Latest / Daily DefSec Brief / Cyber Security News for September 10 2026 - Daily DefSec Brief
Transcript
- Jerry: If you run Cisco's firewall manager, Talos is watching three separate groups already inside unpatched instances. This is the daily DevSec brief for Thursday, September 10th, 2026. One, an unauthenticated attacker can reach an alternate path into Cisco's Secure Firewall Management Center and come out as root on the box that manages your firewalls. Talos is tracking three intrusion clusters doing it. The hotfix has been out since July 29th. There's no workaround and the hardening release isn't due until next week, so apply the hotfix instead of waiting. Two, if your net skiller is doing gateway or triple A duty, an unauthenticated attacker can reach an authentication path that skips the checks your configuration thinks it's enforcing. CISA put it on the exploited list yesterday. The fixed builds landed in late August, so the way I see it, the emergency is fixing your patching cadence. Three. Four espionage crews turned up inside two weeks running the same exploit kit, chaining a chrome flaw, a V8 sandbox escape with no CVE at all, and a Windows ALPC bug from last week's Patch Tuesday. Targets are NGOs, US aerospace and government and finance in the Southeast Asia area. Both patches already exist, so confirm they landed, not that you release them. Four. Anyone who can send crafted packets to a Forta OS box can run code on it. And that went back onto the exploited list yesterday too. It reaches back through six Forta OS branches plus Forta Switch Manager and Forta SASE. Five, Microsoft is tracking cloud intrusions that open with passkey themed social engineering and end with the attacker's own authentication methods on the account. After that, it's bulk, graph queries, SharePoint downloads, and mail through the REST API. Alert on new authentication methods appearing on an account. Six. The Shy Halud MPM worm is back in four packages published inside the same hour from one account carrying a payload hash. MPM had already cataloged. It went right through the published time malware scanning anyway. Pull Fissue Doc XMCP BMC I ATNN extract CLI Blue AI CLI and BMC Translate Utils. Rotate any MPM token used in a build since Monday. And install with ignore scripts turned on. Seven, a DocuSign themed mail carries a calendar invite. A link goes through a genuine Microsoft OAuth endpoint, and the fake login page is assembled inside the victim's own browser from a blob URL. There's no page on the server to block. Alert on OAuth redirects pointing anywhere but Microsoft. Eight, info stealers are lifting session tokens and API keys for the model providers alongside passwords. And those tokens replay so the second factor never applies. Treat a stealer hit as a reason to revoke AI provider sessions and rotate those keys. 9. Fortinet left something sensitive in its Ford a monitor on-site portal source enough to forge a token and walk in. A second flaw lets a malicious site proxy traffic through the privileged access agent extension. Fixes are out for both. ten. Android September update fixed one hundred and eighty flaws after two empty bulletins. The worst being a remote code execution in the system component with no user interaction. Push the September patch level and check play system updates are landing. Eleven. So in a lot of enterprise AI pipelines, the identity that triggers a workflow and the permissions it runs with are different things. A request through a support inbox or a GitHub issue can execute with the pipeline's own privileges. Make the workflow run as the requester. Twelve. Deep Seeks agent harness ran commands inside an OS sandbox and the agent could call the hardness's own web interface to step outside of it. No approval prompt. That's now fixed. Check whether anything else you run hands an agent, a control interface it that it can reach. thirteen scans for Proxmox on port eight thousand six are up, along with brute force on the root account a week after a flaw in version seven was discovered. Get port eight thousand six behind a VPN. Fourteen, someone lifted a vendor's credentials for an API at RAN on Veradim's customers behalf and copied patient records including social security numbers. Watch out which vendors hold a credential into you. Fifteen. Machine identities were the way into about a third of intrusions. Against roughly half that for social engineering. By the way, there seems to be a lot of overconfidence in the ability to detect and monitor for these. So I recommend that you add expiry dates to your machine identities. 16. A dental practice had three admin accounts on his patient database. And one belonged to a contractor who set it up himself and kept it after leaving. I think you know what happens next. Audit the admin list on anything that a third party touched. 17. From tomorrow, putting a product with digital elements on the EU market means 24 hours to notify authorities of a serious product security incident. Decide today who files that when it happens. 18. Trezor customers got a security warning from help at Trezor.io saying a chip flaw could expose their wallet seeds. Came from the real address because somebody had broken into the company's email provider. So list who is allowed to send mail as your domain and breach at any of them lands in your customers' inboxes wearing your name. If you only do one thing today, apply those Cisco secure FMC hotfixes. That's being used actively to get root. Thanks for watching. Sources are in the show notes. Like, subscribe and share with the show with a friend. I'll be back tomorrow.