[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Threat Hunting · markdown

detection guidance built from watchTowr's published exploit chain (Nov 5, 2026) and Barracuda's advisory; Barracuda has not published IOCs from the exploitation it observed

Hunt: Barracuda ESG exploitation looks like a failed admin password change plus a backup upload to /cgi-mod/index.cgi

  • Web/proxy logs in front of the Admin UI: POSTs to /cgi-mod/index.cgi from addresses outside your admin ranges, especially multipart bodies containing new_password, retype_password, pu_bayesian_upload or bayesian, and responses carrying "Error: Password Change".
  • Appliance audit log: failed_password_change entries for admin that nobody made, followed by a configuration restore you didn't run.
  • Configuration: a system_timezone value that isn't a plain zone name (look for ', ;, # or backticks), and unexpected changes to admin accounts, relays, forwarding or allowed hosts, since a restore rewrites the global config.
  • Response: if you find hits, Barracuda Support should be your first call. Given the 2023 ESG zero-day history, don't assume a firmware update removes an implant; collect evidence before re-imaging.

Sources: watchTowr Labs technical analysis (Nov 5, 2026) · watchTowr detection artifact generator (GitHub) · Barracuda Trust Center advisory (updated Nov 9, 2026)