[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBqR0naO7I7GfXaVzEBjKwZ8fdSM5QMMVVVXnlKs0cfo":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":24,"status":37,"created_at":38,"published_at":39,"article":40,"tags":44,"podcasts":63,"controls":64},"b0a8c9fb-03aa-477a-a7e7-f7128490fb9a","ai-tools-excessive-third-party-access-and-banking-trojans-highlight-this-weeks-threat-landscape","b23ac87c-21cc-41f0-bcd6-42316830c3b5","AI Tools, Excessive Third-Party Access, and Banking Trojans Highlight This Week's Threat Landscape","Three distinct but interconnected threats emerged this week, each exposing gaps in how organizations vet and control access to sensitive systems and data. The RemControl Android banking trojan leverages AI-assisted development and abuses accessibility services, demonstrating that threat actors are actively weaponizing AI to accelerate and sophisticate attacks. The Z.ai coding assistant inadvertently leaked user code repositories to Alibaba Cloud, highlighting the data protection risks inherent in trusting third-party AI development tools with proprietary code. Finally, CISA and the FBI's warning about over-privileged ICS integrators underscores a persistent supply chain risk: third-party vendors with excessive access to critical infrastructure can become catastrophic attack vectors if compromised or negligent.","**Immediate actions:**\n- Audit and revoke excessive permissions granted to all third-party ICS\u002FOT integrators, enforcing least-privilege access principles immediately.\n- Disable or sandbox AI coding assistant integrations until their data handling and storage policies have been formally reviewed and validated.\n- Deploy mobile threat defense (MTD) solutions to detect and block accessibility service abuse by banking trojans like RemControl.\n\n**Long-term improvements:**\n- Establish a formal Third-Party Risk Management (TPRM) program that includes contractual data handling requirements and periodic access reviews for all vendors.\n- Implement just-in-time (JIT) access provisioning for ICS\u002FOT integrators so elevated privileges are granted only for defined maintenance windows and automatically revoked afterward.\n- Vet all AI-powered development tools through a security and privacy review process before allowing them to process internal source code or infrastructure configurations.\n\n**Detection measures:**\n- Enable logging and alerting on all third-party remote access sessions to ICS\u002FOT environments, flagging anomalous connection times or data volumes.\n- Monitor outbound network traffic from developer workstations for unexpected data exfiltration to unknown cloud endpoints associated with AI tooling.\n- Subscribe to CISA ICS advisories and threat feeds to receive timely warnings about critical infrastructure targeting campaigns.",[12,13,14,15,16,17,18,19,20,21,22,23],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 15 – Service Provider Management","NIST SP 800-82 – Guide to ICS Security","NIST AC-2 – Account Management","NIST AC-6 – Least Privilege","NIST SA-9 – External Information System Services","NIST SR-6 – Supplier Assessments and Reviews","GDPR Article 28 – Processor Obligations","GDPR Article 32 – Security of Processing","IEC 62443-2-1 – Security Management System for IACS","ITIL – Supplier Management Practice",{"NIST AC-6 – Least Privilege":25,"NIST AC-2 – Account Management":26,"CIS Control 5 – Account Management":27,"ITIL – Supplier Management Practice":28,"NIST SP 800-82 – Guide to ICS Security":29,"GDPR Article 28 – Processor Obligations":30,"GDPR Article 32 – Security of Processing":31,"CIS Control 6 – Access Control Management":32,"CIS Control 15 – Service Provider Management":33,"NIST SR-6 – Supplier Assessments and Reviews":34,"NIST SA-9 – External Information System Services":35,"IEC 62443-2-1 – Security Management System for IACS":36},"Requires least privilege, limiting both third party access and app permissions abused by RemControl.","Requires account management, including reviewing and removing unneeded third party accounts.","Asks for account management, including tracking third party accounts with access to sensitive systems.","Asks for supplier management, including governance of third party access.","Gives ICS security guidance, relevant where third parties have access to industrial systems.","Requires processor guarantees, relevant where third parties handle personal data.","Requires appropriate security for personal data, including protection from banking trojans and excessive access.","Asks for access control, limiting excessive third party access highlighted this week.","Asks for managing service providers, including reviewing the access they hold.","Requires assessing suppliers, including their access and security practices.","Requires managing external services, including the access they are granted.","Sets security management requirements for industrial automation, including governance of third party access.","published","2026-09-24T20:21:18.70225+00:00","2026-09-24T20:21:18.301+00:00",{"id":7,"url":41,"slug":42,"title":43},"https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fthreatsday-ai-search-poisoning-ai.html","threatsday-ai-search-poisoning-ai-coding-tool-leaking-repos-one-click-code-execu-37f6b0","ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories",[45,51,57],{"id":46,"name":47,"slug":48,"description":49,"color":50},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":52,"name":53,"slug":54,"description":55,"color":56},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":58,"name":59,"slug":60,"description":61,"color":62},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[65,69,73],{"slug":66,"name":67,"problem":68},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":70,"name":71,"problem":72},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",{"slug":74,"name":75,"problem":76},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes."]