Zscaler CXO Monthly Roundup | October 2026

Introduction

Since April 2026, with the advent of more capable models like Anthropic Mythos and OpenAI GPT Cyber, we as an industry have warned about the risks these models pose to global organizations when placed in adversaries’ hands. While they unlock transformative potential for security engineers seeking to embed AI into their workflows, they also expand the attack surface for organizations facing increasingly sophisticated attacks when used by threat actors.

We have now observed several instances of AI being used to launch large-scale attack campaigns globally. At the same time, more vulnerabilities are being discovered and exploited in increasingly short time frames. The figure below shows some of the notable threat activity from October highlighting this trend.

Threat actors in many of these attack campaigns have used open-weight models and clever harness engineering to compromise several global organizations.

This month, my roundup examines how AI is becoming part of the attacker’s infrastructure. A campaign involving the ARTEX framework shows how attackers are coordinating work across AI models and carrying results from one stage to the next using multiple agents. I also take a closer look at PHP2Shell and what shorter response windows mean for enterprise security.

In the rest of my roundup, I cover an APT campaign in which suspected TraderTraitor actors used a trojanized Terraform provider to deliver cross-platform malware. I also examine an SEO poisoning campaign distributing Armorsteal, a new malware family discovered by ThreatLabz.

Across these stories, attackers are changing how they turn exposure into access. Security leaders need to know where their organizations are vulnerable and be ready to act quickly. To level the playing field, defenders must invest in AI-driven security controls and prioritize architectural choices that strengthen their security posture.

AI Is Becoming Part Of The Attacker’s Infrastructure

Attackers are adopting agentic AI workflows to run their operations. Different models handle different tasks with results carried forward into the next stage of the attack.

ThreatLabz recently investigated a series of AI-assisted attacks that initially appeared to target South Korean financial institutions. As our analysis continued, we found that the activity was much broader than the initial targeting suggested, spanning multiple countries and industries.

At the center was ARTEX, an agentic penetration testing framework designed to use large language models (LLMs) to automate offensive security workflows. The threat actor combined ARTEX with AI coding assistants configured to use models including DeepSeek, GLM, and Grok, as well as custom scripts to carry out their global campaign.

What stood out to me was how AI was incorporated into the attack workflow. ARTEX broke objectives into smaller tasks. Across the entire workflow, multiple agents were assigned work with models selected based on their specialities and used to check each other’s results. That cross-model review helps identify gaps or mistakes before the attack progresses forward.

The ARTEX assisted global AI attack workflow is shown below:

The attack tactics and techniques themselves do not have to be new to create great risk. AI can make them easier to put into practice and repeat at scale in a very short timeframe. Security leaders need to account for that change in how attacks are carried out with significantly reduced response times.

Priorities for CXOs and security leaders

• Hide and reduce your attack surface wherever possible. What can’t be discovered is harder to exploit using AI. (e.g. Zscaler Private Access (ZPA))
• Use deception to detect and contain agentic attacks. (e.g. Zscaler Deception)
• Find and fix vulnerabilities using AI-powered exposure management to address weaknesses before attackers exploit them. (e.g. Zscaler AI Exposure Management)
• Apply Zero Trust everywhere (including inside the office), not just for remote access.
• Minimize blast radius with segmentation with an assume-breach mindset. (e.g. ZPA with AI Segmentation)
• Modernize security operations for machine-speed defense and perform red teaming on all external assets. (e.g. Zscaler Agentic SecOps)

Read the ThreatLabz analysis of the global AI-assisted hacking campaign.

Zscaler Zero Trust Exchange Coverage – Zscaler Internet Access (Advanced Cloud Sandbox, Advanced Threat Protection, SSL Inspection), Deception, Zscaler Private Access (AI Segmentation), Zscaler AI Protect, Zscaler Agentic SecOps

PHP2Shell: From Weeks To Hours – Rethinking Enterprise Response

PHP2Shell reinforces the need for enterprise security teams to understand where vulnerable PHP deployments exist and act quickly to reduce their exposure. As AI helps attackers analyze vulnerabilities and develop exploits faster, organizations need to prepare for shorter response windows.

CVE-2026-109618 and CVE-2026-109619 affect the core PHP engine. Successful exploitation could allow unauthenticated remote code execution or expose sensitive data from memory. Our ThreatLabz advisory blog details the vulnerabilities and observed attack activity, along with affected PHP versions and Zscaler recommendations. The attack chain below illustrates how attackers exploit PHP2Shell.

For security leaders, the challenge is translating that information into action across the application stack. Identifying affected deployments and investigating potential compromise need to happen in parallel with remediation.

In our PHP2Shell webinar, I join Director of Threat Research Jithin Prajeev Nair to discuss the vulnerabilities and their implications for enterprise security. The following priorities outline how organizations can prepare for a shorter window to respond.

Identify exposure across the application stack

• A vulnerability in a shared runtime can affect multiple applications, even when the application code itself is secure. Security teams need to identify and inventory all PHP deployments, including ecommerce platforms and shadow IT applications, and hidden PHP in content management systems (CMSs).
• Determine which PHP versions are running, and upgrade affected or older end-of-life versions to a supported, fixed PHP version.

Prioritize and accelerate remediation to keep pace with attackers

• Organizations cannot depend on the 30/60/90-day patching framework because exploitation is happening within hours.
• Prioritize deployments that are reachable from the internet, while accounting for internal applications.
• Organizations should patch, rescan, and migrate unsupported PHP versions.

Contain exposure when patching is not available or delayed

• Where patching cannot be completed promptly, determine whether the service can be disabled or access restricted.
• End-of-life dependencies require a solution such as isolating, retiring, taking offline, or rebuilding end-of-life PHP applications.

Hunt for exploitation and investigate compromise

• While application owners identify affected deployments and apply updates, security teams should review available telemetry for exploitation attempts and signs of compromise. Examine server logs, use managed threat and response (MDR), and monitor for abuse or unexpected processes.
• Attackers could steal session tokens, database passwords, API keys, cryptographic secrets, and use a compromised asset for lateral propagation. Where evidence supports it, expand the investigation to credentials and systems accessible from the affected application.

Verify remediation and monitor for remaining risks

• Teams should confirm that affected deployments are running a fixed version and investigate suspicious activity during the period of exposure.
• Security leaders need a clear view of what remains exposed, which interim controls are in place, and whether investigations have identified compromised systems. Exceptions should have an accountable owner and a defined resolution date.

Zscaler Zero Trust Exchange Coverage – Zscaler Internet Access (Advanced Cloud Sandbox, Advanced Threat Protection, SSL Inspection), Deception, Zscaler Private Access (AI Segmentation), Zscaler Agentic SecOps, Zscaler Managed Detection & Response

Trusted Developer Tool Becomes An Attack Delivery Channel

Trusted developer workflows are the entry point for a suspected APT campaign uncovered and recently analyzed by ThreatLabz. The campaign uses a trojanized Terraform provider masquerading as a legitimate AWS plugin to deliver malware for macOS, Linux, and Windows systems. Malicious code runs as soon as Terraform loads the provider. The activity overlaps with campaigns attributed to TraderTraitor, an APT actor backed by the North Korean government that has targeted the cryptocurrency industry for years. In a recent, unrelated campaign, the Federal Bureau of Investigation (FBI) linked TraderTraitor to the theft of billions of dollars from Binance.

The attack chain for the campaign analyzed by ThreatLabz is shown below:

The infection begins when the provider downloads a Bash loader from a HashiCorp lookalike domain. The loader selects malware tailored to the victim’s operating system and processor architecture, then retrieves encrypted payloads disguised as Web Open Font Format (.woff) files. The resulting FLATROOF backdoor establishes persistent access and deploys Python scripts to steal sensitive data, including browser credentials and session cookies. A subsequent backdoor, ROOFDECK, gives attackers remote control and uses a layered process to locate its command-and-control server through local configuration, signed Pastebin content, and Nostr profile metadata.

Zscaler Zero Trust Exchange Coverage – Zscaler Internet Access (Advanced Cloud Sandbox, Advanced Threat Protection, SSL Inspection), Deception, Zscaler Private Access (AI Segmentation), Zscaler AI Protect, Zscaler Agentic SecOps, Zscaler Managed Detection & Response

From Search Results To Credential Theft

A search for software installation instructions can lead directly to malware. In a recent blog, the Zscaler Threat Hunting team analyzed an SEO poisoning campaign distributing Armorsteal through fake websites impersonating the Chocolatey package manager and the Microsoft Activation Scripts (MAS) tool. The sites displayed malicious PowerShell commands disguised as installation instructions. Running those commands deployed a bundled Python runtime and installed the Python-based Armorsteal malware. The Chocolatey lure also installed the legitimate software, allowing it to function as expected while the infection proceeded.

Once installed, Armorsteal uses scheduled tasks to maintain access and connects to attacker-controlled servers for remote commands. It then deploys surveillance and information-stealing modules. These capture keystrokes and steal sensitive data, including browser passwords and SSH keys. Cryptocurrency assets are also a target: Armorsteal searches for wallet recovery phrases and replaces copied wallet addresses with attacker-controlled addresses. During our investigation, the operator changed hosting infrastructure and restricted access to payload downloads using tokens. Despite these infrastructure changes, the core malware functionality remained consistent.

Zscaler Zero Trust Exchange Coverage – Zscaler Internet Access (Advanced Cloud Sandbox, Advanced Threat Protection, SSL Inspection), Deception, Zscaler Private Access (AI Segmentation), Zscaler Agentic SecOps, Zscaler Managed Detection & Response

Updates

• ThreatLabz has identified a new Anatsa installer distributed through the Google Play Store. The app is disguised as an Android PDF reader and currently has more than 10,000 installs.
• ThreatLabz has identified an x64 variant of GuLoader that uses anti-analysis techniques similar to x86 samples, along with several added evasion methods.
• ThreatLabz observed exploitation of Citrix CVE-2026-88771 to deliver TimeSmuggler, a FreeBSD-based Rust implant also seen in the StyleSmuggler zero-day campaign.