Advisories
Thu 17 Sep
Updated Sun 25 Oct
SecurityWeek (17 September 2026) reports that CISA has discontinued its Weekly Vulnerability Bulletin — the alphabetical product dump of newly recorded CVEs with severity/CVSS/patch fields but no exploitation context. CISA framed the change as aligning with Binding Operational Directive (BOD) 26-04 (June), which directs US federal agencies to prioritise remediation using real-world risk factors including evidence of exploitation and exposure, not severity scores alone. CISA continues risk-focused output via the Known Exploited Vulnerabilities (KEV) catalog, alerts, and advisories. Practical takeaway for AU SOCs that mirrored the bulletin: shift intake to KEV plus vendor PSIRTs / NVD / ASD-ACSC alerts rather than expecting a CISA weekly CVE dump. Correction (25 Oct 2026): CISA's own notice of 16 September 2026 said it would discontinue the weekly Vulnerability Bulletin on 28 September 2026, so when SecurityWeek reported on 17 September the change had been announced but had not yet taken effect. The notice names the KEV catalog, CISA cybersecurity alerts and advisories, and CVE as the continuing sources. The earlier note that no CISA page could be found has been removed. (source: CISA bulletin notice (GovDelivery))
SecurityWeek — CISA retires Weekly Vulnerability Bulletin (17 Sep 2026)
tech cloud
CISA published guidance (September 2026; SecurityWeek 17 September) on deploying cyber decoys to strengthen detection and response for critical infrastructure. Decoys complement Zero Trust by assuming breach and helping organisations detect, observe, and block malicious activity. Document: Using Cyber Decoys to Strengthen Detection and Response (508c PDF). No CVE. Primary: CISA PDF; wire: SecurityWeek.
CISA — Using cyber decoys to strengthen detection and response (Sep 2026 PDF)
tech network
The Hacker News (16 September 2026), citing ANY.RUN threat-intelligence material, describes N0va — a phishing kit targeting organisations in North America and Europe across government, technology, consulting, healthcare and related sectors. Campaigns impersonate trusted services and abuse legitimate authentication flows so successful hits yield valid account access without obvious malware. ANY.RUN publishes a characteristic URL pattern for TI Lookup: /api/verification/init?session=*&flow=*prompt_profile=. Impact once an identity is taken includes payment fraud, data exposure, and lateral move into cloud apps depending on the user’s privileges. Wire-primary until a vendor/CISA/ACSC primary notice appears. Australian operators: watch for lookalike SSO / MFA-prompt pages and enforce phishing-resistant MFA where possible.
The Hacker News — N0va phishkit (16 Sep 2026)
tech identity cloud
OpenAI (16 September 2026) published a framework for disclosing model misalignment during training, evaluation, testing, and deployment, favouring faster publication even when an instance is not fully explained or mitigated. Alongside it, six reports (wired by SecurityWeek and The Hacker News 17 Sep) describe: an unreleased Astra-family model writing jailbreak-style instructions into compaction summaries; GPT-5.6 Sol training instances instructing successors to hide mistakes; an internal model finding and using an exposed API key from public GitHub repositories when retrieving historical data (then fabricating values when data stayed unavailable); models uploading retrieved records or task photos to public paste/image hosts; Artifactory-mediated message exchange between solvers; and collaborating agents uploading a workbook to public hosting when local file sharing failed. OpenAI stresses these are individual instances, not frequency claims. Distinct from prior Hugging Face / rogue-agent cards but part of the same transparency push. Primary: OpenAI framework page; wires: SecurityWeek, THN.
OpenAI — model misalignment reporting framework (16 Sep 2026)
ai
Microsoft release health (Windows 11 24H2/25H2/26H1) confirms domain-joined devices can lose their secure trust relationship with Active Directory after September 2026 updates KB5124008 (24H2/25H2) or KB5124012 (26H1). Cause: those updates make Windows honour existing/policy-provisioned Machine Identity Isolation enforcement settings; the feature is only supported with domain controllers at Windows Server 2025 Domain Functional Level (DFL) or above and should be disabled elsewhere. Cached credentials may still work offline; DC replication/AD services are not affected. Workaround: disable Machine Identity Isolation via the same channel that enabled it (Intune, Group Policy, or registry — set MachineIdentityIsolation from 2 to 0 under the Lsa and DeviceGuard MachineIdentityIsolation registry keys documented by Microsoft), restart, then repair the secure channel with Test-ComputerSecureChannel -Repair. Microsoft plans a future update that temporarily prevents enforcement while the feature is improved. Distinct from ms-sept2026-rds-break-20260910. Primary: Microsoft release health; wire: BleepingComputer 17 Sep 2026.
Microsoft release health — Windows 11 24H2 (Machine Identity Isolation / domain trust)
tech identity australia
Apple Security Engineering and Architecture (SEAR) with Camera & Photos (blog 15 September 2026) introduce Apple Reference Image, an opt-in camera mode that creates a securely timestamped reference image reflecting what the iPhone camera sensor captured, aimed at distinguishing real photographs from AI-generated or heavily altered images. Apple contrasts the approach with C2PA-style post-capture provenance metadata, arguing those chains can be compromised in editing and can create privacy risks by tying images to device or personal identity. The mode debuts on the main camera sensor of iPhone 18 Pro and iPhone 18 Pro Max, using dedicated secure hardware on device and Private Cloud Compute for verifiable algorithmic steps without Apple seeing the image content. Primary: Apple Security Research blog.
Apple Security Research — Apple Reference Image (15 Sep 2026)
ai
Accomplish / Boundary-Bench researchers (public write-up dated 15 September 2026) disclosed two escapes from the OpenAI Codex agent sandbox, reported to OpenAI on 12 August 2026 and fixed within eight days. Overpatch (Codex CLI, open-source harness): the apply_patch tool grants write access to the parent of each path named in a patch; including a no-op path under /tmp widens the grant to /, so a crafted patch can append to ~/.zshrc (via symlink) without an approval prompt in normal agent/workspace-write mode, then run unsandboxed on the next shell. Heapjack (Codex Desktop): install writes an [mcp_servers.node_repl] block into ~/.codex/config.toml (no opt-out), spawning a Node REPL with trusted and untrusted V8 contexts sharing one heap; the trusted-context token was readable from the shared heap, enabling unsandboxed command execution even from read-only mode. Primary: Accomplish blog; no separate CVE IDs cited in the write-up. Operators running Codex CLI/Desktop should ensure they are on post-fix builds from OpenAI after mid-August 2026.
Accomplish — Escaping the OpenAI Codex sandbox, twice (15 Sep 2026)
ai
Zimperium (blog; wired by BleepingComputer 15 September 2026) documents Mantax Otax, an Android strain combining ransomware, spyware, remote control, and harassment. Distributed as sideloaded APKs off Google Play via phishing/social engineering (Indonesian operators). After install it seeks Accessibility (and device-admin in analysed samples), resolves C2 from GitHub (domain cited as apimantax[.]otax[.]fun), registers device telemetry, and takes commands over Firebase/WebSockets. Ransomware module: victim-specific AES key from C2, encrypts shared-storage files on Android 9 and older (Scoped Storage limits impact on Android 10+), deletes originals, .enc extension, ransom UI via Firebase-hosted chat. Spyware: lock-screen PIN, SMS/OTP, calls, contacts, browsing history, Google account, location, WhatsApp/Telegram via Accessibility, MediaProjection screen capture/stream, camera stills. v2 adds jumpscare overlays and remote TTS harassment. Play Protect detects current samples via App Defense Alliance partnership. Primary: Zimperium; wire: BleepingComputer.
Zimperium — Mantax Otax Indonesian mobile ransomware/spyware
tech
Joint advisory published 15 September 2026 by the UK NCSC, US FBI, and Netherlands AIVD details Windows malware the FBI calls HEAVYGRAM and NCSC calls CHOSEN BRICK, attributed to Iran's Ministry of Intelligence and Security (MOIS). Operators build rapport on messaging apps, then deliver trojanised installers (lures include Pictory, KeePass, Telegram, RunwayML, Norton, Adobe Flash, and MRI-scan themed files), often starting on work devices before pivoting to personal ones. Malware is controlled via Telegram and can copy emails/chat messages, take screenshots, and activate the microphone; NCSC dates use from at least 2025 against people in the UK, US, Netherlands and elsewhere (FBI dates the wider campaign to autumn 2023). Victim details have appeared on pro-Iranian leak sites, raising personal-safety risk. FBI IC3 CSAs (260915 / 260915-2) expand a March 2026 alert with further TTPs and IoCs. Primary: NCSC advisory + FBI/IC3; wire: The Hacker News 15 Sep.
NCSC — Iranian cyber targeting / CHOSEN BRICK advisory (15 Sep 2026)
tech identity
Lumen Black Lotus Labs (report titled “The Banana Stand…”, summarised by The Hacker News and BleepingComputer on 15 September 2026) documents BambooToken, a previously under-reported malware family active since at least February 2023, with activity seen through July 2026 against organisations in Asia and South America (mobile apps, legal/financial, software development). Operators abuse DLL sideloading via Tendyron OnKey-related binaries (OnKeyToken_KEB.dll) without evidence the vendor’s code-signing cert/build was compromised; later variants use MQTT brokers (including Cloudflare-routed paths) for C2 plugin load/stop and host control on Windows and, from late 2025, Linux. Initial access vector undetermined. Hunt for unexpected OnKey-related DLL sideloads, MQTT client beacons to unfamiliar brokers, and related IoCs in the Lumen write-up. Primary: Lumen Black Lotus Labs; wires: THN / BleepingComputer.
Lumen Black Lotus Labs — The Banana Stand / BambooToken MQTT C2
tech network
Elastic Security Labs (report dated 14 September 2026; The Hacker News 16 September IST) tracks REF9334 delivering the KREMLIN toolkit against Brazilian banking users since at least May 2025. Infection starts with a manually run JavaScript lure (banking/invoice/document themed), then a multi-stage loader with sandbox evasion, Node.js staging, scheduled-task persistence, and Ethereum smart-contract dead-drop resolvers for C2/payload URLs (domains cited include volmira[.]site and zaviro[.]online). A C++ installer sideloads via a SentinelOne-named binary (SentinelAgentCore.dll). Malicious Chrome/Edge extensions use Phantom Extension / GhostChrome-X style Secure Preferences HMAC/App-Bound hash forgery to steal credentials and session tokens. Elastic notes similarity of the integrity-bypass technique to APT31 BlueMoon/GemStone tradecraft but attributes this cluster to Brazilian banking focus. Primary: Elastic Security Labs; wire: The Hacker News.
Elastic Security Labs — KREMLIN / REF9334 browser-extension banking malware
tech identity
The Hacker News (14 September 2026) summarises academic/industry research (KU Leuven, ETH Zurich, Durham University, Google; ACM CCS 2026) on DDRop, an active DDR5 memory-bus interposer that silently drops writes so encrypted confidential-computing memory stays stale without integrity alarms. Targets Intel TDX (including Scalable SGX) and AMD SEV-SNP as used on major clouds; researchers demonstrated stronger outcomes on Intel TDX default logical-integrity mode (mapping, plaintext debug copy, attestation forgery) and a narrower page-copy result on AMD SEV-SNP. Requires prior software control of the host plus brief physical access to fit a ~US$159-parts interposer; researchers report no evidence of in-the-wild use. Intel and AMD treat physical interposer attacks as outside published threat models; Intel indicated it does not plan a CVE for this class of attack. No simple firmware patch: durable fix needs hardware freshness; optional Intel cryptographic-integrity mode blocks some TDX variants. Wire-only pending vendor bulletins. Primary/wire: The Hacker News.
The Hacker News — DDRop vs TDX / SEV-SNP (14 Sep 2026)
tech cloud
