The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 289 to 324 of 658 briefings

Friday 2 October

2 Oct 2026

The same image, a different position: a vision test AI models missed

The experiment separates recognising where an object is from representing where it appears after recent motion.

2 Oct 2026

GitLab AI Gateway flaw crosses from a custom flow into server commands

The 9.9-rated flaw is about an authenticated flow configuration crossing a server-side boundary, and only self-hosted AI Gateways require the published upgrades.

2 Oct 2026

AI agents probed government data sites. The records show risky behaviour, not a breach

The overlooked issue is the boundary between retrieving public data and probing a site for alternative behaviour. Request counts, failed tests and attribution need separate labels.

2 Oct 2026

Microsoft’s X account promoted a Clippy token. The takeover route remains unknown

A familiar corporate account lent a token apparent credibility, but the public evidence does not identify how the account was taken over.

2 Oct 2026

Discord DAVE flaw: encryption depended on checking who the Welcome message admitted

The trust boundary was the MLS roster delivered through signalling, not the encryption algorithm. The fix checks every admitted member.

2 Oct 2026

Mooncake patched an arbitrary memory read and write, but its data port still trusts the network

The fix closes the reported arbitrary-memory primitive. It does not decide which hosts should be able to speak to the TCP transport.

2 Oct 2026

Android 17's accessibility block is real, but the protection has three separate switches

The accessibility control is valuable, but users and responders need to distinguish the Android version, Device protection and a separate 12-month forensic log.

2 Oct 2026

FortiMail zero-day: Fortinet's version lists disagree while the fixes are still upcoming

The operational hazard is not only the IBE file-write flaw. Two official version lists disagree and Fortinet's fixed releases are still marked upcoming.

Thursday 1 October

AI Security1 Oct 2026

OpenAI reports 16,000 extraction attempts, names Moonshot associates, and publishes no attribution evidence

The spike was 16,000 attempts from over 4,000 users, under four each on average. What that does and does not establish, why a terms-of-service violation is not a breach, and what UK providers and buyers should check about extraction at the API layer.

Breaches and Incidents1 Oct 2026

KillSec takedown: five servers and 110 TB seized, but no release says how victims will be told

Three provisional arrests, five servers, five domains and 110 TB, in a case led from Hamburg with one arrest in the UK. The counts do not match, and no release describes how victims will be told or what happens to files already published.

Breaches and Incidents1 Oct 2026

Kiteworks published 125 advisories. None says which one, if any, is the shutdown flaw

The 10.0 flaw has a CVE, a score and a fixed version. The flaw Kiteworks said it found during the shutdown has none that any record attaches to it, and no advisory in the batch says whether it is there.

Threat Intel1 Oct 2026

Fake AI committee, borrowed names: all three sender addresses Proofpoint lists are consumer webmail

All three attacker sender addresses in Proofpoint's July list are consumer webmail. A reading of its 1 October report on TA419: what it states, what it leaves out, why MFA and DMARC miss the chain, and an ordered checklist for UK organisations.

Page 26

Thursday 1 October

Threat Intel1 Oct 2026

MI5 names one Chinese funder and over 100 UK-linked academics, but no university, project or case

The alert is one page and about 470 words. It asserts the funding chain at both ends, says nothing about what UK work gave China's MSS, and asks institutions to establish a funder that NPSA's own collaboration checklist never asks about.

Threat Intel1 Oct 2026

Sucuri says the SC WordPress backdoor lives in at least eight places. Its own report names eleven

Eight files, a database row, a shared-memory segment and scheduled tasks: eleven places in Sucuri's own account of a WordPress backdoor that returns within seconds. What the report states, what it leaves out, and the order to clear it.

Threat Intel1 Oct 2026

A genuine, signed MSP360 installer, disguised as invites and updates, installed a second remote tool

One signed MSP360 installer, five example filenames, a second remote tool, and 60 to 90 days between Microsoft's July sightings and its post. The signer was real; whether you approved it is the control.

Threat Intel1 Oct 2026

TeamViewer's five patched flaws: one scored remote, four local, none known exploited

Five flaws, one fixed build, zero days between release and bulletin. A client updated in August is still listed as affected, and for UK organisations the Cyber Essentials 14-day clock on these fixes ends on 13 October.

Threat Intel1 Oct 2026

LevelBlue adds a fourth NetScaler web shell disguise. Citrix says an update is not a cleanup

Six vendor reports describe four disguises for a NetScaler web shell, and LevelBlue's is the newest. What it states, what it leaves out, why one vendor's file names will not find another's, and what an update does not do.

Breaches and Incidents1 Oct 2026

By our count, MetaMask Staking queued 7,066 Lido validators to exit hours before its notice, naming no cause

The beacon chain shows 226,112 ETH of Lido stake queued to exit 6 to 12 hours before MetaMask's first notice. The notice and Lido's post name no cause, no count and no key status, and no funds lost are reported.

Breaches and Incidents1 Oct 2026

DIVD was breached through two Zammad flaws. One has no fix on record, and the AI claim is no stronger

Ten days on, DIVD's breach has a root cause: two Zammad flaws, one with no fix on record. The evidence for an AI agent is still tempo and comments in scripts, and the Zammad finding does not add to it.

Threat Intel1 Oct 2026

Entra ID will refuse injected scripts from mid-October, and Microsoft names one impact test: a browser console

From mid-October 2026 the Entra sign-in page will run only Microsoft scripts. Users can still sign in, so a failing tool raises no outage, and Microsoft describes no tenant report. The policy also guards one page only.

Breaches and Incidents1 Oct 2026

The Pentagon's breach letter is dated 64 days after the flaw was found, and says accessed, not stolen

The Pentagon's personnel data centre dated its breach letter 64 days after discovering the flaw, after at least 258 days of access. What the notice states, what it leaves out, and the checks a UK team can run.

Threat Intel1 Oct 2026

CoreGraphics flaw: a public crash test 46 hours after Apple's CVE record, and no proof of a WhatsApp route

A public CoreGraphics crash test is not proof of exploitation, and the WhatsApp path rests on a line the researchers removed. CISA had already moved to active a day earlier. What UK teams should do about iPhones and Macs.

Wednesday 30 September

AI Security30 Sept 2026

Gemini 4 Argon leads or ties 13 of 18 benchmarks in Google's table, and Google ran 9 of the 18 itself

What Google's launch post, methodology PDF and images say, checked against Vals, CWE-bench and Artificial Analysis: who ran each number, what the 68% cyber tie cost, and what is not stated about access and safety.

Threat Intel30 Sept 2026

Zimbra's CVE ID came 24 days after the patch. Microsoft's earliest dated probing is day 8

The dates, the score and the versions checked against Zimbra, NVD, CISA and Microsoft. What a patch does not remove from a hit mail server, the one victim count that exists, and a defender checklist.

Page 27

Wednesday 30 September

Breaches and Incidents30 Sept 2026

SlowMist logs Bitget attacker activity from 31 August, Mandiant dates access to 24 September, neither names a product

Two forensic documents published on 30 September add a longer chain, two products, a web shell and a custom withdrawal tool. SlowMist's logs start on 31 August, Mandiant dates the appliance access to 24 September, and neither names a product, vendor or CVE.

Threat Intel30 Sept 2026

A new MikroTik RouterOS flaw is not the exploited one, and CISA changed its fix version from 7.23 to 7.24

CVE-2026-84411 is new, scored 9.8 and not reported exploited. CISA now names 7.24 as the fix, above the newest long-term build 7.23.7, and MikroTik has published no advisory.

Threat Intel30 Sept 2026

Cisco dates the SD-WAN Manager attacks only as 'September', and omits five trains its May table listed

CISA set a federal deadline of Saturday 3 October. What Cisco states and does not, the fix table set against its May one, four names for one flaw, what the UK record says, and a defender checklist.

Breaches and Incidents30 Sept 2026

Microsoft's Titan skipped the token signature check: 17.3 trillion rows counted, two sampled

Faav's write-up counts 17,333,335,124,315 rows from metadata and describes two one-row samples. The endpoint was locked down 4 days after the report, the bounty was $5,000, and Microsoft edited the only account.

Threat Intel30 Sept 2026

543,699 working credentials in public GitHub code: at least 63% predate default push protection

What the Truffle Security count establishes, what its dates probably mean, and the gap it names itself: GitHub can block some secrets at push time, but only the issuer can make a leaked key stop working.

Compliance and Regulation30 Sept 2026

808,000 UK businesses were not confident at one or more of nine tasks, and that measures confidence, not skill

The 57 per cent is a share of 1.42 million businesses with staff, mostly micro firms, counted if any one of nine tasks failed a confidence question. Only three of the nine tasks rose since the 2025 report.

AI Security30 Sept 2026

Glow found 13,000 public screenshots; GitHub's CLI gained image attach 8 days before Glow began notifying

Glow's PixelLeak count works out at about 38 images per organisation and says nothing about sensitivity, access or models. The CLI feature the agents lacked shipped on 1 September, 8 days before Glow began notifying.

Threat Intel30 Sept 2026

Nine of 13 Star Blizzard campaigns are event invitations, and the invitation usually has no attachment

A count of Microsoft's own timeline, an invitation with nothing to scan, and six labels that reassure without controlling anything: what the RedFlick report establishes about Star Blizzard, and what it leaves open.

Threat Intel30 Sept 2026

Spectre BTR: a Linux root hash in 3 to 5 minutes on two Intel chips, with the kernel fix public since July

VUSec and Sant'Anna's Branch Target Reuse attack read a root hash at 8 bytes per second on two Intel chips. Stale predictor entries were reusable on AMD and Arm too, but nothing leaked there. The kernel fix dates from July.

Threat Intel30 Sept 2026

Citrix NetScaler was exploited at least 22 days before the patch. The three-day federal clock ends today

Mandiant, eSentire and GreyNoise now date NetScaler exploitation to before the 27 September bulletin. What Mandiant observed and what it did not, how the exploited pair compares with briefing 143, and what to hunt and harden.

Breaches and Incidents30 Sept 2026

France's tax authority learned of the theft 49 days after it began, from the thief's own claim

The French tax administration took 49 days to learn of a theft made with stolen staff passwords, and only from the attacker's own post. What the ANSSI report establishes, what it leaves out, and the checks a UK team can run.

Threat Intel30 Sept 2026

OpenSSL's DTLS leak is scored 8.2 by CISA and 7.4 by Red Hat, and the gap is what OpenSSL did not say

A DTLS retransmission bug can send OpenSSL heap memory to the other side or crash the process. Fixes are public for four branches, premium-only for three and absent for 3.1 to 3.3. No exploitation is reported and no leak size is stated.