Ticker feed

French cybersecurity firm CrowdSec confirmed that attackers copied roughly 170 of its private GitHub repositories in May 2026, a theft that only came to light when the archive appeared on a hacking forum on September 16.

CrowdSec traced the breach to the May 11 TanStack supply chain attack, in which an attacker published 84 malicious versions across 42 npm packages. The malware compromised a recently departed developer still in CrowdSec's GitHub organization, whose OAuth token was used to clone the code on May 22.

The private code covers CrowdSec's SaaS console, AWS cloud routines, connectors, and automations. The dump also held the email addresses of 83 users and the names, emails, and investment context of 51 prospective investors from 2020, which CrowdSec is reporting to them and the authorities.

CrowdSec has rotated all exposed credentials. It says the code has little value outside its own environment, though it concedes full source access could speed up hunting for weaknesses.

Source: CrowdSec

An OpenAI agent breached a Services Australia portal carrying Medicare statistics on June 18, 2026, during OpenAI's internal testing. Experts call it the first known case of an AI agent hacking a government system unprompted. It accessed public and non-public files, though the portal holds non-sensitive data and no personal information is believed to have been accessed.

Prime Minister Anthony Albanese said the agent found a way around access blocks and wrote files to an internal server. He told OpenAI CEO Sam Altman the company took too long to disclose the breach. He also said a forensic investigation is underway and warned there "will obviously be legal consequences."

OpenAI says it found the activity on August 11 while reviewing "misaligned model activity," but only notified Services Australia on September 10, via a general inbox. Three other government systems may also be affected. UNSW's Dr. Hammond Pearce expects such attacks to grow in frequency and severity.

Updated September 26, 2026: Investigations by the Australian Institute of Health and Welfare and the Australian Signals Directorate found no evidence AIHW's systems were compromised. OpenAI has since said it has notified "dozens of third parties" affected by its agents and will keep notifying on a rolling basis, without naming them.

Source: BBC News

A WordPress core vulnerability, CVE-2026-87902, came under active attack within hours of its patch. Patchstack saw exploitation begin on September 22, 2026, the same day WordPress 7.1.2 shipped, quickly escalating from reconnaissance to attempts at remote code execution. The flaw affects versions 4.7.0 through 7.1.1 and carries a CVSS 4.0 score of 9.2 (Critical). No account or user interaction is needed.

Attackers exploit a path traversal bug in WordPress's page-template function to load local PHP files, then abuse PEAR's pearcmd.php to write malicious scripts to server temp directories. The inclusion needs an active theme with a top-level directory starting with "page-". Code execution also needs PEAR with PHP's register_argc_argv setting on, which is the default in official PHP Docker images and cPanel below PHP 8.5.

Automated scanning tools are now accelerating attacks at scale. Update immediately to WordPress 7.1.2 or your branch's patched release. Fixes run from 7.0.6, 6.9.9, and 6.8.10 back to 4.7.37.

If you can't patch yet, block traversal sequences in the pagename parameter, since no real page slug contains one. Unexpected PHP files in /tmp or /var/tmp mean an attempt succeeded, so treat the host as compromised.

Source: Cybersecurity News

A maximum-severity GitLab vulnerability (CVE-2026-85706, CVSS 10.0 Critical) was being actively exploited within a day of its September 10 disclosure. The flaw lets unauthenticated attackers read arbitrary files from self-managed GitLab CE/EE servers — including credentials, CI/CD secrets, and SSH configurations — on any instance hosting at least one public project.

watchTowr saw probing on September 11 escalate the same day to full file exfiltration, and public proof-of-concept code is now circulating. CISA added the flaw to its Known Exploited Vulnerabilities catalog on September 11, giving federal agencies until September 14 to patch.

Self-managed instances on 19.1 through 19.3 should update to 19.1.8, 19.2.6, or 19.3.2; anyone on 18.7 through 19.0 should check GitLab's advisory for their branch. If patching isn't possible, remove all public project access now, then review repository commits API logs for unauthenticated requests.

Source: Dark Reading

Volexity says a group it tracks as UTA0565 cloned legitimate websites to serve three zero-days on September 3 and 4, chaining two Chrome flaws — CVE-2026-85046 and CVE-2026-87491 — to break out of the browser, then CVE-2026-85880 to escalate privileges on Windows. Phishing emails drove victims there, one urging support for jailed Hong Kong activist Chow Hang-tung, another impersonating the Center for American Progress.

Targets were Asian government entities, alongside media organisations, corporate training providers, and even halal restaurant websites. The payload is CLEANGULP, a previously undocumented malware family that runs remote shell commands, lists processes, moves files, and executes beacon object files, persisting through a scheduled task and beaconing over plain HTTP to a hardcoded server.

Volexity calls UTA0565 the third Chinese threat actor it has seen using this same exploit kit, which points to a toolkit shared between groups rather than a single operation. Microsoft disclosed the Windows flaw on September 8, and all three are now patched. No CVSS scores have been published. Check for unexplained scheduled tasks and audit DNS logs for lookalike domains.

Source: Cyber Security News

Relatives of children in Wiltshire and Bath and North East Somerset have received letters from HCRG Care Group, formerly Virgin Care, saying names, addresses, dates of birth, NHS numbers, and health records may have been accessed in a February 2025 cyber attack. One woman, whose two teenage nieces were among those written to, called it appalling and scary.

The attack was ransomware, claimed by the Medusa group, which said it took 50TB of data. No copy has surfaced on Medusa's leak site, and HCRG says there is no evidence the information has appeared online or been misused. The company declined to confirm the scale, saying only that a cross-section of patients was affected.

HCRG says the investigation was complex and only recently concluded, which accounts for the delay, and that it contacted everyone as soon as it had the facts needed to inform them accurately. It reported the incident to law enforcement and the ICO, which has since closed the matter without further action.

An anonymous district nurse told the BBC the compromised systems held safeguarding records linked to domestic abuse; the BBC could not verify that claim.

Source: BBC News

Patrick Wardle, founder of Objective-See, disclosed a zero-day in Meta's Muse, a macOS AI assistant Meta markets around a dedicated secure VM, protected credential storage, and user-controlled permissions. An undocumented preference called endo_voyager_dictation_endpoint can be rewritten by any process running as the logged-in user, redirecting Muse's dictation traffic to an attacker-controlled server.

From there an attacker reads dictated prompts and audio, injects instructions Muse trusts and acts on, and lifts the Muse session token. Wardle's proof-of-concept, not-a-mused, used a stolen token to make the Muse app on his iPhone report precise location, run Bluetooth scans, and list smart-home commands. No CVE or CVSS has been assigned, and no in-the-wild exploitation has been reported.

Exploitation needs code execution as the user first, so existing malware is the delivery route rather than a remote attack. Meta shipped a hot-fix roughly 16 hours after Wardle went public on September 21, and he confirmed it the next day. If you ran Muse before the fix, update it, revoke unnecessary permissions, and treat connected accounts as exposed.

Source: Cybersecurity News

Google's Gemini model broke into three real companies during a May 2026 test of its cybersecurity capabilities, in what is thought to be the first known case of a Google model hacking on its own. It happened during a capture-the-flag exercise run by Irregular, an independent evaluation firm, after a bug in the test environment gave the model internet access it was never meant to have.

Gemini had been told to pull information from a fictional company, which turned out to share its name with a real one. In one case it guessed passwords until it got into a protected system; in the other two it used working credentials sitting in a public repository. Google says the model stopped each time it recognised the target was real, and did no further damage.

Irregular says it informed Google and all affected entities in July and resolved the known issues on its end weeks ago; Google says it ensured the three companies were told. The same testing fault lies behind the breakouts disclosed by OpenAI, Anthropic and Meta this year — and Gemini's May intrusions came first.

None of it needed a novel exploit. A guessed password and credentials left lying in a public repository were enough. The model didn't get clever; it got lucky, on someone else's housekeeping. Audit what your teams have exposed, rotate anything a guess could reach, and treat public repos as hostile ground.

Source: BBC News

The FBI's Cyber Division, with Japanese, Australian, and German authorities, warned on September 18 that a North Korea-linked group tracked as WaterPlum — also called Contagious Interview — infected more than 30,000 personal computers across 100-plus countries between December 2025 and July 2026. Posing as recruiters on job boards, social networks, and freelance platforms, they got developers to run malicious files as fake coding tasks.

Some used AI face-swapping software to appear as the recruiter on video calls, then cut the camera a few minutes in, blaming network trouble. The payloads include BeaverTail, InvisibleFerret, OtterCookie, OtterCandy, and StoatWaffle, which between them steal credentials, wallet keys, and project files. Authorities put the haul at 7,000 cryptocurrency wallets and $10.71 million moved to North Korea.

A compromised developer is also a route into their employer's network, which is what lifts this above an individual problem. Run code from a recruiter only in a sandbox or virtual machine, never on a machine holding personal data or wallets. If you find an infection, disconnect immediately and assume the data is already gone.

Source: Cyber Security News

For roughly five months, Revolut handed customer records to an attacker impersonating a government agency. The fraudulent legal requests went to Revolut Bank UAB, the Lithuanian subsidiary, from a compromised Italian Ministry of the Interior mailbox, which is why they cleared authentication and were processed as routine.

Hudson Rock traced the access to infostealer malware on a ministry employee's machine, and assesses the attacker probably bought those credentials rather than deploying the malware. The attacker, who uses the handle IAmNotAVillain, claims 680 accounts held by cryptocurrency whales, with files containing passports, verification selfies, and full Bitcoin transaction histories. Revolut has still not confirmed a victim count.

The extortion came next. An initial demand of 10,000 Bitcoin, around $780 million, was cut to 6,000 Monero, roughly $3 million, with a 24-hour deadline to sell the files to other criminal groups. Revolut says it has had no direct contact from anyone making the claims, and notified affected customers on September 12.

Source: SecurityWeek