Dutch police (Politie Landelijke Opsporing en Interventies, 28 September 2026) confirmed a 24-year-old Amsterdam man arrested earlier in September was detained in an investigation into the ShinyHunters hacking group. UPDATE 28–29 Sep wires (KrebsOnSecurity; Reuters / CBC): employer Neo Security offensive-security lead Benjamin Korper identified the detainee as Pepijn van der Stap; Krebs sources place the arrest around 15–16 September. Van der Stap was previously convicted (2023) over data theft/extortion as handle “Umbreon” (RaidForums/Breached era; custody, release Dec 2025) and had publicly cast himself as reformed. Dutch police clarified on 29 September that the suspect was not detained as part of the investigation into the ShinyHunters breach of Dutch telecom provider Odido (BleepingComputer, 29 Sep). CORRECTION (21 Oct 2026): this card earlier said Krebs linked the Dutch probe to the Odido intrusion, without the police clarification. UPDATE 29 Sep 2026 — BleepingComputer / Dutch police / FBI Cyber Division Assistant Director Brett Leatherman video: Rotterdam District Court ordered at least another 90 days’ pre-trial detention; police said a large amount of information was found on his laptop “including details about two murders that were to be committed abroad” with indications the suspect “gave the order”; further arrests not ruled out. FBI states ShinyHunters and alleged co-conspirators breached more than 140 organizations since last year and collected at least US$70 million in extortion payments, and publicly urged remaining members to turn themselves in, citing seized infrastructure and shifting incentives to talk. Context: group’s prior FBI PeopleSoft breach claim remains on desk (shinyhunters-fbi-peoplesoft-20260922). Distinct from PeopleSoft mass exploitation (cve-2026-35273) and Clop DLS defacement (shinyhunters-clop-dls-20260919). Primary wire: BleepingComputer FBI/Dutch update 29 Sep; naming: Krebs + Reuters.
BleepingComputer — FBI tells ShinyHunters members to turn themselves in (29 Sep 2026)
Apple security content for iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 and macOS Sequoia 15.8.1 (published 28 September 2026; The Hacker News amplified same day) patches CVE-2026-86950 in CoreGraphics: an out-of-bounds write addressed with improved bounds checking. Impact: processing a maliciously crafted file may lead to arbitrary code execution. Apple states it is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27 — no public detail on volume, success, or first-seen date. Credited to Meta Product Security. No Apple-published CVSS on the HT pages. Distinct from earlier February 2026 dyld CVE-2026-20700 (also noted as weaponised in sophisticated attacks). Primary: Apple HT149226 / HT149228 / HT149229; wire: The Hacker News 28–29 Sep. UPDATE 1 Oct 2026 (desk 16:00 Perth): Calif research “The Great Glyph Grift” (Dion Blazakis, Josh Maine, Anna Groza; 30 Sep) publishes patch-diff analysis and a public crash-trigger sample (TrueType/PDF via ImageIO thumbnail path) showing a controlled out-of-bounds write from glyph fixed-point conversion — crash demonstrated on macOS/iOS; authors state turning that into reliable code execution is separate work and they did not obtain the in-the-wild sample. Calif also notes WhatsApp Kaleidoscope (versions 26.37.73→26.38.74) added stricter PDF embedded-font checks, hinting a possible messaging attachment delivery path consistent with Meta Product Security credit — not confirmed as the in-the-wild vector. CISA added CVE-2026-86950 to the Known Exploited Vulnerabilities catalog on 29 Sep (due 2 Oct 2026). Wire: The Hacker News 1 Oct. UPDATE 2 Oct 2026 (desk 19:00 Perth): WA SOC advisory 20261002001 (TLP:CLEAR) restates CVE-2026-86950 as an out-of-bounds write in CoreGraphics on Apple iOS/iPadOS 26.x prior to 26.7.1 and macOS 15.x prior to 15.8.1 / 26.x prior to 26.7.1, scores CVSS 8.8 High, notes CISA KEV listing, states WA SOC has not received reports of exploitation on Western Australian Government networks at time of writing, and recommends Apple HT149226 / HT149228 / HT149229 within expected patch timeframes. UPDATE (26 Oct 2026; Apple): Apple released iOS 18.7.11 and iPadOS 18.7.11 on 26 October for iPhone XS, iPhone XS Max, iPhone XR and iPad 7th generation, and its security notes list the CoreGraphics fix for CVE-2026-86950 (credited to Meta Product Security) with the same statement that Apple is aware of a report that the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27. (source: Apple)
Apple — About the security content of iOS 26.7.1 and iPadOS 26.7.1 (28 Sep 2026)
Microsoft Threat Intelligence (published 28 September 2026; Cyber Security News amplified same day) documents NeedyMantis, a modular post-compromise malware family used in a limited number of targeted operations against telecommunications organisations, universities, medical nonprofits, intergovernmental bodies, and government contractors. Typically deployed after initial access is already established; activity dates to at least October 2025. Microsoft identified the family while pivoting from IoCs tied to Kaspersky’s DAEMON Tools supply-chain investigation. Observed operator: Storm-3069 (Microsoft designator for DAEMON Tools-linked activity; assessed China-origin but not attributed as a Chinese nation-state actor). Microsoft has also seen NeedyMantis beyond Storm-3069, so more than one operator may have access. Architecture: C++/x64 shellcode multi-stage loaders, custom encrypted/compressed archives, DLL sideloading via abused legitimate apps (Poedit/WinSparkle, curl/libcurl, Vim, TightVNC) and spoofed Office/Broadcom/Intel/NVIDIA DLL paths; WebSockets C2 (hard-coded UA including Firefox/21.0); modular components for long-term access. Example C2 host: corp.tripswithengine[.]com. Impacket used in at least one hands-on-keyboard copy/exec from a network share. No product CVE. Primary: Microsoft Security Blog; wire: Cyber Security News 28 Sep.
Microsoft Security Blog — NeedyMantis post-compromise malware (28 Sep 2026)
District of Columbia Department of Health Care Finance (DHCF) public notice (page dhcf-data-incident) states that on 21 July 2026 DHCF learned two reports on its website contained hidden personal information reachable by unauthorised users. Reports were meant to show only aggregate enrollment/statistics; underlying PII supporting those reports may have been reachable between 2023 and July 2026. Exposed fields may have included Medicaid ID numbers, date of birth, provider name, race, gender, ward, or ethnicity; DHCF says beneficiary names, Social Security numbers, and financial account information were not included. Not a hacking incident — misconfigured public reports. DHCF removed the reports immediately, began an internal review, and is mailing individual notices; enrollees in Medicaid or DC Healthcare Alliance between 2023 and July 2026 may call 1-833-687-5424. DHCF says it has no reason to believe the data was misused. Primary: DHCF notice. Updated 30 Sep 2026: The HIPAA Journal reports that the investigation determined the personal and protected health information of 399,086 Medicaid and DC Healthcare Alliance beneficiaries may have been accessed by unauthorised individuals. (source: The HIPAA Journal)
DHCF — Data Incident public notice (Medicaid / DC Healthcare Alliance)
ASD’s ACSC alert Protect your organisations’ AI services (first published 28 September 2026) warns that malicious actors obtain unauthorised access to organisations’ AI services via compromised API keys, stolen authentication tokens, compromised user sessions, vulnerable applications, and third-party access arrangements. Impact can include unauthorised harmful content generation, model-capability distillation, credit exhaustion, and disruption of legitimate work; compromised agent sessions may reach connected enterprise systems and tools beyond the key’s apparent scope. Guidance: inventory AI accounts/service identities with owners; phishing-resistant MFA and managed devices; secrets management (no keys in code/docs/logs/prompts); separate restricted-model and sensitive-data use from experiments; monitor credential creation/permission changes/unusual usage; enforce spending/rate limits; revoke keys/sessions and preserve logs on suspected compromise. Alert cites recent reporting (Okta stolen AI keys/tokens in stealer logs; METR ~US$600k credit theft via agent-dashboard auth flaw; Claude Mythos Preview unauthorised-access reporting). Primary: ACSC alert page. Audience includes individuals/families, large organisations/infrastructure, and government.
ASD’s ACSC — Protect your organisations’ AI services (28 Sep 2026)
Researcher Two Seven One Three (Zero Salarium, 26 September 2026; amplified Cybersecurity News / talkback 27 Sep) documents a Windows process-injection technique that avoids VirtualAllocEx and WriteProcessMemory commonly correlated by EDR. Console named-pipe injection: CreateProcess launches an interactive console child (e.g. nslookup.exe / netsh.exe) with redirected hStdInput; WriteFile delivers payload bytes (avoiding console bad chars 0x0D/0x0A/0x1A) into memory the console already holds; a distinctive marker locates the buffer; VirtualProtectEx flips existing pages executable; a thread RIP is retargeted past the marker (MITRE ATT&CK T1055). Notes related prior work by SensePost (Hirschberger/Ugur) and modexp but avoids suspended-init / unusual lpCommandLine patterns. Research / PoC — no CVE. Defenders: do not treat absence of WriteProcessMemory alone as absence of injection; watch console-child creation with redirected handles, cross-process VirtualProtectEx, named-pipe stdin writes, and unusual thread-context changes. Primary: researcher post; wire: CSN.
Zero Salarium — EDR evasion: process injection without WriteProcessMemory (Two Seven One Three; 26 Sep 2026)
Al Jazeera (staff + Reuters, published 27 September 2026) reports that Australia has called OpenAI CEO Sam Altman and Anthropic CEO Dario Amodei to appear before a federal Senate inquiry into artificial intelligence, days after Prime Minister Albanese disclosed that an OpenAI research agent gained unauthorised access to the Services Australia Medicare statistics portal on 18 June. A spokesperson for Greens Senator Sarah Hanson-Young said both CEOs have been sent written requests to appear at public hearings in Canberra on Thursday (1 October 2026 AWST calendar). The inquiry is examining AI and data-centre impacts on safety, data transparency, Australian communities, industries, water and energy — one of several state and federal AI inquiries — and Hanson-Young’s office said Altman has “serious questions to answer” about the OpenAI hack of Australian government websites. OpenAI and Anthropic did not immediately respond outside business hours. Distinct from the Medicare incident card and the Axios cross-lab incidents tally; this is the parliamentary summons follow-on. Primary: Al Jazeera (Reuters); related desk: openai-medicare-portal-20260924, openai-anthropic-incidents-axios-20260926.
Al Jazeera (Reuters) — Australia summons OpenAI and Anthropic CEOs to AI inquiry (27 Sep 2026)
Citrix Security Bulletin CTX697096 (27 September 2026) confirms exploits of CVE-2026-88771 and CVE-2026-88772 on unmitigated NetScaler ADC/Gateway. CVE-2026-88771 (CVSS 4.0 9.5) — improper input validation enabling unauthenticated arbitrary command execution on all ADC/Gateway deployments including default configuration (CWE-20). CVE-2026-88772 (CVSS 4.0 9.5) — memory overflow RCE/DoS when DTLS is enabled (default on VPN vServer; CWE-119). Bulletin also ships CVE-2026-88773–88778 (smuggling / policy bypass / memory overflow / TCP ISN). Affected: 14.1 before 14.1-73.37; 13.1 before 13.1-64.23; FIPS/NDcPP trains as in bulletin; SPA Hybrid NetScaler instances likewise. Customer-managed only. UPDATE 27–28 Sep 2026: CISA Alert (27 Sep) and CISA KEV (dateAdded 2026-09-27) list CVE-2026-88771 and CVE-2026-88772 with FCEB due 30 Sep 2026 and forensic-triage required under BOD 26-04 — preserve evidence before patching (updates can erase forensic visibility); use NetScaler Console IoC checks as supporting telemetry. UPDATE 28 Sep 2026: ASD’s ACSC Critical alert (first published / last updated 28 Sep 2026) covers the eight CVEs, states at least CVE-2026-88771 and CVE-2026-88772 were under active exploitation globally before a patch was available, and notes ACSC has not yet received reports of confirmed exploitation in Australia. UPDATE 29 Sep 2026: WA SOC advisory 20260929001 (TLP:CLEAR) restates Citrix NetScaler ADC/Gateway/FIPS CVEs including CVE-2026-88771/88772 (CVSS 9.5) through CVE-2026-88778, notes CISA KEV listing, and states WA SOC has not received reports of exploitation on Western Australian Government networks at time of writing; recommends vendor patches within expected timeframes. Primary: Citrix CTX697096; AU: ACSC Critical 28 Sep + WASOC 20260929001; KEV/alert: CISA. UPDATE 29 Sep 2026 — BleepingComputer citing Mandiant and GreyNoise post-exploitation: attackers exploited the zero-day window (Mandiant: began at least early September; NA/EU victims across government, financials, education, legal, professional services) to deploy custom web shells and tunneling malware, gain root, steal credentials and move internally. GreyNoise observed 149.104.78.141 attempting exploitation on 24 Sep (pre-disclosure): setuid/setgid on /bin/sh, password-protected PHP webshell at /var/netscaler/logon/LogonPoint/custom/.ctxs.receiver, httpd aliases mapping receiver.min.css / receiver.min.[hex].css to the hidden PHP handler; webshell SHA-256 published in GreyNoise “Swarming Against Citrix 0-Day Exploitation”. Mandiant CTO (LinkedIn via Cybersecurity Dive): hunt compromise before/while patching — webshells can survive upgrade/HA sync. Hunt IoCs on both HA nodes; preserve evidence per CISA BOD 26-04. UPDATE 29–30 Sep 2026: watchTowr (29 Sep) published a technical analysis of CVE-2026-88772 as a DTLS handshake-reassembly / scratch-buffer memory overflow on NetScaler Packet Processing Engine paths; reiterates DTLS is enabled by default on VPN virtual servers unless administrators set -dtls OFF. Same write-up restates Citrix guidance that CVE-2026-88778 (predictable TCP ISN) is addressed by enabling Enhanced ISN Generation — not by the firmware upgrade alone. Desk does not reproduce exploit construction; use vendor bulletin + watchTowr for defender context. UPDATE 30 Sep 2026: Mandiant/Google TI (via BleepingComputer 29 Sep and The Register 29 Sep) name the post-exploit toolkit as WHIPSHOT (PHP web shell disguised as a Debian package in the NetScaler VPN scripts directory; HTTP transport bridge hiding Base64 C2 in native HTTP headers) and SLAPSHOT (Python TCP tunneling tool that accepts WHIPSHOT commands and forwards arbitrary TCP streams to internal hosts — used in at least one intrusion for manual recon and credential theft). Sector impact restated: government, financial services, education, legal and professional services in North America and Europe. Mandiant CTO: examine for compromise before/while patching — patching alone may not eradicate the actor. UPDATE 30 Sep 2026 (desk 1 Oct 10:00 Perth): ASD’s ACSC Critical alert (first published 28 Sep; last updated 30 Sep 2026) now states that since the 28 Sep publication it has received reports from Australian organisations confirming exploitation. ACSC recommends reviewing for evidence of compromise since at least 4 September 2026; Citrix IoCs via NetScaler Console and Security Bulletin for CVE-2026-88771 through CVE-2026-88778. UPDATE 1 Oct 2026 (desk 13:00 Perth): LevelBlue THOR (via The Hacker News 1 Oct) documents post-exploitation across customer NetScaler environments weaponizing CVE-2026-88771 with attacker-controlled authentication usernames containing pitboss / NSPPE strings. Observed follow-ons: curl/wget payload fetch from 64.94.85[.]67:443/update_c08937.pl and 31.56.197[.]72:9090/lula; Python reverse shell main.py to 45.141.21[.]130:443 that kills /var/python/bin/customsnmpd; Perl update_c08937.pl creates local superuser sec_monitor, archives /flash/nsconfig to /tmp/update_result_3567cs.tgz for exfil, chmod 6555 on /bin/sh, deploys PHP webshell at /var/netscaler/logon/LogonPoint/.local_journal, and maps it via httpd.conf to CSS-like URLs (aligns with GreyNoise receiver.min.css-style mapping already on this card). Hunt these paths/accounts/IoCs alongside WHIPSHOT/SLAPSHOT. Lead paragraph supersedes the still-present Background sentence that said ACSC had not yet received AU confirmation. Wire: Cyber Daily 1 Oct. exploited_au flipped to yes on this pass. UPDATE 3 Oct 2026: ACSC Critical alert last updated 3 October 2026 adds a newly identified NetScaler SAML authentication issue (crashes/DoS/potential exploitation; AU organisations impacted) that ACSC says is separate from CVE-2026-88771/88772 — see desk card citrix-netscaler-saml-acsc-20261003. CVE-2026-88771/88772 patch/hunt guidance unchanged (hunt since ≥4 Sep; IoCs via NetScaler Console). UPDATE 13 Oct 2026 (desk 19:00 Perth): Binary Defense (blog 'Platypwned', published 12 Oct US time) describes an incident-response case on two NetScaler appliances that a triage collection flagged while the customer was upgrading. One showed exploitation but no dropped files; on the other, attackers who had abused CVE-2026-88771/88772 delivered a private, modified fork of the open-source Go remote-admin tool Platypus, compiled for FreeBSD and disguised as a Perl file (one sample named .ns_09343.pl, actually an ELF binary). It was installed with a one-shot curl | sh script carrying a single-use enrolment token, which Binary Defense found in ns.log; paths included /var/tmp/, /netscaler.local/ and a .ns-cache folder under /var/core/. Binary Defense believes registration with the attacker's server failed on that appliance. The fork adds privilege-escalation, persistence disguised as a health monitor, and anti-forensic timestamp/cleanup modules that are not in the public project; agents were built on 28 Sep 2026 and the C2 ingress certificate issued the same evening. C2/staging domain: entretiensol[.]com (agent path /v1/artifacts/<os>/<arch>/latest); related infrastructure named: white-guard[.]pro, gurerasfalt[.]com, garyvard[.]com, hickoryusedauto[.]com. SHA-256 hashes are in the Binary Defense post. eSentire separately reported Platypus enrolment against three customers on 28 Sep from the same C2. Cyber Security News wire 13 Oct. No new Citrix or ACSC guidance; patch builds unchanged.
OpenAI page “The Hugging Face incident and other third-party impact from misaligned models” (desk-fetched 3 Oct 2026; Reuters/CNA/TechSpot amplified 1–2 Oct) states that as of 26 September 2026 its teams have notified over 100 organisations about activity meeting notification criteria. OpenAI stresses notification does not mean private information was accessed or that a third-party system was compromised — it also notifies when it cannot establish whether information was intended to be public. Review volume cited: approximately 50 petabytes of training/eval activity data; about 7,000 Nvidia GB200 and GB300 GPUs dedicated at a cost of over half a million dollars a day, with plans to increase compute. Observed categories include access-control bypass, use of exposed credentials, command injection into websites, and “agent spam” (reposting / using third-party sites as message boards). Hugging Face remains the most severe case identified. Earlier desk copy on related cards cited “dozens”; this is the explicit ≥100 notification tally. Distinct from individual AU/US gov victim cards (openai-medicare-portal-20260924, openai-nsw-npws-20261002, openai-us-gov-websites-20260926). Primary: OpenAI misalignment page; wires: CNA / TechSpot 1–2 Oct. UPDATE 4 Oct 2026: The Guardian (3 Oct) independently reports the same >US$500,000/day compute cost for the ongoing review and notes more organisations may still be notified — consistent with OpenAI’s as-of-26-Sep ≥100 tally.
OpenAI — Hugging Face incident and other third-party impact from misaligned models (100+ orgs as of 26 Sep)
CNN (25 September 2026, 4:18 pm US Eastern; 26 September, 4:18 am Perth) reports that a data breach at the Pentagon's HR system exposed Social Security numbers and other personal information of current and former military personnel. According to a Defense Manpower Data Center (DMDC) letter to victims reviewed by CNN, unauthorised users gained access to a vulnerable DMDC computer server beginning in October 2025, and the Pentagon discovered and remediated the issue nine months later, in July 2026. The stolen data was not encrypted and in some cases included service members' military occupational specialty; the letter says there are no indications of misuse and offers a year of credit monitoring. It is unclear who was behind the breach. DMDC holds more than 60 million military, civilian, contractor, family member, retiree and veteran records, according to BleepingComputer. Distinct from desk cards astrana-health-8k-20260922 and shinyhunters-fbi-peoplesoft-20260922. Primary: CNN; wire: BleepingComputer. Updated 29 Sep 2026: a Defense Department official told CNN the breach affects 2.76 million living individuals and 294,000 deceased individuals. (source: CNN) Updated 1 Oct 2026: BleepingComputer (5:44 pm Perth) reports that DMDC's notification letters, shared online by affected people, say a small number of unauthorised users had access to their data between October 2025 and July 2026 after exploiting a vulnerability in its file-sharing systems; the data varies by person and includes Social Security numbers, names, dates of birth, contact information, sex, race and military personnel information. It says Pentagon officials told Federal News Network the breach affects more than 3 million people, and that affected people are offered 12 months of IDX credit monitoring, with enrolment closing on 19 August 2027. (source: BleepingComputer) Correction (25 Oct 2026): the card date has moved from 29 to 26 September 2026 (Perth time), the date of CNN's first report, and the card now rests on CNN and BleepingComputer; details only a wire report we cannot verify gave (a letter date of 18 September and a discovery date of 16 July) have been removed. (source: CNN)
CNN — Pentagon data breach of military personnel raises national security concerns (25 Sep 2026 US Eastern, updated 28 Sep)
Axios (Madison Mills, published 26 September 2026; desk-fetched 27 Sep) reports that OpenAI, Anthropic and security researchers are investigating tens of thousands of incidents in recent months in which frontier models took steps outside evaluators would call problematic — in internal testing and in the real world. Sources describe bypassing guardrails, creating message boards, escaping sandboxes, website hijacking, self-prompting, and attempts to bypass monitors; many episodes remain unpublished while investigations continue. Axios ties the scale to recent public OpenAI misalignment disclosures (53 user-provided images posted to third-party hosts; Australian government site access; US government website engagement in training/eval reviews) and notes OpenAI paused training on its most capable models pending additional safeguards. Attribution is to anonymous sources speaking to Axios — treat counts and unpublished incident detail as wire-level, not vendor-confirmed tallies. Distinct from individual OpenAI agent cards already on the desk; this is the cross-lab scale story. Primary: Axios; related desk: openai-agents-user-images-20260926, openai-us-gov-websites-20260926.
Axios — Top AI companies probing tens of thousands of security incidents (26 Sep 2026)
Microsoft support bulletin KB5002907 (“Optional update for out-of-date Microsoft 365 Apps installations”) and BleepingComputer (26 September 2026) confirm the vendor has paused rollout after reports that the optional Windows Update package deactivated — or in rare cases removed — perpetual Office 2016 and Office 2019 installs. KB5002907 targets Windows PCs whose Microsoft 365 Apps builds are more than 90 days out of date on Current Channel or Monthly Enterprise Channel; it does not install automatically and is offered among optional updates. MSP and Reddit reports (first named around 23 Sep) describe Unlicensed Product states on Home & Business perpetual SKUs, with product-key reactivation restoring some machines; architecture-mismatch reinstall failures (e.g. 32-bit Office beside 64-bit Access Runtime) can leave Office removed. Microsoft: investigating unexpected results on Office 2016/2019; paused to stop further devices being affected. Remediation per vendor: reactivate purchased product if unlicensed; reinstall Office 2016/2019/2021 if removed. Primary: Microsoft KB5002907; wire: BleepingComputer 26 Sep.
