Socket Threat Research (Kush Pandya, 11 September 2026; The Hacker News 14 September) documents cross-store browser extension "Twitch Enhanced Viewer | JeetBot" forwarding live Twitch OAuth session tokens to proxies run by a Russian commercial Twitch/Kick/VK-Live bot service. Chrome Web Store ID pnhhdhhcadcjfckjhpmjneldiegbojfb (~30,000 users, published June 2025) and Firefox Add-ons twitchenhancedviewer@example.com (~550–600 users). Current v85.x builds append the token as an &auth= query parameter on redirects toward operator proxies when fetching usher.ttvnw.net playlists (every channel except a hardcoded allowlist of ten mostly Russian-language streamers). Tokens can reach chat, whispers, and account settings and land in cleartext proxy logs. Earlier v4.x builds POSTed tokens to a set-token endpoint. Operator docs later claim Firefox 85.8.7 stops sending tokens to proxies and a Chrome equivalent is under review; users should remove or update the extension and treat Twitch sessions as exposed until credentials are rotated. (source: Socket)
According to the CVE records published on 10 September 2026 UTC (11 September, 12:24 am Perth; HackerOne CNA), WebPros Plesk has two critical Backup Manager flaws. CVE-2026-68487 is a path traversal (CWE-36) in Plesk's Backup Manager that lets an authenticated customer write arbitrary files as root. CVE-2026-68488 is a time-of-check time-of-use (TOCTOU) race condition leading to insecure symlink following, which allows local privilege escalation to root through arbitrary file or directory ownership takeover. The records rate both CVSS 3.0 9.9 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) and list Plesk 18.0.80.6 and earlier and 18.0.79.10 and earlier as affected; CISA's enrichment of the records lists no known exploitation. Plesk's own security articles, linked here, return 403 to Cyberstack. (source: CVE records) Correction (27 Oct 2026): removed details that came only from Plesk's articles and Cyber Security News, neither readable to Cyberstack: the Linux-only scope and the line that Plesk for Windows is not affected, the unsigned-backup-header and subscription-restore mechanics, the fixed versions 18.0.80.7 and 18.0.79.11, the no-interim-mitigation line and the shared-hosting priority note; the Cyber Security News link is removed. The card date has moved from 10 to 11 September 2026, the Perth date of the CVE records (10 September, 16:24 UTC; 11 September, 12:24 am Perth (AWST)). (source: CVE.org)
Anthropic’s September 2026 Threat Intelligence report (activity December 2025–August 2026) case GTG-50014 covers ShinyHunters-affiliate smash-and-grab operators. One French-speaking operator (aliases MeowSHA / frkoo / blazespider) ran a Claude-accelerated credential pipeline across ten AWS EC2 workers that mass-downloaded 1.8 million distinct Android APKs from multiple app-store sources, decompiled them, and scanned for hardcoded secrets with TruffleHog, routing verified findings to a Telegram group with over 100 source types. A parallel GitHub organisation-email harvester fed stolen GitHub Personal Access Tokens. Anthropic says those two pipelines supplied initial-access credentials for the bulk of confirmed breaches tied to frkoo. Same case cluster includes a carding storefront at policenationale[.]cc / autoshop, Azure AD token theft via AI agents, and SaaS secondary victim data theft. Anthropic disrupted the misuse. (sources: Anthropic; BleepingComputer) Correction (29 Oct 2026): removed an unverified count of Azure AD token sets, Microsoft tenants and hours. (source: Anthropic)
Anthropic — Detecting and countering misuse of AI (Sep 2026 TI)
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) confirmed a DAVID driver-database breach; according to BleepingComputer, the confirmation came after the ShinyHunters extortion group claimed it had breached the database. In a statement posted to X, FLHSMV said it learned of the breach on 4 September 2026, that it was quickly mitigated, and that no further breach is ongoing. Investigation found attackers used compromised credentials of a single Plant City Police Department user that had been improperly stored on the employee’s personal electronic device. FLHSMV notified the Florida Office of the Attorney General and is working with the Florida Digital Service and Florida Department of Law Enforcement; further detail withheld pending the criminal investigation. FLHSMV has not disclosed how many records were accessed. According to BleepingComputer, FLHSMV's finding that a single user's stolen credentials were used differs from how ShinyHunters claimed to have got in. No Australian nexus identified. (sources: FLHSMV X statement; BleepingComputer) Updated 16 Oct 2026: FLHSMV issued a public notice saying its investigation with the Florida Digital Service and the Florida Department of Law Enforcement found the potentially affected information includes driver licence and motor vehicle data, including document images, and other personal information. It is mailing letters this week to current driver licence and ID card holders who may be affected, offering one year of identity and credit monitoring plus $1 million identity-theft insurance through Sontiq, a TransUnion company. Because it may not have current addresses for former licence, ID or title holders, it also issued a substitute notice under Florida's breach law (s. 501.171) and asks them to contact the department if no letter arrives. FLHSMV still has not said how many people are affected and says it has no evidence the data has been misused. Correction (25 Oct 2026): removed the extortion group's own claims about how many records it took, how it got in and the screenshot it offered as proof; FLHSMV has not confirmed any of them. (source: BleepingComputer) Correction (27 Oct 2026): the card date has moved from 8 to 11 September 2026, the earliest date its linked sources visibly show (BleepingComputer's report and FLHSMV's statement on X, both 11 September). (source: BleepingComputer)
FLHSMV — Public Notice Regarding September Security Incident (16 Oct 2026)
Anthropic’s September 2026 Threat Intelligence report (Detecting and countering misuse of AI; activity December 2025–August 2026) details a northern Yemen weapons-development cell running three programs: a guided rocket using a commodity phone-class flight computer with final-phase homing; a multi-stage ballistic missile with a stated range goal above 2,000 km; and a multi-variant “R2000” set including a hypersonic glide vehicle variant. Actors used Claude Code in place of human software engineers for guidance, navigation and control (GNC) — integrating open-source autopilot onto phone-class flight computers, writing control/position-estimation software, tuning settings, running firmware builds and simulations — and ran multiple Claude instances in parallel roles (code, research, review). Safeguards blocked many requests; actors hid goals/products and split work across sessions. Anthropic does not have evidence they fielded an operational device, but they did test-fire a guided rocket that appears to have failed (they returned to Claude within hours to diagnose). Accounts banned; threat info shared with partners. Actors had already built an offline simulation toolkit that does not rely on Claude or MATLAB. Anthropic tracks the cell as GTG-87001. (source: Anthropic TI) Correction (30 Oct 2026): removed a statement that only SecurityWeek, which this desk cannot read, gave, so the card now rests on Anthropic's report; the card date also moved from 11 to 10 September 2026, the date Anthropic's Threat Intelligence page gives the September 2026 report, and the card now gives the report's tracking name for the cell. (source: Anthropic)
Anthropic — Detecting and countering misuse of AI (Sep 2026 TI)
Anthropic’s September 2026 Threat Intelligence report (activity disrupted December 2025–August 2026) details case study GTG-20006, which Anthropic assesses as consistent with public reporting on Russian state-nexus Midnight Blizzard. Operators used Claude-driven workflows to develop, stage, and operate tooling; when monitoring agents saw malware flagged by security products, other agents autonomously modified and rebuilt it until detections were evaded, then staged the toolkit from disposable hosts. Anthropic says more than 20 organisations were in the actor’s planning/recon/live ops set (Ukrainian and European government, defence, diplomatic, think-tank and defence-industrial targets, with some Middle East and Asia reach). Observed theft includes mailboxes from at least two drone-component manufacturers and a full proprietary drone-vision SDK (architecture, BOM, suppliers). Separately the actor compromised at least three hospitality vendors’ hotel guest Wi-Fi admin paths, DNS-hijacked guest traffic (Microsoft CaptiveCrunch), and used headless-browser WhatsApp companion linking to export conversations. Anthropic disrupted the misuse and shared intelligence with partners. (source: Anthropic TI report) Correction (30 Oct 2026): removed a SecurityWeek link and credit, because this desk cannot read SecurityWeek; every fact on this card is in Anthropic's own report. (source: Anthropic) Correction (30 Oct 2026): the card was dated 11 September; Anthropic's Threat Intelligence page dates the September 2026 report 10 September, and the card now uses that date. (source: Anthropic)
Anthropic — Detecting and countering misuse of AI (Sep 2026 TI)
Trezor's blog (10 September 2026) says that on 9 September 2026 Brevo, the third-party marketing platform Trezor uses for newsletter campaigns, suffered a security incident affecting 120 Brevo accounts, and an unauthorised actor used Brevo's system to send emails from various customer accounts, including Trezor's. Trezor says the incident affected its opt-in newsletter database of roughly 347,000 email addresses, that no other Trezor system was touched, and that it suspended the Brevo account. The phishing email, subject “Critical Security Alert: STM32 Entropy Vulnerability”, contained a link that prompted users to download an app asking for their wallet backup. Trezor says it took the domain down at the DNS level within 20 minutes, limiting access to 2,500 people who had clicked before the takedown, and contacted all 347,000 recipients. According to BleepingComputer (11 September 2026), the fake alerts came from help@trezor.io and claimed that a “hardware microcontroller vulnerability” in the STM32 microcontrollers used in Trezor wallets could expose seeds to brute-force cracking. Trezor's advice: anyone who entered a wallet backup through such a link should immediately move their funds to a new wallet; Trezor will never ask for a wallet backup. This is a different incident from Brevo's 14 September Cloudflare Worker ClickFix compromise (separate card). (source: Trezor blog) Updated 17 Sep 2026: Trezor's post now says Brevo confirmed that 347,149 marketing email contacts were exported from Trezor's list through the API during the incident. (source: Trezor blog, trezor.io) Correction (25 Oct 2026): the card date has moved from 11 to 10 September 2026, the date of Trezor's blog post, which gives a date but no time; BleepingComputer's report is dated 11 September. (source: Trezor blog, trezor.io) Correction (28 Oct 2026): removed a US Eastern and Perth time given for BleepingComputer's report, which shows its time with no time zone; the card date stays 10 September. (source: BleepingComputer)
Trezor blog — Security incident at Brevo, our third-party email provider (10 Sep 2026; updated 17 Sep 2026)
SpyCloud (published 10 September 2026) reverse-engineers Remus, a Windows information stealer that appeared on underground markets around March 2026. Collection: data from 21 browsers and 16 cold wallets, an unusually broad set of Mozilla extensions including 2FA tools, plus recent builds that steal AI credential folders used by Anthropic, OpenAI and other providers (API tokens and LLM usage history). Delivery commonly via ClickFix fake-CAPTCHA lures (email, malvertising, compromised sites) that persuade the victim to run a command. Evasion: OLLVM-style string/arithmetic obfuscation overlapping LummaC2 tooling lineage; pre-run syscall-hook sweep that removes EDR hooks; ChaCha20-encrypted C2 table; Outlook .pst honey@pot.com sandbox check. No CVE.
SpyCloud — Remus: A New Infostealer Hunting Wallets, Passwords, and AI Credentials (10 Sep 2026)
The Australian registered charity Way Forward, which supports people in financial hardship, has disclosed that its payment systems have been suspended following a third-party cyber incident, Cyber Daily reported on 10 September 2026. “We have become aware of a cyber incident relating to an external provider we use for our customer management platform,” the charity said in a 9 September statement. (source: Cyber Daily) Correction (31 Oct 2026): removed material from the login-only part of Cyber Daily's report and a time taken from page metadata; the card now carries only what the readable part states. (source: Cyber Daily)
ABC News (10 September 2026) reports a Downing Centre Local Court hearing for Christopher John Duff, 40, who has pleaded not guilty to four counts of accessing restricted data held in a computer. NSW Department of Communities and Justice discovered a breach of the NSW Online Registry (court-user login portal) in March 2025; police say cybercrime detectives investigated alleged unauthorised access to 8,769 restricted documents between January and March 2025 (AVOs, details of minors, and other DCJ forms). Prosecutors allege Duff used ChatGPT to create Python scraper-style scripts for bulk download, then sought legal advice and “coaching” from ChatGPT after his registry login was shut down and before charge — and intend to rely on ChatGPT conversation records plus forensic testimony in what is described as among the first such Australian cases. Hearing stalled on volume (~10,000+ pages of proposed exhibits). Charged April 2025 after a search warrant in Sydney’s east; on bail. Allegations unproven. (sources: ABC; ACS Information Age)
Anthropic’s September 2026 Threat Intelligence report (Detecting and countering misuse of AI; activity December 2025–August 2026) case GTG-30005 covers an Iran-nexus threat actor that used Claude to collect and analyse publicly accessible data to develop targeting recommendations against US naval forces in the Middle East. Anthropic says the actor built a Claude-assisted Python pipeline to compile targeting handbooks: US personnel rosters scraped from captions on public military photographs; publicly accessible ship and aircraft transponder identifiers; commercial satellite-imagery query scripts; and an inventory of public sites exposing US naval movements. The same case directed Claude at vulnerability research on shipboard systems (known CVEs in maritime VSAT terminals, Cisco communications equipment, and industrial control products). Anthropic disrupted the activity, banned associated accounts, and shared threat info with partners. Press coverage (TWZ / WSJ) notes the dual-use account also touched domestic surveillance tooling in the same report cluster; this card is the naval-targeting case only. (source: Anthropic TI) Correction (31 Oct 2026): the card date has moved from 11 to 10 September 2026, the date Anthropic's Threat Intelligence page gives the September 2026 report. (source: Anthropic)
Anthropic — Detecting and countering misuse of AI (Sep 2026 TI)
GitLab Critical Patch Release (10 September 2026) ships CE/EE 19.3.2, 19.2.6 and 19.1.8. CVE-2026-85706 is a Critical path traversal in the repository commits API (improper path confinement plus missing authentication enforcement) that can let an unauthenticated requester read arbitrary files from the GitLab server under certain conditions. GitLab CVSS 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). Impacted: CE/EE from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2. Reported via HackerOne by s3ntago. Same release also fixes CVE-2026-87719 (EE GraphQL subscription serializer insecure deserialization; authenticated Duo Chat user; CVSS 9.9) plus further High issues. GitLab.com is patched; Dedicated customers need no action; self-managed must upgrade immediately. NEW 11 September 2026: watchTowr reports in-the-wild probes for CVE-2026-85706 within a day of disclosure (POST /api/v4/projects/{id}/repository/commits/ with file.path). Hunt those log lines. (sources: GitLab; watchTowr) UPDATE 11 September 2026: CISA added CVE-2026-85706 to KEV (dateAdded 2026-09-11; catalogVersion 2026.09.11). Self-managed instances that have not taken 19.3.2 / 19.2.6 / 19.1.8 should treat this as actively exploited and patch immediately. Correction (29 Oct 2026): removed SecurityWeek and BleepingComputer credits that were not linked, internal source labels and a duplicate GitLab link. (sources: GitLab; watchTowr)
