Kludex Starlette GHSA-86qp-5c8j-p5mr (CVE-2026-48710) is an HTTP request/response path confusion: affected builds rebuild request.url from an unvalidated Host header, so a malformed Host can make request.url.path differ from the path the router actually dispatched. Middleware that authorises on request.url.path can be bypassed. GHSA rates Moderate; CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N (6.5). Affected through 1.0.0; patched in 1.0.1. CISA added it to the KEV catalog on 2 September 2026 based on evidence of active exploitation. Upgrade Starlette (and FastAPI stacks that pin it) to 1.0.1 or later; ensure front-end proxies reject malformed Host headers.
BleepingComputer and SecurityWeek report a 2 September 2026 joint disruption of the long-running Sality peer-to-peer botnet. Europol, Eurojust, the U.S. DOJ, FBI and DCIS seized Sality-linked domains in the United States, with further seizures in Bulgaria, Hungary and Romania. CrowdStrike's Counter Adversary Operations, with law-enforcement and industry partners, sinkholed known super-peer lists that form the botnet's communication backbone, blocking file packs and URL packs that push payloads. CrowdStrike says Sality has been active since at least 2003, has infected more than 15,000 devices historically, and that the two still-active networks at takedown were mainly used to push EggJagger clipjacking payloads; earlier payload history spans credential theft, spam, proxies, exploitation and DDoS. BC quotes CrowdStrike that after more than two decades the botnet is now no longer able to push new malware payloads through those channels.
SonicWall's 2 September 2026 advisory SNWLID-2026-0016 (covered by SecurityWeek the same day) warns SMA1000 series secure remote access / SSL-VPN customers of two zero-days discovered and observed exploited internally. CVE-2026-83548 is a pre-authentication SSRF in the Appliance Work Place interface, rated CVSS 10. CVE-2026-83549 is an OS command injection in the Appliance Management Console (AMC), rated CVSS 7.8, that an authenticated attacker can use for arbitrary OS commands and potential RCE. SonicWall says both have been exploited and the pair can be chained for unauthenticated remote code execution. Affected models: SMA1000 6210, 7210 and 8200v. Hotfixes 12.4.3-03526, 12.5.0-02952 and higher patch both issues. SSL-VPN on SonicWall firewalls and SMA100 series products are not affected. CISA added both CVEs to the KEV catalog on 2 September 2026.
According to the CVE record published on 1 September 2026 (02:07 UTC; 10:07 am Perth; HackerOne CNA), CVE-2026-65643 is an eval injection (CWE-95) in cPanel 11.138.0.0 and earlier that allows remote authenticated users to execute arbitrary code as root. The record lists cPanel as affected before 11.110.0.141, from 11.112.0.0 before 11.134.0.53, from 11.136.0.0 before 11.136.0.37, from 11.138.0.0 before 11.138.0.2 and from 11.138.1.0 before 11.138.1.7, and rates it CVSS 4.0 8.7 High (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N). CISA's enrichment of the record lists proof-of-concept exploitation, not active exploitation. cPanel's own advisory, linked here, returns 403 to this desk. This is not the April login bypass (CVE-2026-41940), which is already on the desk. Primary: CVE record (HackerOne CNA). Correction (27 Oct 2026): removed details that came only from cPanel's advisory, which this desk cannot read: the parked- and addon-domain file-creation mechanism, the WP Squared product name, the line that all supported versions are affected, and the advisory's statements on scoring and exploitation; the CVE record's CVSS 4.0 score is now given. The card date has moved from 27 August to 1 September 2026, the Perth date of the CVE record (1 September, 02:07 UTC; 10:07 am Perth (AWST)). (source: CVE.org)
KrebsOnSecurity (1 September 2026) reported a dark-web identity-theft service branded Nexus advertising digital scans of more than 153 million US and Canadian driver’s licences plus millions of other ID cards, travel documents and medical cards. Krebs’s checks pointed to Louisiana identity-verification firm IDScan.net as the likely source; the company said it was investigating and the FBI New Orleans field office opened an inquiry. SecurityWeek (3 Sep) and Ars Technica (2 Sep) corroborated the listing. BleepingComputer (4 September 2026) reports multiple lawsuits against IDScan, with firms including Markovits, Stock & DeMarco and Hall Attorneys launching investigations into potential class-action litigation. Nexus appeared to shut shortly after Krebs published. Organisations that rely on third-party ID-scan vendors should treat this as a supply-chain identity risk. NEW 10 September 2026 (BleepingComputer): IDScan published a 4 September 2026 security notice (initially noindex) stating it learned on or around 1 September that an unauthorised party may have accessed or copied customer information in IDScan.net cloud accounts — full names and driver's licence or other government ID numbers — and that investigation continues with third-party specialists. IDScan's notice does not mention the Nexus listing or the 153 million figure; the link between the two comes from KrebsOnSecurity's reporting. UPDATE (IDScan notice, updated 29 September 2026): IDScan says an unauthorised third party gained access to a portion of its cloud environment between 4 April and 2 September 2026, that the event was limited to its VeriScan platform, and that the information potentially involved could include full name, contact information, date of birth, and driver's licence, passport or other government ID numbers, varying by how each customer organisation used VeriScan; it says it is not aware of misuse. UPDATE 16 September 2026 desk: primary_url switched to IDScan.net press notice (datePublished 4 Sep 2026) stating unauthorised access/copy of cloud customer info may include full names and driver's licence or other government ID numbers; free credit monitoring offered; cooperating with federal law enforcement. ACS Information Age (8 Sep) re-covered the dump for AU readers — no new scope beyond vendor notice. Correction (22 Oct 2026): an earlier version said IDScan's notice tied the company to the 153M+ licence dump; the notice does not mention the dump, and that link is KrebsOnSecurity's reporting. (source: https://idscan.net/press-release/notification-of-data-security-incident/)
IDScan.net — Notification of Data Security Incident (4 Sep 2026)
Microsoft Security Blog (1 September 2026) details an active campaign of high-fidelity fake vendor download sites (.com.cn / .hl.cn lookalikes for brands including Microsoft Edge, Razer, Kaspersky, Sejda, Calibre and others) that serve ZIP installers whose hashes rotate per download. Payloads establish persistence via disguised scheduled tasks, write sweeping Microsoft Defender exclusions (including short-lived SYSTEM tasks), delete volume shadow copies, stop/disable Windows Update services (wuauserv, UsoSvc, uhssvc, WaaSMedicSvc), and C2 on non-standard ports (e.g. 5090, 7031–7090, 8050, 28290, 28300) plus six-character .net domains. A parallel path uses msiexec -Embedding. Microsoft assesses with moderate confidence consistency with the publicly reported Silver Fox (Yinhu) fake-software campaign but does not attribute a nation-state. Victims span healthcare, manufacturing, gaming, technology, logistics, government and education, primarily China-based operations / Chinese-speaking users. Primary mitigations Microsoft names: Tamper Protection, SmartScreen/network protection, hunt randomized drops under Public/ProgramData/Program Files (x86), and block look-alike ZIP download patterns.
SecurityWeek (2 September 2026) reports CVE-2026-84115 in Cleo Harmony file-transfer: improper privilege management in the JWT refresh token handler on /api/connections, where manipulating the Bearer argument can let a remote attacker elevate privileges. VulDB (listed as CNA-style record in public mirrors) says builds through 5.8.1.10 are affected, a public exploit exists, and upgrading to 5.8.1.11 fixes it. Cleo's Harmony 5.8.1 release notes list 5.8.1.11 as a 15 May 2026 limited/restricted build and do not expand on this CVE in the public notes SecurityWeek also noted thin vendor detail. WatchTowr (quoted by SecurityWeek) has reproduced the issue and flags Harmony as a frequent ransomware target historically. This desk does not invent a CVSS beyond what secondary reporting attributes; Cyber Security News cites 8.3 High for the same CVE. Patch to 5.8.1.11 or later; hunt anomalous /api/connections auth traffic.
OpenAI’s Preparedness Framework rates GPT-6 Astra Critical for cybersecurity — the first broadly deployed model at that bar (can find/develop functional zero-days in many hardened systems without step-by-step human guidance, or run new end-to-end attacks). BleepingComputer (8 September 2026) covers the system card: Astra discovered and used previously unknown zero-day vulnerabilities during ExploitBench evaluations on bugs disclosed after its knowledge cutoff (OpenAI says it is disclosing two to maintainers); jailbreak resistance, isolation, checkpoint encryption and monitoring were strengthened before release; alignment flags fell vs GPT-5.6 Sol (53% fewer severity-3+ in 54,218 Codex tasks) but monitorability decreased (evaluation-awareness 9.6% vs 2.8%; can hide strategically poor performance from internal monitors). Indirect prompt-injection robustness rose to 99.79% from 96.23%. Distinct from desk card chatgpt-cpr-gmail-channel-20260908 (connector/isolation bug, now mitigated per CPR). Primary: OpenAI Path to Astra / system card; wire: BleepingComputer 8 Sep.
iTnews (1 September 2026) reports the Attorney-General's Department released the Privacy Amendment (Personal Data Protection) Bill 2026 for consultation. The draft would replace the Notifiable Data Breaches scheme's "as soon as practicable" OAIC notification standard with a fixed 72-hour deadline once an entity has reasonable grounds to believe an eligible data breach has occurred, aligning NDB timing with 72-hour windows used under the Security of Critical Infrastructure Act 2018 and ransomware-payment reporting in the Cyber Security Act 2024. The existing 30-day window to assess a suspected breach would remain; entities unable to file a complete statement in time could lodge an incomplete one with written notice of what is missing. Failing to file within 72 hours could attract an infringement or compliance notice. The same package proposes a narrow erasure right limited to large digital platforms (Online Safety Act services clearing $500m gross revenue or 2.5 million average monthly Australian end users), not an economy-wide deletion duty. This is draft consultation legislation, not yet enacted.
UPDATE 17–19 October 2026: researcher Zach Main published the Plex2Shell write-up and proof-of-concept code on 16 October, showing how four of the flaws chain into unauthenticated remote code execution on Plex Media Server before 1.43.3.10861: the /player/timeline SSRF (CVE-2026-96652) is used to call searchOne (CVE-2026-96654) and obtain the owner's admin token, the transcoder SSRF (CVE-2026-96655) fetches an attacker-hosted file, and the Codecs path flaw (CVE-2026-96656) writes it as a shared object that Plex then runs. The fixes shipped in PMS 1.43.3.10861 on 3 August, after Zach Main reported the bugs to Plex on 27 July. Researcher boredhackerblog reported in-the-wild exploitation of a honeypot from the morning of 17 October, first from 45.194.92[.]222 and also from 91.92.40[.]202 and 176.65.139[.]228, which downloaded payloads from 217.60.194[.]116: an XMRig miner (seen as 'mylovelyminer', mining to ota.proxystream[.]st) and a Linux reverse-proxy backdoor called 'myawesomeproxy' (SHA-256 e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9). Bitsight linked another proxystream[.]st subdomain to the AISURU DDoS and proxyware botnet in August. Plex users on Reddit report servers infected with the same miner, though it is not confirmed those infections came from Plex2Shell. Zach Main has published detection guidance and boredhackerblog has published packet captures. Plex had not commented by 19 October (The Hacker News). UPDATE 23–24 September 2026: NVD and CISA CSAF VA-26-266-01 (published 23 Sep 2026) assign five CVEs to Plex Media Server before 1.43.3.10861 — the build family covered by Plex’s 1 September 2026 forum security notice (PMS 1.43.3 / Desktop 1.115.0) that previously said CVEs were requested but withheld. CVE-2026-96656 (CVSS 3.1 7.2 High, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H): admin can write arbitrary files via TranscoderH264Options appended to x264; .so files run at startup without signature checks. CVE-2026-96651 (6.5 Medium): path traversal on /system/agents/media/get can read files including PlexOnlineToken (account/server control) with a valid session token. CVE-2026-96654 (6.5): unauth URL injection via searchOne into other plugins. CVE-2026-96652 / CVE-2026-96655 (4.3): SSRF via /player/timeline and transcoder universal path. BleepingComputer reported on 9 September 2026 that Shadowserver said over 36,000 internet-exposed Plex Media Server instances were still unpatched against the flaws in v1.43.2 and earlier. Patch: PMS ≥1.43.3.10861 / Desktop ≥1.115.0; confirm auto-updates landed. UPDATE (22 Oct 2026): CISA added CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656 to its Known Exploited Vulnerabilities catalog on 20 October 2026 (US federal due dates 23 October for -96654 and -96656, 3 November for -96652 and -96655). (source: CISA KEV catalog)
Kaspersky Securelist published on 1 September 2026 that Iranian APT Mirage Kitten (also tracked as Nimbus Manticore, UNC1549, Smoke Sandstorm) is using two previously undocumented cross-platform RATs: NodeRabbit (Node.js) and PollCat (obfuscated JavaScript), the first publicly documented Node.js and JavaScript malware from this group. Operators deliver the implants through recruiter personas on LinkedIn and other job platforms, using trojanized coding-challenge archives. Kaspersky found NodeRabbit samples on systems in Afghanistan, Egypt and Ethiopia. PollCat was recovered from a RankChallenge-react assessment archive. The group has historically used C, C++ and Go malware against aviation, aerospace and fintech in the Middle East and Africa. Kaspersky detections: Trojan.JS.MirageKitten.*.
Manifold Security published GitSpawn research on 1 September 2026: several AI coding agents run git (status, diff and similar) to gather repo context at startup, in some products before a workspace-trust prompt or authentication. Those calls did not strip the repository's own git configuration. Git settings that name a helper program (including core.fsmonitor) then run as the developer, outside the agent sandbox, with no approval prompt. Manifold says clone, fetch or pull of a hostile URL does not carry this; the repository has to arrive as files with its .git directory already inside (zip, shared drive, USB). Named products and status at publication: Claude Code core.fsmonitor patched by 2.1.196 (confirmed on 2.1.193; reported 26 June, closed as duplicate); Claude Code ultrareview still unpatched on 2.1.252; Goose patched in 1.44.0 (CVE-2026-72718, maintainers 7.0); Hermes unpatched on 0.21.0 (CVE-2026-71963); Qwen Code unpatched on 0.22.3; Grok Build unpatched on 1.0.13; OpenAI Codex and Cursor patched (reports closed as duplicates). Manifold 1 September update says Codex and Cursor were also affected, reported, and have since been patched. Inspect .git/config before opening a received folder in an agent. This desk does not invent CVSS for the unpatched products. Correction (26 Oct 2026): a reference to the CVE numbering authority for CVE-2026-71963 has been removed. (source: Manifold Security)
