Activity Summary - Week Ending on 30 October 2026
- Red Sky identified 12,236 connections from ‘new’ and unique, compromised IP addresses
- Rackmarkt SL in France was hit 158x (2nd week)
- CTAC – Breach Data last 90 Days
- CISA Alert: Managing AI Token Consumption for OT Resilience
- https://www.cisa.gov/topics/critical-infrastructure-security-and-resilience
- Fake AI Campaigns
- Claude download campaigns & ChatGPT-themed Attack Chains
- Trojanized Claude Installer
- UK / Phase Eight
- Targeteer – N0N
Link to full Report: IR-26-304-001_weekly304.pdf
