Alex: Welcome to Cleartext. It's Tuesday, October 20th, 2026. I'm Alex Chen.

Jordan: And I'm Jordan Reeves. Let's get into it.

Alex: We've got a packed show today. APT28 is back inside NATO's defense industrial base with new tooling. Autonomous AI agents are breaching enterprise websites at machine speed. A major food retailer is dealing with cross-continental operational disruption. ConnectWise has a cascading supply chain problem through its MSP network. DHS just banned DeepSeek and every vendor tool built on top of it. And we've got an active exploitation campaign hitting Siemens industrial environments. Let's start where the geopolitical stakes are highest.

Jordan: So APT28, Fancy Bear, Forest Blizzard, whatever you want to call them. Symantec's Threat Hunter Team is tracking this cluster as Swallowtail. They've breached defense contractors in two NATO member states and a law enforcement agency. The headline capability here is a previously undocumented backdoor called HOOKEDGE, delivered via a reflective loader technique. This is an active, ongoing espionage campaign. Not historical. Not attributed retroactively. Happening now.

Alex: And I want to underscore the targeting profile. Naval shipbuilder in a NATO country. This isn't opportunistic. This is strategic intelligence collection directly relevant to Russia's military planning. If you're a CISO at a defense prime, a tier-two subcontractor, or frankly any organization in the NATO defense supply chain, this morning's tasking is clear: threat hunt for HOOKEDGE and Swallowtail TTPs. Symantec's published the indicators. Use them.

Jordan: What stands out to me technically is the reflective loader. It's a well-known evasion technique, injecting a DLL into memory without touching disk, but the fact that APT28 wrapped a brand new backdoor in it tells you they're investing in fresh tooling specifically to evade detection in environments that should be among the most hardened on the planet. These are defense contractors. They have security programs. And APT28 still got in and maintained persistent access with dwell time across multiple networks.

Alex: Recorded Future's coverage adds an important detail for CISOs who need to brief their boards or government liaisons. The dwell time element. These operators weren't just getting in and getting caught. They were living in these networks. That persistent access is the difference between a security event and a strategic intelligence compromise. If you have government contracts, this is the kind of campaign that should trigger a conversation with your contracting officer and your threat intelligence team simultaneously.

Jordan: And look, Russia's prioritization of the Western defense industrial base has been consistent since at least 2014. What's changed is the tempo and the sophistication of the tooling. HOOKEDGE is new. The reflective loader delivery is refined. They're iterating faster than many defenders are updating their detection logic.

Alex: Let's pivot to something that connects thematically but shifts the threat landscape in a fundamentally different direction. Autonomous AI agents being weaponized at scale.

Jordan: This one is genuinely significant. A Chinese-speaking threat actor deployed autonomous AI agents using the Cairn penetration testing tool against more than twelve hundred websites. Over a hundred companies were successfully breached. We're talking John Deere, SharkNinja, Cummins. Major industrial and consumer brands. And the kicker, a security researcher watched the whole thing happen in real time because the operators left their control panels exposed on the public internet.

Alex: Which is simultaneously reassuring and terrifying.

Jordan: Exactly. The operational security was terrible. But the capability worked. These agents conducted full attack cycles, recon, exploitation, exfiltration, at machine speed without continuous human direction. The operator pointed the tool at targets and walked away. That's the model.

Alex: For CISOs, this changes the math on web application security. We've been building defenses assuming a human attacker with human constraints, attention span, fatigue, the need to context-switch between targets. An autonomous agent doesn't have those limitations. It can run a thousand attacks concurrently and optimize its approach in real time. Your detection velocity needs to match that.

Jordan: And this ties directly to Blackwall's fundraise. They just raised a hundred million at a two-point-two billion dollar valuation, quadrupling their prior round. They're focused on bot detection, traffic filtering, and protecting websites from AI-driven automated traffic. The market is telling you something. The investor community sees autonomous agent traffic as a structural shift, not a novelty.

Alex: It's validating the thesis in real time. The same week we see AI agents breaching a hundred-plus companies, a bot management company quadruples its valuation. CISOs doing vendor landscape reviews for web application security should be paying attention to that signal.

Jordan: Let's move to the breach at Ahold Delhaize. This is one of the world's largest food retailers. Stop and Shop, Giant, Food Lion, Albert Heijn across Europe. Confirmed cyberattack, services disrupted in the US and Europe simultaneously.

Alex: What makes this one strategically interesting is the cross-continental operational impact. This isn't a data breach story. This is a business continuity story. Store-level disruption suggests the impact went beyond IT systems into logistics and operational technology environments. For CISOs in retail, CPG, or critical infrastructure, this is a case study in what happens when your attack surface spans continents and your operations depend on tightly integrated supply chains.

Jordan: And this is the second time they've been hit. There was a prior cyberattack in 2024. Persistent targeting of the same organization. That pattern should concern any CISO who's been through an incident and assumed the adversary moved on.

Alex: Exactly. Recovery isn't the end of the story. It's the beginning of the next targeting cycle.

Jordan: Now, ConnectWise. This is a supply chain story that should have every CISO who relies on an MSP reaching for the phone this morning. Attackers gained unauthorized access to application identities associated with ConnectWise Cloud Backup. That service touches Microsoft 365 tenant data. ConnectWise has reset all accounts, replaced application credentials, and the service has been offline.

Alex: The critical detail is that MSP customers reported attackers used compromised credentials to access end-customer tenants. So this isn't contained to ConnectWise. This is a cascading third-party risk event flowing through the MSP channel into potentially thousands of downstream organizations.

Jordan: If your organization uses an MSP that runs ConnectWise, you need to verify tenant isolation, confirm credential rotation, and assess what data may have been accessible through those application identities. Don't wait for your MSP to tell you. Ask them directly and demand specifics.

Alex: Now let's talk about two supply chain stories that have very different textures but the same underlying lesson. First, AOMEI. Google attributed a supply chain attack to a threat group they track as UNC7017. They repeatedly altered AOMEI Backupper server configuration files for five to ten minute windows between April and July of this year to deliver Crossroad and Shinyroad malware across more than ten countries.

Jordan: The tradecraft here is exceptional. No software vulnerability exploited. No build pipeline compromised. They modified configuration files briefly, delivered malware through the legitimate update mechanism, then reverted the changes. Five to ten minute windows. That's designed to evade integrity monitoring and forensic analysis. And AOMEI hasn't notified customers yet despite confirming the compromise to reporters.

Alex: If you have AOMEI Backupper or AnyViewer anywhere in your environment, audit it immediately. But the broader point is about backup software in general. These tools run with high privileges. They touch your most sensitive data. And their update mechanisms are often implicitly trusted. That implicit trust is the attack surface.

Jordan: The second supply chain policy story is DHS banning DeepSeek from federal civilian agencies. But it's not just DeepSeek. The order sweeps in any third-party vendor tools built on DeepSeek models. That's the supply chain framing that matters.

Alex: This is a precedent-setting move. The supply chain language means agencies can't just remove the DeepSeek app. They have to audit every vendor in their stack to determine whether any of them are running on DeepSeek models under the hood. That's a significant compliance burden, and it's going to cascade to government contractors and then to regulated industries.

Jordan: CISOs in those sectors should be building AI model provenance into their vendor risk management programs now. If you can't answer the question, what foundation models does this vendor tool use, you have a gap.

Alex: Let's hit the Conduent settlement quickly because it's a useful board-level data point. Eighty million dollars to settle a class action arising from a breach of sixty-two million healthcare records. The breach originated at a business process outsourcer.

Jordan: Eighty million. That's your benchmark for breach liability at scale in healthcare services. If your board asks what a major breach actually costs, that number is concrete, recent, and defensible. And the third-party origin should reinforce every argument you've made about vendor oversight.

Alex: Last story. Active exploitation of a Siemens Software Center vulnerability. CVE-2026-110936. DLL sideloading flaw, CVSS eight-point-four. Siemens confirmed exploitation in an advisory updated October seventeenth. Patch is available in version four-point-nine-point-eight.

Jordan: The significance here is the target. Siemens Software Center is the download and installation manager for the entire Siemens software ecosystem. It's the front door to Siemens automation, manufacturing execution systems, engineering tools. Compromising it gives you initial access into OT and ICS environments. The ROMULUS ClickFix campaign is using it to deliver remote access trojans. If you run Siemens in your industrial environment, patch today.

Alex: So stepping back, what's the theme connecting today's stories?

Jordan: Supply chain trust is being systematically exploited at every layer. APT28 targeting the defense supply chain for intelligence. AI agents attacking the web application layer at scale. ConnectWise's MSP channel creating cascading access. AOMEI's update infrastructure weaponized without touching the code. DeepSeek models embedded invisibly in vendor tools. Siemens' own software manager turned into an entry point.

Alex: The common thread is that adversaries aren't attacking you directly anymore. They're attacking the things you trust. Your update mechanisms, your MSP partners, your backup software, the AI models embedded in your vendor stack. The CISO's job in 2026 is increasingly about verifying the integrity of trust relationships that were previously assumed to be safe.

Jordan: And the velocity is accelerating. AI agents mean attack speed is no longer constrained by human operators. Five-minute supply chain attack windows mean detection has to be near-real-time. The gap between attacker capability and defender detection speed is the risk metric that matters most right now.

Alex: Watch for follow-on reporting on the APT28 campaign this week. If Symantec has named it, there's more coming. And if you're in the ConnectWise ecosystem, don't wait for the all-clear. Assume exposure and verify.

Jordan: Good hunting.

Alex: That's Cleartext for Tuesday, October 20th, 2026. Show notes and links to every story we covered are at cleartext.fm. We'll see you tomorrow.