UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware

Author(s): Asheer Malhotra, Brandon White
Organization: Cisco Talos

Open article directly

2026-09-22 ⋅ Cisco Talos ⋅ Ryan Fetterman
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM

2026-07-16 ⋅ Cisco Talos ⋅ Alex Karkins, Chetan Raghuprasad
UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
CASTLESTEALER Remcos UAT-11795

2026-07-07 ⋅ Cisco Talos ⋅ Asheer Malhotra, Brandon White, Jungsoo An, Vanja Svajcer
UAT-7810 continues building ORB networks using new malware
DOGLEASH LONGLEASH JARLEASH UAT-7810

Propose Change UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware