WA Cyber Security Unit advisory 20260915003 (15 September 2026, TLP:CLEAR) relays Canonical LXD updates for eight Critical issues (CVE-2026-66897, CVE-2026-66898, CVE-2026-63300, CVE-2026-63299, CVE-2026-63297, CVE-2026-63296, CVE-2026-63294, CVE-2026-62420), each listed at CVSS 9.9. Successful exploitation can let a remote attacker achieve root command execution on the LXD host. Affected lines per WASOC: LXD 6.x prior to 6.10; 5.21.x prior to 5.21.7; 5.0.x prior to 5.0.9; all versions prior to 4.0.13. Canonical GitHub advisory GHSA-q39m-8fx9-42fv (CVE-2026-66897 example) documents instance template path traversal to arbitrary host file write as root, with patched versions including 4.0.13, 5.0.9, 5.21.7, 6.9-ab8fad2, and 6.10; related LXD GHSAs cover further path-traversal / privilege issues in the same wave. WASOC reports no exploitation observed on Western Australian Government networks at time of writing. Patch to vendor-fixed LXD builds; review Canonical LXD security advisories for the full set. Primary: Canonical LXD GHSA index; AU wire: WASOC 20260915003.
BleepingComputer (15 September 2026) reports five alleged leaders of the Black Axe cybercrime syndicate — Perry Osagiede, Franklyn Osagiede, Osariemen Clement, Collins Otughwor, and Musa Mudashiru — were extradited to the United States to face wire fraud and money-laundering charges. Prosecutors allege a South Africa-based internet fraud campaign (about 2011–2021; the defendants were arrested in South Africa in 2021 at the US request and extradited on 11 September 2026, per BleepingComputer) using romance and advance-fee scams, aliases, dating sites, and VoIP numbers to target US victims, including coercion via threats to publish sensitive photos. US Attorney’s Office for the District of New Jersey press release linked from the wire: “Five Prominent Black Axe Members Extradited for Conspiring to Engage in Internet Scams and Money Laundering.” Law-enforcement action / charging story; not a fresh organisational data-breach notice. Primary: DOJ USAO-NJ PR; wire: BleepingComputer. Correction (26 Oct 2026): the campaign was earlier described as Cape Town-based; BleepingComputer places it only in South Africa. (source: BleepingComputer)
DOJ USAO-NJ — Black Axe members extradited (linked 15 Sep 2026 wire)
Clover Health Investments Corp., a PPO and HMO organisation with a Medicare contract, says in a notification letter filed with South Carolina's Department of Consumer Affairs that on 4 July 2026 it determined it had experienced a cybersecurity incident involving unauthorised access to certain company applications and data. Its investigation found that between 3 and 4 July 2026 an unauthorised party gained access to credentials belonging to three non-managerial employees and used them to access company applications and data; Clover says it detected the incident on 4 July, ended the access within hours, engaged third-party cybersecurity experts and notified law enforcement. Certain data was accessed and acquired, and a review completed on 28 August 2026 identified personal information about the people being notified; the published letter template does not list the types of data. Clover says it is unaware of any attempted or actual misuse. The US Department of Health and Human Services breach portal lists Clover Health (Minnesota, health plan) with 138,677 individuals affected, submitted on 14 September 2026, as a hacking/IT incident involving a network server and other locations. Primary: Clover Health notification letter (South Carolina Department of Consumer Affairs); HHS OCR breach portal. Correction (25 Oct 2026): the card now rests on Clover's notification letter and the HHS portal; a social-engineering description, a list of data types and a note about attribution from a wire report we cannot verify have been removed. (source: HHS) Correction (25 Oct 2026): the card date has moved from 5 October to 14 September 2026, the breach report submission date the HHS portal lists; HHS gives a US date with no time. (source: HHS)
Clover Health — Notice of Data Security Event (consumer letter, South Carolina Department of Consumer Affairs, PDF)
St James’ Anglican School (Alkimos, Western Australia) published an incident update dated Monday 14 September 2026 (9:00am): it identified a cyber security incident involving unauthorised access to its computer systems, contained and secured systems, and is auditing. Personal information relating to members of the school community was involved; families were notified with protective steps. The school says it reported to ASD’s ACSC and the OAIC; investigation ongoing; no technical commentary. The West Australian (15 September) reported that student medical records, photos and bank details were stolen; Insurance Business (17 September), citing The West Australian, says the data belongs to current and former students dating back to 2015 and includes names, addresses, email addresses, phone numbers, bank account details, student medical records and photographs. The school’s public statement does not itemise the data. The school’s statement does not name a threat actor. UPDATE 1 Oct 2026: according to Cyber Daily (David Hollingworth), the ThreeAM ransomware group claimed responsibility for the attack in a 28 September post to its darknet leak site; a school spokesperson told Cyber Daily experts have not identified evidence that any school information has been published or released online, investigation and dark-web monitoring continue, learning undisrupted, ACSC and OAIC informed at first discovery. Primary: school incident-updates page; wire: Cyber Daily 1 Oct; The West Australian 15 Sep; Insurance Business 17 Sep. Correction (25 Oct 2026): removed a quote from the ransomware group and a leak-site tracker reference; the group’s claim is now credited to Cyber Daily. (source: Cyber Daily) Correction (26 Oct 2026): the data categories are now attributed to The West Australian and Insurance Business, which are linked; a 'NewsWire' and DataBreaches.net credit and a breach-list reference that no linked source supported have been removed. (source: Insurance Business)
St James’ Anglican School — Incident Update (14 Sep 2026)
Apple security content for iOS/iPadOS 26.7 (support 149041, released 14 September 2026) and macOS Golden Gate 27 (149035) lists CVE-2026-86869 in ImageIO: out-of-bounds write addressed with improved bounds checking; Apple impact text on 26.7 is “Processing a maliciously crafted image may lead to unexpected app termination” (credits: Niels Hofmans, Meta Red Team X, Geonha Lee, Chris Bailey — Short Circuit). UPDATE 26 Sep 2026: ironPeak blog EX-ARRR publishes full technical disclosure — heap overflow in libAppleEXR.dylib / CompressedInterleave4 when decoding crafted OpenEXR; researcher states Apple triage classified the report as 0-click code execution via iMessage EXR image payload, with BlastDoor not decoding EXR and Spotlight/ImageIO thumbnailing providing the side-door reach; PAC/MIE still constrain reliable exploitation on modern Apple silicon. Reported May 2026; fixed across iOS/iPadOS/macOS 27 family builds as CVE-2026-86869 per researcher timeline. No CVSS from Apple. Patch: current iOS/iPadOS 26.7+ / macOS 27 (Golden Gate) / equivalent trains. Distinct from bulk desk card apple-ios27-20260914 (does not spotlight this CVE). Primary: Apple iOS 26.7 security content; technical write-up: ironPeak.
Apple — iOS 26.7 and iPadOS 26.7 security content (CVE-2026-86869 ImageIO, 14 Sep 2026)
JFrog Security Research (CVE published 14 September 2026; industry wire 22 Sep) documents CVE-2026-90898 in MaximHQ Bifrost (open-source AI gateway / HTTP transport): with default governance.auth_config.is_enabled=false, an unauthenticated POST /api/mcp/client registering a stdio-type MCP client starts attacker-chosen command+args as the Bifrost process user before any MCP handshake. JFrog/CNA CVSS 3.1 9.8 Critical (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); CWE-306/284. Stock binary binds management API to localhost by default; official Docker image binds 0.0.0.0 so published ports expose the management API. Fix: transports/v2.1.0 returns 403 for unauthenticated stdio registration (PR #6757). Affected: Bifrost HTTP transport < 2.1.0; 1.6.x through 1.6.11 and transports/v2.0.0 lack the fix. Workaround: enable management auth and firewall the listener; treat previously exposed unauth instances as compromised and rotate virtual keys/provider credentials. Primary: JFrog advisory; metadata: CVE.report; wire: The Hacker News 22 Sep 2026.
JFrog — Bifrost unauth RCE via MCP stdio (CVE-2026-90898)
Spain’s Agencia Española de Protección de Datos (AEPD) blog (14 September 2026; Francisco Pérez Bes) reports the agency’s first notification of a personal-data breach in which the incident was allegedly executed by an AI agent using a known large language model. Per the notifier: the agent searched generic files for vulnerabilities, successfully logged in, then autonomously hunted application flaws, modified personal data, and accessed invoices. AEPD stresses the claim is from the organisation’s notification, has not yet been independently verified by the agency and still requires analysis; use of a given model does not imply the provider’s model or infrastructure was compromised or purpose-built for crime. Framing: shift from AI-assisted attacker tools (phishing copy, vuln search) toward agentic chaining of attack phases at machine speed — with implications for identity/credential controls, detection, and response timing. According to BleepingComputer, AEPD said AI can increase the speed, scale and adaptability of attacks and reduce defenders’ response-time margins, a paradigm shift recently highlighted by Spain’s National Cryptologic Center. Primary: AEPD blog. Updated 16 Sep 2026: BleepingComputer reported the AEPD post on 16 September. Correction (27 Oct 2026): a second desk card on the same AEPD notice has been merged into this one and removed; an earlier Perth conversion of BleepingComputer's time has been dropped because the page states no time zone. (source: BleepingComputer)
AEPD — primera notificación brecha por agente de IA (14 Sep 2026)
Brevo's status write-up says that on 14 September 2026 an attacker used a compromised long-lived Cloudflare API key (stored in Brevo application source code; Brevo says it was first misused in late August) to deploy a Cloudflare Worker that rewrote responses at the CDN edge. Brevo gives the impact window as 15:01 to 20:30 UTC (5h29): the Worker was routed to all of brevo.com at 15:01, and at 16:07 it was updated to also append a loader to the three embedded JavaScript files and routed to sibforms.com; Brevo says the ClickFix was active on the listed URLs from 16:07 until 20:30 UTC. Affected: brevo.com, sendinblue.com, login/account/my/onboarding.brevo.com, sibforms.com, plus Brevo forms script, Conversations widget, and SDK loader that customers embed. The Worker stripped CSP and served a fake Cloudflare “verify you are human” ClickFix lure (Win+R / Ctrl+V / Enter) downloading malware on Windows; Brevo says that on WordPress sites embedding a Brevo widget, if the visitor was logged in as an administrator, the script also attempted to silently install and activate a plugin. Not affected per Brevo: app.brevo.com, API, email delivery, and customer account data held in Brevo. Remediation: Worker/routes/hostnames removed, key revoked, hardcoded credential removed, Vault + Cloudflare audit alerting planned. Distinct from Brevo’s earlier 9–10 September SSO boundary incident (Trezor phishing wave). Primary: Brevo status write-up. Updated 17 Sep 2026: BleepingComputer reported that Sansec, which first reported the attack, said it may have affected up to 100,000 websites, gave the malicious window as 16:05 to 20:13 UTC, and that BleepingComputer found the plugin, named 'Web Media Optimizer', on VirusTotal. (source: BleepingComputer) Correction (24 Oct 2026): an earlier version paired 'about five and a half hours' with 16:07–20:30 UTC; Brevo's 5h29 is its 15:01–20:30 UTC window. (source: Brevo status write-up)
Elastic Security Labs (report dated 14 September 2026; The Hacker News 16 September IST) tracks REF9334 delivering the KREMLIN toolkit against Brazilian banking users since at least May 2025. Infection starts with a manually run JavaScript lure (banking/invoice/document themed), then a multi-stage loader with sandbox evasion, Node.js staging, scheduled-task persistence, and Ethereum smart-contract dead-drop resolvers for C2/payload URLs (domains cited include volmira[.]site and zaviro[.]online). A C++ installer sideloads via a SentinelOne-named binary (SentinelAgentCore.dll). Malicious Chrome/Edge extensions use Phantom Extension / GhostChrome-X style Secure Preferences HMAC/App-Bound hash forgery to steal credentials and session tokens. Elastic notes similarity of the integrity-bypass technique to APT31 BlueMoon/GemStone tradecraft but attributes this cluster to Brazilian banking focus. Primary: Elastic Security Labs; wire: The Hacker News.
cPanel Security advisory (14 September 2026) warns of a critical privilege-escalation flaw in LiteSpeed Web Server Enterprise: on shared-hosting servers a malicious low-privilege website user could gain root-level access, bypassing account isolation including CageFS, and access or alter other sites and the server. Affected: LiteSpeed Web Server Enterprise prior to v6.3.7. Fix: upgrade to 6.3.7 or later. cPanel/LiteSpeed publish the forced update command /usr/local/lsws/admin/misc/lsup.sh -f -v 6.3.7 (auto-update may lag; as of THN 15 Sep, download page still listed 6.3.6 as stable). LiteSpeed store announcement for 6.3.7 (11 September 2026) lists three security changes (lscgid auth, internal redirect URL validation, block internal-use env vars from .htaccess) without naming a CVE or privilege-escalation root cause; neither cPanel nor LiteSpeed assigned a public CVE or CVSS for this Enterprise web-server issue as of 15 September 2026 desk check. Advisory does not state in-the-wild exploitation for this Enterprise flaw (distinct from earlier actively exploited LiteSpeed cPanel-plugin issues CVE-2026-48172 and CVE-2026-54420 already on this desk). OpenLiteSpeed not named in the cPanel advisory. Primary: cPanel; vendor release: LiteSpeed 6.3.7 announcement; wire: The Hacker News (15 Sep 2026).
Cyber Daily (14 September 2026) reports Victorian dealership Penfold Motors (Peter Warren Automotive Group; six Vic sites) is contacting customers after Storm ransomware operators listed the firm (listing dated 17 August; early leak post mis-attributed a similarly named UK organisation before correction). Company statement dated 7 September: contained incident involving an external software provider that stored some Penfold data; systems restored and dealerships operating; investigation with the provider and forensic specialists ongoing. Impact described as basic contact details plus vehicle and servicing information (VINs and tax invoices appeared in published samples per Cyber Daily); Penfold said there was no evidence identity documents or bank-account data were involved, and that it notified the Australian Cyber Security Centre and the Office of the Australian Information Commissioner. Cyber Daily also notes Sharp Motor Group and Macquarrie as other recent Australian automotive/machinery victims tied to third-party supplier incidents in the same Storm wave (Macquarrie desk card updated separately). UPDATE 15 Sep 2026: Cyber Daily names Auto-IT as that third-party software firm (see auto-it-storm-20260915). Primary: Cyber Daily exclusive with company quotes. Correction (22 Oct 2026): the headline previously stated 'Storm ransomware via third-party software' as fact; Penfold's statement describes an incident at an external software provider and does not name Storm, which is the group that listed it on its leak site according to Cyber Daily. (source: https://www.cyberdaily.au/security/14179-exclusive-penfold-motors-latest-car-dealer-to-fall-victim-to-the-storm-ransomware-group)
Antonio De Turris (deturris.io, 14 September 2026) details two authorization bypasses in n8n’s AI Agents feature. CVE-2026-65015: a read-only Project Viewer can instruct an agent’s run_node_tool to execute arbitrary n8n nodes (including HTTP Request) with the project’s credentials; if Execute Command is enabled on self-hosted, that path can reach host command execution. Affected: all versions before 2.29.8, plus 2.30.0; fixed in 2.29.8 and 2.30.1. GitHub GHSA-x5vx-c2c8-m3w9 rates High (CVSS 4.0 overall 7.2). CVE-2026-59207: the agent MCP client sends credential headers without enforcing “Allowed HTTP Request Domains”, so a use-only credential holder can point MCP at an attacker host and exfiltrate the secret. Affected: all before 2.27.4, plus 2.28.0; fixed in 2.27.4 and 2.28.1. GHSA-h44j-f5r5-ph73 High (CVSS 4.0 overall 7.1). Reported June 2026; vendor advisories published with the fixes. Primary: researcher writeup; vendor: n8n GitHub security advisories.
De Turris — n8n AI Agents authorization bypasses (14 Sep 2026)
