Nieuws, incidenten en SI-ontwikkelingen voor slachtoffers en onderzoekers, op basis van openbare bronnen en binnen wettelijke grenzen. Geen instructies voor inbraak of misbruik.
Dit artikel is machinaal vertaald.
- Cyberaanvallen: responsgidsen per land
Negen landenhandleidingen, lokale taalversies en niet-uitvoerbare BPMN-referentieprocessen.
- Cyberattack response for companies in the United States
Evidence, reports, counsel, insurance and public communications after a cyberattack in the United States.
- Cyberattack response for companies in the United Kingdom
Evidence, reports, counsel, insurance and public communications after a cyberattack in the United Kingdom.
- Cyberattack response for companies in Canada
Evidence, reports, counsel, insurance and public communications after a cyberattack in Canada.
- Cyberattack response for companies in Australia
Evidence, reports, counsel, insurance and public communications after a cyberattack in Australia.
- Cyberattack response for companies in Germany
Evidence, reports, counsel, insurance and public communications after a cyberattack in Germany.
- Cyberattack response for companies in France
Evidence, reports, counsel, insurance and public communications after a cyberattack in France.
- Cyberaanval: stappenplan voor bedrijven in Nederland
Cyberaanval in Nederland: bewijs, meldingen, juridisch advies, verzekering en communicatie voor bedrijven.
- Cyberattack response for companies in Singapore
Evidence, reports, counsel, insurance and public communications after a cyberattack in Singapore.
- Cyberattack response for companies in Japan
Evidence, reports, counsel, insurance and public communications after a cyberattack in Japan.
- Cybersecurity daily — 1 November 2026: MCP migration and corrected extension scope
Smithery's connection-management shutdown date has arrived; Cursor's notice also names 2.1.312. Distinguish planned shutdown, observed operation and verification time.
- Cybersecurity daily — 31 October 2026: extension removal is not incident recovery
Cursor extension follow-up, Wasmtime UDP authorization bypass, and updated AWS Brotli mitigation status. Check host privileges, network authorization and deployed patches.
- Cybersecurity daily — 30 October 2026: verify enforcement beyond configuration
Clerk adds passkeys as a second factor; an older PDF MCP authentication flaw enters the advisory database. Verify enforcement, not just settings and logs.
- Cybersecurity daily — 29 October 2026: verify that Brotli patches are active
AWS details Brotli mitigation: phased Lambda rollout, Node.js 24 verification, container rebuilds and upstream-response decoding.
- Cybersecurity daily — 28 October 2026: separate detection, delegation and runtime authorization
Zuma/Agent Gateway runtime authorization and Socure Agent Intelligence: distinguish release stages and authority boundaries.
- Cybersecurity daily — 27 October 2026: the boundary around agent-managed IAM
Google Cloud introduces IAM Helper. Separate diagnostics and simulation from permission changes, and verify the approval-to-execution boundary.
- Why Faster Cybercrime Intake May Not Reduce Case Backlogs
Public Japanese statistics and an explicit queueing model show why faster intake may shift a bottleneck downstream. Evidence preservation, international assistance, and deterrence require distinct measurements.
- Crypto fraud and theft: Japanese requests for Canadian asset restraint and seizure
For Japanese victims and receiving police officers: RCMP cooperation, formal central-authority requests, evidence and translations, procedural-stage conditions and asset return.
- Prompt injection is not SQL injection: the NCSC design lesson
The NCSC blog says prompt injection is not SQL injection: current large language models do not separate instructions from data, and the risk may never be fully removed the way parameterized queries remove SQL injection (https://www.ncsc.gov.uk/blog-post/prompt-injection-is-not-sql-injection). The NCSC news warns that the comparison is dangerous and challenges claims that the issue can be stopped (https://www.ncsc.gov.uk/news/mistaking-ai-vulnerability-could-lead-to-large-scale-breaches). Design lesson only. Not an attack guide and not legal advice.
- What to tell clients about EU AI Act Article 50 labels
The Commission’s Article 50 page sets provider and deployer duties for interaction notices, machine-readable marking, and deep-fake disclosure (https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50). A law-firm alert says those duties became applicable on 2 August 2026 and were not deferred with high-risk rules (https://www.goodwinlaw.com/en/insights/publications/2026/08/alerts-technology-dpc-eu-ai-act-transparency-obligations-now-in-force). General information, not legal advice.
- Cybersecurity exercises that follow industry workflows
24 industry views, 18 technical surfaces, and eight offline exercises connecting CTF learning to continuity, repair, and recovery.
- AI video, voice impersonation, and authority boundaries
A sourced review of Tavus, reported AI misuse, and the identity, consent, and tool authority boundaries adopters should test.
- System One Coding: composing code through decisions
Typed blocks, staged verification, measured comparisons, and a registered free pilot.
- If your account was taken over: a timeline and an evidence list to make before you consult the police
What to keep before a police consultation after an account takeover. Copy-ready timeline and evidence-list templates. In Japan: how a victim report, a consultation, and the online desk differ.
- After a crypto or investment scam: how to make the remittance table for the police and the exchange
Before another transfer or a recovery pitch, put each payment and the related messages on one sheet and prepare to contact the police and the exchange. In Japan: the police consultation number for people in Japan is #9110. This page does not promise recovery.
- IC3 Complaint Worksheet: What to Gather Before You File (Crypto and Online Fraud)
Prepare every field the FBI's IC3 asks for — losses, transaction hashes, subject details, headers — then file one complete complaint and keep your copy.
- Why an enterprise needs a twin, and how Mithril provides one
Production is the wrong place to learn who can reach a sensitive system, what a refusal looks like, or whether the running cluster matches the one that was declared. A twin keeps those names and does not apply the result. Mithril makes that twin a document: reverse-domain components compose, a run returns the response and the decision, and a cluster is checked against observation without being started.
- No Stolen Key, $351 Million in an Hour — Bitget's Hot-Wallet Breach and the Trust Boundary of the Approval Flow
Bitget confirmed on September 25 that approximately $351.6 million left portions of its hot and warm wallets in unauthorized transfers detected at 18:31 UTC on September 24. Its offline cold wallets are reported unaffected, withdrawals are paused, and the exchange says its $464 million User Protection Fund covers the full loss. Per Bitget, the attacker did not take the private keys but reached a backend system and spoofed transaction data to steer the approval flow into releasing funds. We examine the Lazarus attribution question and the isomorphism with the management-and-identity-plane theme this observatory has covered in recent weeks.
- The Week the Identity Issuer Itself Fell — F5 BIG-IP APM OAuth Zero-Day (CVE-2026-94127) and KEV's Concentration on the Management and Identity Planes
F5 disclosed on September 22 that a critical zero-day in BIG-IP APM's OAuth path (CVE-2026-94127, CVSS 9.8) allows unauthenticated remote code execution, and confirmed in-the-wild exploitation. CISA added it to the KEV catalog the same day with a September 25 federal deadline. Arista VCO and two Check Point management-server flaws also entered KEV that day — we examine the convergence of attacks on boundary appliances' management and identity planes.
- The Week the Road to Local Root Opened All at Once — Linux Kernel LPEs Hit CISA's KEV Catalog as Public Exploits Land
On September 18, CISA added three actively exploited Linux kernel flaws (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to the KEV catalog and Red Hat confirmed public exploit code exists. The same day, working exploits for four kernel LPEs (DirtyAH6, TUNderflow, PPPoEject, DiagSpill) were published under coordinated disclosure. We examine why shared-host privilege escalation is following boundary appliances into the spotlight.
- A Maximum-Severity Auth Bypass Hits the Identity Authority Itself — Cisco ISE CVE-2026-76460 and the Recurring Pattern of Boundary-Appliance Root Compromise
Cisco ISE / ISE-PIC authentication bypass CVE-2026-76460 (CVSS 10.0) is under active exploitation. CISA added it to the KEV catalog on September 16 with a federal remediation deadline of September 19; there is no workaround and iACLs are only a mitigation. We examine the boundary-appliance root-compromise pattern — running in parallel with the Secure Email Gateway zero-day (CVE-2026-76461) disclosed September 14 — and what it means when a compromised appliance's own logs stop being a primary source.
- AI Gateways Become the Attack Surface — LiteLLM's KEV Listing and the Path Through Keys, MCP, and the Cloud
BerriAI LiteLLM's MCP authentication bypass (CVE-2026-59822) has landed in CISA's KEV catalog, and Microsoft reports attackers using LiteLLM gateways to deliver XMRig. Wiz research found roughly 1 in 10 of ~3,000 public instances accepted the default key sk-1234 or ran with no auth. We examine what it means that AI infrastructure is a vault of credentials.
- When the Agent's Body Is Hijacked — One Extension Driving AI Assistants Across Five Products
Forever Security showed that a single ordinary browser extension could drive the built-in AI of five products — Chrome, Comet, Edge, Opera Neon, and Claude. Separately, Mandiant reported an attacker hijacking an AI coding-assistant session and spreading the Shai-Hulud worm across about 100 repositories. We map the trust boundaries of agentic runtimes.
- The Patch-Gap Zero-Day Chain — Chromium-Fixed, Chrome-Unfixed Bugs Shared by Multiple Spy Groups in a Week
Volexity observed the BlueMoon chain — Chrome V8 sandbox read/write, sandbox escape, and Windows ALPC abuse — shared by multiple China-nexus clusters. The upstream Chromium fixes had not yet shipped in stable Chrome, creating a dangerous "patch gap". We unpack the implications.
- VC Brief: SYN Ventures — An Operator-Led Cybersecurity Specialist Fund
A $900M AUM, operator-led fund built by former CISOs and founders. We map its two funds and ~40-company portfolio against mithril.fund's position.
- Cisco Secure Email Gateway Zero-Day CVE-2026-76461 — When Email-Parsing SQL Injection Ends in Root Execution
CVE-2026-76461 (CVSS 9.8) is being actively exploited and was added to CISA's KEV catalog. We break down the recurring "root compromise of a boundary appliance" pattern — and what it means when the appliance's own logs can no longer be trusted.
- Introducing the Security Observatory Blog
Daily observation and analysis of cybersecurity news, incidents and AI-model developments, published here.
- Unauthenticated File Writes Through a Mail Gateway's Back Door — FortiMail Zero-Day CVE-2026-104286 and the IBE Interface
Fortinet disclosed on October 1 a path-traversal zero-day in FortiMail (CVE-2026-104286, CVSS 9.8) that allows unauthenticated arbitrary file writes, with in-the-wild exploitation confirmed. CISA added it to the KEV catalog the same day with a federal deadline of October 4. No patched release exists on any of the four affected branches, so the IBE-disable workaround is the stopgap — we examine it against the late-September KEV surge.
- From scam victims to enterprise white hats: a cybersecurity landscape map (2026)
Thirteen categories, from help for scam victims to enterprise security testing, with reported losses, announced funding, market forecasts by publisher, and an honest status of where Mithril fits.
- SAML-Conditioned Memory Overflow in NetScaler — CVE-2026-88779 Added to KEV (Due October 7)
Citrix disclosed a memory-buffer-bounds flaw in NetScaler ADC / Gateway (CVE-2026-88779, CVSS v4.0 8.7, CWE-119). Citrix says it observed targeted attacks on unmitigated deployments that can lead to denial of service. CISA's KEV listing establishes exploitation of the vulnerability, and its short description says the flaw could allow a denial of service. Neither source confirms that affected deployments were taken down. CISA added it on October 4 with a federal due date of October 7. Together with CVE-2026-88771 and CVE-2026-88772 (both added September 27), it is the third NetScaler KEV entry added within two weeks, not the product's third KEV overall (earlier entries include CVE-2023-4966). Global Deny List signatures (v24 or later) are the interim mitigation, and the fix ships in 14.1-73.41 / 13.1-64.28 or later.
- Unauthenticated API access in Cisco Catalyst SD-WAN Manager — CVE-2026-76504 Added to KEV (Due October 3)
Cisco published CVE-2026-76504 (CVSS 3.1 9.8 per Cisco, CWE-177) in advisory cisco-sa-sdwan-webauth-xr8beuuU: improper URI-encoding handling in the API session-based authentication management of Cisco Catalyst SD-WAN Manager can let an unauthenticated remote attacker reach the API with admin privileges. CISA added it to KEV on September 30, 2026, with a federal due date of October 3. Fixed releases start at 20.9.10.1 / 20.12.8.2 / 20.15.6.1 / 20.18.4.1 / 26.1.2.1 / 26.2.1 (earlier branches migrate). No known workarounds exist; interim mitigation is restricting internet access to trusted hosts, plus the optional Live Protect shield. Cisco has confirmed exploitation in the wild.
- Apple CoreGraphics zero-day added to KEV — CVE-2026-86950, report of exploitation in an extremely sophisticated targeted attack (Due October 2)
On September 28, 2026, Apple released iOS 26.7.1 / iPadOS 26.7.1 / macOS Tahoe 26.7.1 / macOS Sequoia 15.8.1, fixing an out-of-bounds write (CVE-2026-86950, CWE-787) in CoreGraphics. Processing a maliciously crafted file may lead to arbitrary code execution; Apple says it is aware of a report that the issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS versions before iOS 27. CISA added the vulnerability to KEV on September 29, 2026, with a federal due date of October 2 (forensicTriage Yes). The CISA-ADP CVSS 3.1 base is 8.8 (High). The fix is the listed releases only; the primary sources reviewed for this post state no interim workaround.
- Binance: 'No wallet key leaked' - the largest hot-wallet incident on record (10/29) and first observations
From the night of October 29 UTC Binance disclosed a security incident involving unauthorized withdrawals from its hot wallets. Its verified frozen total stood at $2.54B (23:22Z) and then 'around $3 billion' (10/30 00:52Z); it states it will cover all losses and suspended deposits and withdrawals. Its initial investigation 'may involve a compromised DevOps engineer's laptop' through which an attacker reached a service container and submitted unauthorized withdrawal transactions, with no evidence of a wallet private-key leak. Reported stolen amounts range $5.6B-$6.3B with no confirmed total. This article records the first passive observation of 0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5 (named by ZachXBT after the Arbitrum Security Council's ~$30.5M freeze; first tx 10/29 21:29:47Z, 3 EVM txs, 0.0038 ETH) the on-chain verification of the Arbitrum freeze transaction (from = the address itself), and two converging third-party attribution claims (TRM Labs: TraderTraitor; Specter: commingling with the DPRK-attributed Bitget exploit via THORChain).