The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 457 to 480 of 667 briefings

Tuesday 22 September

Threat Intel22 Sept 2026

WordPress fixed Comment2Shell in 25 releases on one day; check yours is one of them, and that no plugin arrived first

WordPress core shipped 25 security releases on 17 September for a comment XSS that can reach an administrator's session. What to confirm, which wp-config setting actually blocks plugin upload, and why updating does not remove a plugin already added.

Breaches and Incidents22 Sept 2026

A stolen Ribon app key pulled BigCommerce shopper data in one evening, then stayed live almost four days

The Ribon breach on BigCommerce: what each party has said, why app tokens cannot be revoked by merchants, the hours lost at each step, and why the app is not BigCommerce's sub-processor under UK GDPR.

AI Security22 Sept 2026

One in 225 Anthropic-credited CVEs is confirmed exploited, and that number proves less than it seems

225 Anthropic-credited CVEs, none in CISA KEV and one in VulnCheck KEV. We recounted the data: the low rate is normal, the sample is young, and UK teams should prioritise by KEV and EPSS, not by who found the bug.

Compliance and Regulation22 Sept 2026

British Columbia sues OpenAI over Tumbler Ridge on a duty to warn police that no court has yet tested

British Columbia's complaint against OpenAI repeats, heading for heading, the eight claims the victims' families filed in April, and rests on California common law rather than a provincial statute. What it alleges, what OpenAI has said on the record, and what UK deployers should check.

Threat Intel22 Sept 2026

Defender can report protected while its updates stall: how to prove signatures are current across an estate

BigDiskBuster, released on 19 to 20 September 2026, keeps Defender on whatever signatures it already has. Microsoft's own reports can call a device up to date for seven days. Here is how to measure currency, not status.

Threat Intel22 Sept 2026

Only the Zyxel switch flaw is in CISA's KEV; the Veeam agent exploitation claim rests on one vendor headline

CVE-2026-7273 in Zyxel GS1900 switches entered KEV on 21 September with a 24 September deadline after GreyNoise documented data theft from 996 switches. CVE-2026-32996 in Veeam Agent for Windows has a public PoC but no KEV entry.

Compliance and Regulation22 Sept 2026

MPs invited four AI labs to answer ten safety questions that no UK law currently answers

Four identical letters, ten questions, seven days to confirm. What the committee's papers actually say, what it can and cannot compel, and where UK AI and cyber law really stand before the 13 October hearing.

AI Security22 Sept 2026

Meta's Muse zero-day: one writable Mac setting hands local malware the agent's token and every linked device

An undocumented setting in Meta's Muse Mac app lets malware or one pasted command redirect dictation, inject instructions and steal the account token. What is verified, what Meta's Secure VM does and does not protect, and what UK teams should do.

Threat Intel22 Sept 2026

Talos's CLOSEDQUORUM lets four LLMs vote on an implant's next move, but the only public build is inert

CLOSEDQUORUM asks DeepSeek, Qwen, Mistral and Gemini which of four attack actions to take, then acts on the plurality. Talos found placeholder keys, no confirmed victims and a narrower first than the headline suggests.

Monday 21 September

Breaches and Incidents21 Sept 2026

AWS quarantines a leaked access key in 10 seconds, but the key keeps working for anything not on the deny list

AWS's AWSCompromisedKeyQuarantineV3 went on 10 seconds after a test leak. It is a deny list, not a lockdown: what it blocks, what it leaves open, and what you still have to do.

AI Security21 Sept 2026

Heretic automates stripping refusals from open-weight models. Its headline score counts 33 words, not harm

Heretic's 97 to 3 refusal result counts 33 words in the first 100 tokens, not harm. The real finding is older: in-model safety is a default, not a control, and UK organisations need controls outside the weights.

AI Security21 Sept 2026

Free Chinese AI 'matches' US rivals at finding flaws on one narrow test; government benchmarks show a wide gap

What the benchmarks behind the Chinese AI bug-finding headline actually measured, why the government tests disagree, and what UK organisations should weigh before running a Chinese open-weight model.

Page 40

Monday 21 September

Threat Intel21 Sept 2026

A Windows privilege fix that held 28 days: Project Zero on dangling COM registrations

A COM class that points at a DLL that does not exist is not harmless. Project Zero shows how a dangling registration in a writable path becomes SYSTEM, and how to audit your estate for the same pattern.

Threat Intel21 Sept 2026

Fake interviews target Rust maintainers' publishing rights, and arrayref showed what one stolen account does

Rust maintainers are being lured onto video calls to install a fake audio codec or paste a command. The arrayref release of 20 August, downloaded 2,285 times in 86 minutes, shows why their accounts are the prize.

Threat Intel21 Sept 2026

ChainScript's operator moved its C2 twice for a quarter of a cent, and the blockchain logged both moves

ChainScript turns a pasted Win+R command into a per-user MSI, a hidden Node.js agent and a C2 address stored on the Polygon blockchain. Here is the chain step by step, why the pointer survives takedown, and the controls that still work.

Compliance and Regulation21 Sept 2026

OpenAI asks the US to lead global AI standards; the US already holds the ISO AI committee's secretariat

OpenAI's standards proposal, read in full: what it asks of government, which bodies it names, how it compares with ISO/IEC 42001, the NIST AI RMF and EU harmonised standards, and where OpenAI's commercial interest lies.

Compliance and Regulation21 Sept 2026

UN AI panel's agent control warning recommends nothing, and rests on security failures teams already own

What the UN scientific panel's first brief on AI agents actually says, what status it has, what its evidence from the OpenAI and Hugging Face incident carries, how it compares with the International AI Safety Report and UK AISI, and what to fix first.

AI Security21 Sept 2026

Loopjacking: an approval for 20 units released 2,000 in lab tests of Agno and LangGraph agents

Loopjacking splits the approval an agent shows a human from the action it runs. Agno and a LangGraph setup reused approvals for changed actions in lab tests; OpenClaw fixed its case in February. What human approval buys, and the check that makes it real.

Threat Intel21 Sept 2026

North Korea's TraderTraitor put macOS backdoors on an Indian IT provider, and the delivery was never proven

The same two Jade Sleet backdoors that helped take 292 million dollars from KelpDAO turned up on an Indian IT provider with no crypto ties. What the vendor established, what it did not, and what UK firms that outsource to Indian MSPs should ask this week.

AI Security21 Sept 2026

ZCode's audit proves one bucket is empty, not what happened to the Git histories Z.ai's coding app uploaded

Two developers showed ZCode 3.12.3 uploading encrypted workspace snapshots, 86.6% Git history, with no working off switch. Z.ai fixed the client, open-sourced it and cited two audits. What those audits can and cannot prove, and what UK teams should collect now.

Compliance and Regulation21 Sept 2026

Google's €403m location fine covers 620 days that ended in 2020, and nobody can read the decision yet

The DPC's €403m Google fine covers 620 days that ended the day its inquiry opened. It names no articles, publishes no split, and one finding turns on evidence Google could not produce.

Compliance and Regulation21 Sept 2026

A hacked Flock camera shows the gap between what the vendor says it collects and what its firmware does

One Flock camera's firmware runs a person detector, held 27,321 video clips and left its media key on the same partition. What was found, what Flock says, how UK ANPR is regulated, and what buyers should demand.

Threat Intel21 Sept 2026

Google's mole inside TeamPCP saw 500,000 stolen credentials and a gang that could barely cash them

TeamPCP stole more than 500,000 credentials but, by Google's estimate, made only tens of thousands of dollars. What an undercover analyst saw, what rests only on one researcher's account, and what UK engineering teams should change.

Compliance and Regulation21 Sept 2026

US-China AI dialogue: Washington describes an incident alert channel, Beijing's readout does not

Bessent says the US proposed an AI incident notification mechanism to China. Xinhua's 169-character readout mentions AI once and no mechanism. What each side committed to, what neither said, and the limited UK angle.