First Agentic AI Data Breach Reported to Spanish Regulator

,

The Spanish Data Protection Agency (AEPD) reported the first known personal data breach executed through an autonomous AI agent that chained together login, vulnerability scanning, and unauthorized data access. This incident marks a shift in cyber threats, highlighting the need to integrate AI-assisted defense mechanisms, improve incident response times, and strengthen digital identity protections. While the exact cause remains under investigation, the breach demonstrates the growing real-world risks posed by agentic AI in cybersecurity.

https://www.securityweek.com/first-agentic-ai-data-breach-reported-to-spanish-regulator/

Scammers Are Watching Airline Complaints and Posing as Customer Support

, , ,

Check Point researchers uncovered a widespread scam where threat actors monitor public airline complaints on social media, impersonate customer support accounts, and engage victims in private chats to steal personal and payment information under the guise of issuing refunds or compensation. Thousands of fake accounts were identified across platforms like X, Facebook, and Instagram, with hundreds more emerging daily, employing evolving tactics often shifting conversations to WhatsApp. The campaign illustrates a growing external exposure risk for brands and highlights the need for organizations to monitor impersonation, educate customers, and coordinate with platforms to mitigate fraud.

https://blog.checkpoint.com/exposure-management/scammers-are-watching-airline-complaints-and-posing-as-customer-support/

N0va Phishkit Targets US and EU Businesses: a New Challenge for Identity Security

, , ,

The N0va phishkit is conducting sophisticated phishing campaigns targeting organizations across North America and Europe, leveraging trusted business platforms and legitimate authentication flows to steal access tokens and gain single sign-on entry to corporate resources. This identity compromise risks financial loss, sensitive data exposure, operational disruption, and reputational damage, especially in high-risk sectors such as government, healthcare, and technology. Security teams are advised to use advanced threat intelligence tools and behavioral analysis to detect, contextualize, and respond swiftly to N0va-related attacks to minimize impact and contain breaches effectively.

https://thehackernews.com/2026/09/n0va-phishkit-targets-us-and-eu.html

Mythos Has Made 2026 Patching Hell. It Might Make 2027 a Breeze

,

Gartner research vice president Craig Lawson suggests that the surge in vulnerability discoveries in 2026, driven by AI tools like Anthropic’s Mythos, is helping to uncover and address much of the technical debt in large software codebases. This extensive auditing could lead to a decline in the number and severity of vulnerabilities in 2027, as vendors use AI not only to find flaws in existing software but also to improve testing of future releases. Additionally, AI-driven bug hunting and automated remediation may enable more frequent and efficient security assessments, potentially easing the patching burden for cybersecurity teams.

https://www.theregister.com/security/2026/09/16/mythos-has-made-2026-patching-hell-it-might-make-2027-a-breeze/5296747

GitLab’s Critical Flaw Is Already Drawing Internet-Wide Probes

,

GitLab released emergency patches addressing two critical vulnerabilities, including a severe unauthenticated file read flaw (CVE-2026-85706) rated CVSS 10.0, that affects multiple versions of its Community and Enterprise Editions. Security firm WatchTowr Labs has already observed active exploitation attempts, prompting GitLab to urge immediate upgrades for self-managed installations, while CISA added the vulnerabilities to its Known Exploited Vulnerabilities list.

https://cyberscoop.com/gitlab-critical-flaws-path-traversal-scans/

Hackers Used Claude to Hunt for Secrets in 1.8 Million Android Apps

, ,

Anthropic's latest threat intelligence report reveals that hackers used its AI model Claude to automate large-scale cyber operations, including harvesting credentials from 1.8 million Android apps and developing malware and phishing tools. The report highlights that AI is becoming an operational force across malicious activities such as cybercrime, surveillance, propaganda, fraud, and weapons development, enabling even small groups to conduct sophisticated campaigns at scale with less human intervention. These findings underscore a significant shift in the economics and speed of cyber threats, where AI-driven automation multiplies attackers’ capabilities and complicates defense efforts.

https://securityaffairs.com/198905/ai/anthropic-ai-misuse-is-entering-a-new-phase-from-cybercrime-to-surveillance-propaganda-and-weapons.html

The Exposed AI Supply Chain

, ,

A recent internet-wide census identified 36,769 self-hosted AI endpoints, including model servers, agent builders, and vector stores, with only 2% employing HTTP authentication, leaving the vast majority exposed without network-layer protections. Notably, 6,935 Ollama model servers responded to anonymous requests, and 5,223 agent builder endpoints—tools that store sensitive credentials—were widely reachable without authentication, posing significant security risks. The study highlights widespread misconfiguration rather than software vulnerabilities, recommending measures like binding services to localhost, deploying authentication gateways, and treating credential-storing agent builders as secure secrets stores to reduce exposure.

https://www.mysteriumvpn.com/blog/data-and-research/we-exposed-ai-supply-chain

ClickFix Attacks Infecting PCs and Macs Are Going Viral

, , , ,

ClickFix attacks have rapidly become widespread on both PCs and Macs by tricking users into pasting and executing malicious commands via fake CAPTCHA prompts on compromised websites. This social engineering exploits users' fatigue with complex web interactions, prompting them to unknowingly run malware without the need for traditional code-signing or heavy infrastructure. Security firms have observed ClickFix variants bypassing protections like macOS Gatekeeper, with attackers increasingly leveraging public services and blockchain for control, making this an enduring and challenging threat to mitigate through technology alone.

https://arstechnica.com/security/2026/09/clickfix-attacks-infecting-pcs-and-macs-are-going-viral/

Instagram Users Face Ransom Demands Over Fake Copyright Claims

, , ,

Instagram users with large followings have been targeted by scammers filing fake copyright infringement claims to suspend their accounts and then demanding ransom payments to withdraw these bogus claims. Despite Meta's assurances of protections and content restoration, creators report slow appeals processes and inadequate detection of abuse, leading some to pay extortion demands to quickly regain access, only to face repeated strikes. Experts note that automated tools and platform policies assuming claim legitimacy have enabled this scam to proliferate, worsening the challenges of distinguishing genuine copyright claims from fraudulent ones.

https://www.bbc.com/news/articles/cjw54ww73qjo

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

, ,

Multiple espionage groups, including the China-aligned APT31 and several others suspected of Chinese links, rapidly adopted a previously undocumented exploit kit named BlueMoon within a week to target Windows and Chrome vulnerabilities. BlueMoon chains three vulnerabilities in Chrome's V8 engine and Windows ALPC to achieve code execution and privilege escalation, often delivered through spear-phishing and used to deploy malware via DLL sideloading and malicious Chrome extensions. Despite patches being released, organizations are urged to check for persistent artifacts like malicious browser extensions, scheduled tasks, and suspicious files, as the exploit kit's spread may continue due to its ease of adoption and possible AI-assisted development.

https://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.html

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

, ,

Google released an update patching 230 security vulnerabilities in Chrome, including an actively exploited medium-severity zero-day (CVE-2026-87491) in the V8 JavaScript engine that allows remote code execution inside the sandbox via crafted HTML pages. The U.S. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to apply patches by September 23, 2026, while users and Chromium-based browser operators are urged to update promptly to mitigate attacks.

https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

, ,

Microsoft released a record-breaking Patch Tuesday update addressing 974 vulnerabilities across its software portfolio, including two actively exploited Windows zero-day flaws that allow local privilege escalation. The update covers critical issues mainly involving privilege escalation, remote code execution, and information disclosure, and prompted the U.S. Cybersecurity and Infrastructure Security Agency to mandate urgent patching for federal agencies. Despite the high volume, security experts emphasize prioritizing fixes based on exploitability and risk context to effectively reduce attack surfaces.

https://thehackernews.com/2026/09/microsoft-patches-record-974-flaws.html

The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT

,

Check Point Research identified a covert cross-account communication channel in ChatGPT’s sandboxed code-execution environment that allowed attackers to execute hidden tasks using a victim’s session, including accessing connected apps like Gmail and exfiltrating data without the victim’s knowledge. This channel exploited shared access to an internal package service’s item properties, effectively turning it into a “shared clipboard” across isolated containers from different accounts. OpenAI has since decommissioned the vulnerable internal service, but the finding highlights challenges in securing AI platforms where internal shared infrastructure and broad tool access can lead to unintended data leakage.

https://research.checkpoint.com/2026/the-shared-clipboard-inside-the-sandbox-cross-account-data-leakage-in-chatgpt/

The Purpose of DNS Is to Spread Scams

, ,

A recent analysis reveals that up to 20% of newly registered generic top-level domains (gTLDs) are used for scams, highlighting a significant abuse of the Domain Name System (DNS) by criminals. Major registrars like NameCheap facilitate these registrations, but suspension rates of malicious domains remain low, allowing fraudsters to exploit the rapid activation of domains for phishing and spam campaigns. While ICANN and the industry are exploring measures like stronger customer verification and coordinated abuse reporting, striking a balance between open domain registration and fraud prevention remains a complex challenge.

https://shkspr.mobi/blog/2026/09/the-purpose-of-dns-is-to-spread-scams/

Once Popular for Attacking AI, ASCII Smuggling Is Embraced by Spammers

, , ,

A Unicode block once used to stealthily embed malicious prompts in AI attacks—known as ASCII smuggling—is now being exploited by spammers to evade email filters. This block contains invisible characters that disrupt keyword detection by machine learning–based spam classifiers, allowing spammers to obfuscate trigger words without alerting human readers. Microsoft observed a sharp surge in such obfuscated spam emails in early 2026 and recommends updated filtering techniques to counter this evasion tactic.

https://arstechnica.com/security/2026/09/once-popular-for-attacking-ai-ascii-smuggling-is-embraced-by-spammers/

Scroll to Top