Advisories
Tue 15 Sep
Updated Mon 2 Nov
Joint advisory published 15 September 2026 by the UK NCSC, US FBI, and Netherlands AIVD details Windows malware the FBI calls HEAVYGRAM and NCSC calls CHOSEN BRICK, attributed to Iran's Ministry of Intelligence and Security (MOIS). Operators build rapport on messaging apps, then deliver trojanised installers (lures include Pictory, KeePass, Telegram, RunwayML, Norton, Adobe Flash, and MRI-scan themed files), often starting on work devices before pivoting to personal ones. Malware is controlled via Telegram and can copy emails/chat messages, take screenshots, and activate the microphone; NCSC dates use from at least 2025 against people in the UK, US, Netherlands and elsewhere (FBI dates the wider campaign to autumn 2023). Victim details have appeared on pro-Iranian leak sites, raising personal-safety risk. FBI IC3 CSAs (260915 / 260915-2) expand a March 2026 alert with further TTPs and IoCs. (sources: NCSC advisory; FBI/IC3) Correction (02 Nov 2026): removed The Hacker News as a source. (source: NCSC; FBI IC3)
NCSC — Iranian cyber targeting / CHOSEN BRICK advisory (15 Sep 2026)
tech identity
Advisories
Tue 15 Sep
Updated Mon 2 Nov
Lumen Black Lotus Labs (report titled “The Banana Stand…”) documents BambooToken, a previously under-reported malware family active since at least February 2023, with activity seen through July 2026 against organisations in Asia and South America (mobile apps, legal/financial, software development). Operators abuse DLL sideloading via Tendyron OnKey-related binaries (OnKeyToken_KEB.dll) without evidence the vendor’s code-signing cert/build was compromised; later variants use MQTT brokers (including Cloudflare-routed paths) for C2 plugin load/stop and host control on Windows and, from late 2025, Linux. Initial access vector undetermined. Hunt for unexpected OnKey-related DLL sideloads, MQTT client beacons to unfamiliar brokers, and related IoCs in the Lumen write-up. (source: Lumen Black Lotus Labs) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Lumen)
Lumen Black Lotus Labs — The Banana Stand / BambooToken MQTT C2
tech network
Advisories
Mon 14 Sep
Updated Mon 2 Nov
Elastic Security Labs (report dated 14 September 2026) tracks REF9334 delivering the KREMLIN toolkit against Brazilian banking users since at least May 2025. Infection starts with a manually run JavaScript lure (banking/invoice/document themed), then a multi-stage loader with sandbox evasion, Node.js staging, scheduled-task persistence, and Ethereum smart-contract dead-drop resolvers for C2/payload URLs (domains cited include volmira[.]site and zaviro[.]online). A C++ installer sideloads via a SentinelOne-named binary (SentinelAgentCore.dll). Malicious Chrome/Edge extensions use Phantom Extension / GhostChrome-X style Secure Preferences HMAC/App-Bound hash forgery to steal credentials and session tokens. Elastic notes similarity of the integrity-bypass technique to APT31 BlueMoon/GemStone tradecraft but attributes this cluster to Brazilian banking focus. (source: Elastic Security Labs) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Elastic Security Labs)
Elastic Security Labs — KREMLIN / REF9334 browser-extension banking malware
tech identity
Advisories
Mon 14 Sep
Updated Tue 3 Nov
Researchers from KU Leuven, ETH Zurich, Durham University and Google (ACM CCS 2026) describe DDRop, a small, low-cost active DDR5 memory interposer (about US$159 in parts) that silently drops writes to server memory. Because the memory encryption in Intel TDX, Intel Scalable SGX and AMD SEV-SNP keeps data confidential but does not provide freshness, stale encrypted data is accepted as current. On Intel TDX the researchers used it to remap memory, put a confidential VM into debug mode and forge attestation reports. Intel's announcement says the attack requires physical access to the server, physical installation of a DDR5 interposer and privileged software execution, is not remotely exploitable, and falls outside Intel's standard threat model for confidential computing; Intel is evaluating additional hardening and detection. (sources: DDRop research site; Intel) Correction (02 Nov 2026): removed The Hacker News as a source; removed details no other source gives. (source: DDRop research site; Intel)
DDRop research site (KU Leuven, ETH Zurich, Durham University, Google; ACM CCS 2026)
tech cloud
Advisories
Mon 14 Sep
Updated Sat 31 Oct
UPDATE 14 September 2026 (BleepingComputer): Microsoft released emergency out-of-band updates that fix Remote Desktop Services failures introduced by the September 2026 security cumulatives, plus related Hyper-V Host Compute Service issues on some Windows 11 builds. OOB packages cited: Windows Server 2025 KB5129235, Server 2022 KB5129237, Server 2019 KB5129238; Windows 11 24H2/25H2 KB5129195, Windows 11 26H1 KB5129194; Windows 10 21H2/22H2 KB5129236. Server OOBs via Microsoft Update Catalog; the Windows 11 26H1 OOB also via Windows Update, Windows Update for Business and WSUS. USB audio regressions from September updates are not fully resolved by these OOBs. Earlier state: Microsoft confirmed RDS instability on release health and published Known Issue Rollback Group Policy packages (e.g. Server 2025 KB5122871, Server 2022 KB5122882, Server 2019 KB5122876) while developing the permanent fix. Prefer the matching OOB over long-lived KIR or cumulative rollback. Operational advisory for AU Windows estates — distinct from Patch Tuesday CVE cards. (sources: Microsoft Support KB5129195; BleepingComputer) Correction (31 Oct 2026): the card is now dated 14 September 2026, the date of Microsoft's out-of-band update notice and BleepingComputer's reports, instead of 10 September; replaced the link to Microsoft's Windows release health page, which no longer shows this issue, with Microsoft's KB5129195 notice, and removed a reference to other Windows 10 packages that no linked source gives. (sources: Microsoft Support; BleepingComputer)
BleepingComputer — Microsoft emergency OOB for RDS (14 Sep 2026)
tech
ASD’s ACSC publication Agentic AI Harnesses — The layer above the model (first published 11 September 2026) defines the harness as every component of an agentic system other than the LLM itself (connectors, tool registry, memory, permissions). It complements the May 2026 Five Eyes careful-adoption guidance already on Cyberstack. Core claim: some risks, including prompt injection, cannot be reliably mitigated inside the model alone — ASD states no fully reliable technical mitigation currently exists — so controls belong in the harness and connected systems (least privilege, human approval for high-impact actions, output verification, logging of prompts/tool calls/config changes). Audience: executives, CISOs, IT leaders adopting agentic AI. (sources: ACSC page; iTnews)
ACSC — Agentic AI harnesses: the layer above the model (11 Sep 2026)
ai australia llm agentic
Advisories
Fri 11 Sep
Updated Mon 2 Nov
Socket Threat Research (Kush Pandya, 11 September 2026) documents cross-store browser extension "Twitch Enhanced Viewer | JeetBot" forwarding live Twitch OAuth session tokens to proxies run by a Russian commercial Twitch/Kick/VK-Live bot service. Chrome Web Store ID pnhhdhhcadcjfckjhpmjneldiegbojfb (~30,000 users, published June 2025) and Firefox Add-ons twitchenhancedviewer@example.com (~550–600 users). Current v85.x builds append the token as an &auth= query parameter on redirects toward operator proxies when fetching usher.ttvnw.net playlists (every channel except a hardcoded allowlist of ten mostly Russian-language streamers). Tokens can reach chat, whispers, and account settings and land in cleartext proxy logs. Earlier v4.x builds POSTed tokens to a set-token endpoint. Operator docs later claim Firefox 85.8.7 stops sending tokens to proxies and a Chrome equivalent is under review; users should remove or update the extension and treat Twitch sessions as exposed until credentials are rotated. (source: Socket) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Socket)
Socket — JeetBot Twitch OAuth token forwarding (11 Sep 2026)
tech identity
Advisories
Thu 10 Sep
Updated Mon 2 Nov
Bitdefender research describes abuse of Google Play’s Early Access program: Early Access apps cannot receive public star ratings or reviews, so operators seed deceptive titles (fake reward apps, “ghost casino” slot/puzzle skins, trademark-abusing clones such as a GTA-style title with 1M+ downloads) and drive installs via TikTok/Facebook ads that often use celebrity deepfakes. Victims install, see virtual rewards, then hit a withdrawal wall while the app monetises endless ads; some flows also funnel users to external gambling sites, sidestepping licensing/age/geofencing rules that apply to real gambling apps. (source: Bitdefender) Correction (02 Nov 2026): removed The Hacker News as a source. (source: Bitdefender)
Bitdefender — Google Play Early Access deceptive apps
tech ai
Advisories
Thu 10 Sep
Updated Sat 31 Oct
ITPro (10 September 2026) reports Barracuda research on an email phishing campaign that generates the phishing page directly inside the victim's browser instead of on a phishing website. The attack begins with a DocuSign-themed email with a calendar invite attached that points to a legitimate Microsoft OAuth endpoint; a crafted redirect routes the user to Microsoft Teams, which loads an external resource hosted on cdn.bloom[.]io, and the browser converts this content into a blob URL — a temporary address pointing to content held in local memory — that renders the phishing page locally. The page registers a service worker, part of the workflow runs in a sandboxed iframe, and the workflow receives instructions from backend infrastructure through browser messaging, so operators can change destinations and behaviour in real time. Barracuda warned there is no phishing page to block and no persistent phishing URL for security tools to retrieve, analyse or blocklist in advance. Treat as an advisory on technique, not a named AU incident. (source: ITPro, citing Barracuda) Correction (31 Oct 2026): replaced SecurityWeek, which this desk cannot read, with ITPro as the card's source, removed a detail that only SecurityWeek gave, and moved the card date from 9 to 10 September 2026, the date of ITPro's report. (source: ITPro)
ITPro — Cyber researchers issue warning over 'phishing pages that exist only inside the victim's browser' (10 Sep 2026; Barracuda research)
tech identity cloud
Microsoft Security Blog (9 September 2026) documents active cloud intrusions since May 2026 where callers or SMS messages impersonate internal IT helpdesk on employees’ personal phones, claim a passkey / MFA / SSO config must be updated urgently, and steer victims to adversary-in-the-middle phishing pages or Microsoft device-code authentication flows. Passkey enrollment is usually the lure, not the goal — AiTM captures credentials and session tokens; device-code phishing authorises an attacker-controlled client on legitimate Microsoft pages. Follow-on: actor-enrolled MFA methods, high-volume Microsoft Graph reconnaissance, SharePoint/OneDrive downloads, and Exchange REST collection. Microsoft attributes initial access to Storm-3121 (feeds ShinyHunters / Falcon extortion) and Storm-3032 (Helix / BlackFile splinter) among others. Example lure domains in coverage include passkeyhelpdesk[.]com, secure-passkey[.]com, setupmypasskey[.]com, add-passkey[.]com, integratedsso[.]com, oktasession[.]com, keysyncos[.]com, oskeysync[.]com (often with company-name subdomains). Defenders: phishing-resistant MFA via Conditional Access; block device-code / auth-transfer where unused; correlate unusual sign-ins with new auth-method registrations and Graph/SharePoint anomalies; revoke sessions and remove rogue MFA methods. (sources: Microsoft Security Blog; BleepingComputer)
Microsoft Security Blog — passkey-themed social engineering (9 Sep 2026)
tech identity cloud australia
Zimperium zLabs (9 September 2026) describes Mantax Otax, an Android strain linked to Indonesian operators that combines spyware with ransomware. Samples were distributed as sideloaded APKs on third-party file hosts via phishing and social engineering, outside Google Play. After install it seeks device-admin and Accessibility permissions, pulls C2 from GitHub, and can use Firebase or WebSockets. Spyware capabilities reported include screen recording, browser history, lock-screen PIN theft, contacts, call logs, SMS, local file theft, and covert photos. On older Android versions it encrypts shared-storage files with a victim-specific AES key from C2, deletes originals, appends .enc, replaces images with ransom notices, and opens a full-screen Firebase-hosted chat for payment negotiation. (sources: BleepingComputer; Zimperium blog)
Zimperium zLabs — Mantax Otax
tech identity
Advisories
Wed 9 Sep
Updated Sun 25 Oct
Google's Android Security Bulletin for September 2026 (published 8 September 2026, updated 12 October) says security patch levels of 2026-09-05 or later address all of its issues. Google says the most severe is a critical vulnerability in the System component that could lead to remote code execution with no additional execution privileges needed and no user interaction. The bulletin lists CVE-2026-28662 as a Critical remote code execution flaw in System affecting Android 16, 16-qpr2 and 17. (source: Android Security Bulletin) Correction (25 Oct 2026): the card now leads with Google's bulletin and its own description of the most severe flaw; a total-flaw count, a Wi-Fi description of CVE-2026-28662 and a note on Wear OS, Android XR and Android Automotive OS, which came from a press report we cannot verify, have been removed. (source: Android Security Bulletin, September 2026)
Android Security Bulletin — September 2026
vulnerabilities
