Monday, October 12, 2026 · 2 MIN READ
Patch Fast: Attackers Target Business Websites and Remote Access
IT BRIEFING FOR BUSINESSES
Active attacks against SonicWall appliances and a WordPress plugin lead today's briefing, alongside cryptocurrency theft risks involving hardware wallets and iPhones. AI also brings a double challenge for Ohio businesses: questions about employees’ personal assistants and evidence of attackers using AI-powered tools.
SonicWall Remote-Access Flaw Is Under Attack
Attackers began exploiting a critical SonicWall Secure Mobile Access (SMA) 1000 vulnerability within days of its public disclosure. The report describes 135 exploitation attempts after a patch became available. Tracked as CVE-2026-102255, the flaw has a maximum severity score of 10.0 and can let an unauthenticated attacker make the appliance send requests.
For businesses using these appliances for remote access, this deserves prompt attention. Ask your IT provider to confirm whether you have an affected SMA 1000 appliance and verify that the available patch has been applied.
SOURCES:The Hacker News
Check WordPress Sites for Bricksforge
Patchstack reports active exploitation of a maximum-severity flaw in the Bricksforge WordPress plugin. CVE-2026-85097 allows attackers who are not logged in to upload and run PHP code on vulnerable websites.
That makes this more than a website maintenance issue: an affected business site could run code supplied by an attacker. Have your website administrator check whether Bricksforge is installed and address the vulnerability immediately.
SOURCES:The Hacker News
AI Assistants Bring Risks on Both Sides
Personal AI assistants are drawing privacy and transparency concerns. Amazon has blocked Meta’s Muse because it does not identify itself as a bot while browsing. Separately, researchers describe a campaign attributed to CyberXero that combined Claude Code-powered orchestration with offensive tools, targeted Ukrainian websites and infrastructure, and stole more than 628,000 records.
These are different issues, but both matter to businesses considering AI: staff use raises questions about access and privacy, while attackers are also adopting the technology. Set a clear approval process for personal AI assistants before employees connect them to business accounts or information.
SOURCES:The Hacker News The Hacker News
Ledger Investigates Tampered Reseller Wallet
Ledger found an unauthorized hardware implant in a wallet sold through CryptoBilis and has temporarily stopped sales through that reseller. The company is investigating reports of stolen funds from customers in Southeast Asia who bought devices from CryptoBilis.
For businesses holding cryptocurrency, this highlights why the device’s supply chain matters—not just its brand. If your company bought a Ledger wallet through CryptoBilis, contact Ledger for guidance before continuing to rely on it.
SOURCES:The Hacker News
iPhone Exploit Kit Adds Wallet Theft
Researchers at iVerify identified a previously unseen version of the DarkSword iOS exploit kit, called P7 DarkSword. It leaves a smaller footprint on the device, adds theft of keychain and cryptocurrency-wallet data, and supports two-way communication with attacker infrastructure.
SOURCES:The Hacker News