SSH and stole the symmetric key needed to decrypt enterprise server credentials stored in its database.
The operational lesson is that authentication portals, privileged-access systems and key stores are high-value targets in their own right and warrant the same integrity monitoring and segmentation as production systems. The agencies’ recommendations map onto each step: least-privilege administrative rights, audits for unrecognized accounts, MFA on all services with emphasis on VPNs and webmail, network segmentation to restrict lateral movement, and disabling command-line and scripting activity where possible.
A Flaw in the Linux Encryptor, With Limits
One finding cuts in defenders’ favor. As of March 2026, the advisory says, Gunra’s Linux ELF variants use a weak pseudorandom number generator seeded with predictable system time, allowing defenders to mathematically reconstruct keys from file timestamps and recover files without paying. That is relevant to infrastructure operators because Linux underpins much of the server estate, and Gunra introduced its Linux variant in mid-2025 as it moved toward cross-platform targeting.
The limits matter. The weakness is described for the Linux variants as of a specific date, and ransomware-as-a-service operations, which rent their tooling to affiliates, can ship revised builds. Key recovery also does nothing about stolen data: the threat to publish or sell it stands regardless. Offline, immutable backups kept in a physically separate, segmented location, and tested, remain the control that makes recovery independent of both the attacker’s cooperation and the attacker’s mistakes.
Background
Gunra traces its code to Conti, a prolific ransomware operation whose source code leaked in 2022 and has since been reused by several groups. Gunra appeared in April 2025 focused on Windows systems, introduced a Linux variant by mid-2025, and by early 2026 had adopted a ransomware-as-a-service model, in which core developers supply the malware and infrastructure while recruited affiliates carry out intrusions in exchange for a share of ransoms.
Joint advisories from US agencies and foreign partners are a standard way of publishing attacker techniques, indicators and mitigations for a specific ransomware family. They typically align recommendations with CISA and NIST’s cross-sector cybersecurity performance goals, a baseline of practices such as patching internet-facing systems, maintaining offline backups, enforcing multi-factor authentication and segmenting networks.
