Skip to main content

Am I a Target? Daily Cyber Brief MONADNOCK CYBER • Thursday, September 17, 2026

 Am I a Target?

Daily Cyber Brief
MONADNOCK CYBER  •  Thursday, September 17, 2026  •  Honest broker · no FUD

What happened in cyber in the last 24 hours — verified, graded, and stripped of hype. Confirmed facts and unverified claims are labeled throughout.

Featured · AI in the kill chain
● Verified

An AI agent ran a breach by itself — and a regulator now has the paperwork

The AI-in-the-attack-chain story crossed two lines yesterday. First, a milestone: Spain’s data-protection agency (AEPD) logged the first breach it has received that the reporting organization attributes to an autonomous AI agent[1]. Per that notification, the agent — running on a well-known large language model — chained the phases itself: logged in, hunted for a vulnerability, then reached and modified personal data and read invoices, largely without a human steering each step. AEPD has cautioned the account comes from the affected organization’s own report and requires further analysis.

THE AGENT RAN THE CHAIN · SPAIN AEPD, FIRST REGULATOR-LOGGED CASEThe org says an AI agent ran the chain itself — little human steering01Login02Find flaw03Access data04Modify / readATT&CK: Initial Access → Discovery → Collection → Impact — executed by the agent, not a human operatorOrg and AI model not publicly identified; details unverified beyond the AEPD notification.

Second, a concrete incident: an attacker hijacked a developer’s active AI coding-assistant session[2] at a SaaS provider (in Mandiant’s September report). The assistant then recommended attacker-poisoned software; once the developer accepted it, the attacker used the live session to install an infostealer via a poisoned PyPI package, stole GitHub OAuth tokens, and spread the Shai-Hulud worm across about 100 internal repositories[3], stealing secrets and source. The AI tool wasn’t the target — it was the delivery mechanism.

Why it matters, honestly. These aren’t “AI could someday” think-pieces — one is a filed regulatory notification, the other a named vendor’s incident report. The through-line: the model, or the agent, now does the attacker’s work at a phase in the chain. Two caveats we won’t bury: the Spanish case’s org and AI model are not named, so its technical specifics are unverified beyond the notification itself, and “autonomous” is the reporter’s characterization.

● Act now

A perfect-10 in Cisco ISE, and a Pixel modem flaw tied to spyware

CISA added three actively-exploited flaws to its Known Exploited Vulnerabilities catalog[4] on September 16:

Cisco Identity Services Engine — CVE-2026-76460 CVSS 10.0
An authentication bypass from the “incorrect use of privileged APIs”: an unauthenticated remote attacker sends a crafted request to a vulnerable API and can gain root-level command execution. Actively exploited.[5]

Google Pixel — CVE-2026-58704
A cellular-modem authorization flaw allowing privilege escalation, exploited in the wild and linked to spyware tradecraft[6]. Federal patch deadline: September 19.

Acronis Backup — CVE-2026-87886
Incorrect default permissions — also added to KEV the same day.

If you run Cisco ISE, patch today. A CVSS 10.0 auth bypass on your identity plane is as bad as the score says — and it sits alongside last week’s still-hot ScreenConnect, MikroTik, NetScaler and Cisco FMC flaws.

● Our collection · claims

Leak-site tempo: 55 in 48 hours, and a national military named

Our collection logged 55 organizations added to ransomware leak sites in 48 hours — about 201 over the past week, with the United States the most-listed country. The crews driving it: TheGentlemen (30 this week), Qilin (21), and AuditTeam (18). Among the fresh listings is the Namibian Defence Force, claimed by the RansomHouse crew — a national military on an extortion site. As always, these are unverified leak-site claims[7], tracked as they post, not confirmed breaches.

● Verified · public record

The regulatory record stays quiet

The most recent verified SEC Item 1.05 material-cybersecurity 8-K we’ve found remains Boston Scientific’s September 8 filing[8]. Worth a precise note: Nutex Health filed a follow-up on its ransomware incident on September 11, but under Item 8.01[9], not a fresh Item 1.05.

● Also moving

On the wire

European Commission President Ursula von der Leyen, in her State of the Union address, warned that advanced AI could enable hacking “at unprecedented scale” and signaled tighter social-media rules — the policy side catching up to the featured story above.

And a skeptic’s note worth keeping: reporting this week flagged that AI-security spending is jumping faster than the proof it works. Fear sells; buy on evidence, not on the acronym.

Bottom line

Do today: patch Cisco ISE (CVSS 10.0), and Pixel if you carry one. The featured shift is real and now documented: AI ran the attacker’s work — an agent that breached on its own (first to a regulator), and a worm that rode a hijacked AI coding assistant. Stay disciplined on the caveats: the Spanish case is unnamed and unverified beyond the filing. And on the regulatory record, Boston Scientific’s Sept 8 filing remains the most recent verified Item 1.05 we’ve found.

✓ Verified before publication. Cross-checked by a three-model fact-check panel and given a final domain proof by a local cybersecurity model. Confirmed facts and unverified claims are labeled throughout.
Sources & references
[1] Spain's data-protection agency (AEPD) logged the first breach it has received that the reporting organization attributes to an autonomous AI agent — https://www.securityweek.com/first-agentic-ai-data-breach-reported-to-spanish-regulator/
[2] hijacked a developer's active AI coding-assistant session — https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html
[3] Shai-Hulud worm across about 100 internal repositories — https://socket.dev/blog/sandworm-mode-npm-worm-ai-toolchain-poisoning
[4] Known Exploited Vulnerabilities catalog — https://www.cisa.gov/known-exploited-vulnerabilities-catalog
[5] Actively exploited. — https://securityaffairs.com/199239/security/u-s-cisa-adds-acronis-backup-cisco-ise-and-google-pixel-flaws-to-its-known-exploited-vulnerabilities-catalog.html
[6] exploited in the wild and linked to spyware tradecraft — https://www.techtimes.com/articles/327642/20260917/google-patches-actively-exploited-pixel-modem-flaw-linked-spyware-tradecraft.htm
[7] unverified leak-site claims — https://www.ransomware.live/
[8] Boston Scientific's September 8 filing — https://www.sec.gov/Archives/edgar/data/885725/000088572526000059/0000885725-26-000059-index.htm
[9] Item 8.01 — https://www.sec.gov/Archives/edgar/data/1479681/000162828026061432/0001628280-26-061432-index.htm

Comments

Post a Comment

Popular posts from this blog

Am I a Target? Daily Cyber Brief MONADNOCK CYBER • Monday, September 21, 2026

Am I a Target ? Daily Cyber Brief MONADNOCK CYBER  •  Monday, September 21, 2026  •  At the intersection of AI and Security What happened in cyber in the last 24 hours — verified, graded, and stripped of hype. Confirmed facts and unverified claims are labeled throughout. ● Foreign desk · raw & unevaluated China Desk: what Beijing is saying about cyber today New this week: we’re pulling foreign-language coverage into collection. This is a first, unfiltered look — machine-translated, not yet source-graded, and it includes Chinese state media. Read it as raw signal, not a finished assessment. China is running its annual National Cyber Security Awareness Week (launched September 14, nationwide). This year’s theme centers on the “intelligent era” — AI security (“智能时代 网安护航”). Coverage across state and commercial outlets (China.com.cn [1] , Guangming, Baidu) carries these themes: AI at machine speed. A widely-run piece frames it as the “attack-and-defense battle” of ...
Post a Comment
Read more

Above the Fold What foreign press tells its own public · a Monadnock Cyber summary

  Above the Fold What foreign press tells its own public · a Monadnock Cyber summary 26 September 2026 · ATF-2026-09-26 · TLP:CLEAR Most foreign-cyber reporting is written for the domestic reader. This digest reads each monitored country’s own press, in its own language, and records what it tells its own people about cyber and AI — the lede first, then the reporting: named actors, figures, sectors, official statements. Framing is the source’s; state media is identified as such; a country’s silence is itself recorded. All items are filed and cross-indexed for correlation. Global Cyber Weather Report · 26 September 2026 OUTLOOK Expect increased volatility driven by AI-enabled attacks and persistent state-sponsored activity. CONDITIONS NOW Ransomware activity remains high with 235 incidents in the last seven days. Clop, thegentlemen, and qilin are the most prolific crews. A cross-cutting signal indicates AI is integrated into attacks, specifically for autonomous skimming of payment ca...
Post a Comment
Read more

Above the Fold | What foreign press tells its own public | A Monadnock Cyber summary 24 September 2026 ·

  Above the Fold What foreign press tells its own public · a Monadnock Cyber summary 24 September 2026 · ATF-2026-09-24 Most foreign-cyber reporting is written for the domestic reader. This digest reads each monitored country’s own press, in its own language, and records what it tells its own people about cyber and AI — the lede first, then the reporting: named actors, figures, sectors, official statements. Framing is the source’s; state media is identified as such; a country’s silence is itself recorded. All items are filed and cross-indexed for correlation. In this issue 01   Iran   From data theft to sabotage: Iran's banks under service-disruption attacks 02   Russia   Under siege, wearing an AI mask: NightEagle and AI-crawler disguise 03   China   National Cyber Security Week: AI Safety Governance Framework 3.0 04   European Union   Cutting the cord: Europe moves to wean its governments off US clouds 05   Brazil   Braz...
Post a Comment
Read more