TLDR INFORMATION SECURITY 2026-09-03

REPORT →

BGP HIJACK INFECTING NETWORKS CAUSED BY A COMEDY OF ERRORS THAT'S NOT FUNNY AT ALL

Attackers hijacked Softaculous' 162.55.80.0/24 prefix and redirected Virtualizor update traffic to malicious servers. Hetzner's RPKI settings accepted /24 routes, while a forged AS path matched its ROA, so the attackers also obtained TLS certificates during the diversion. Virtualizor did not cryptographically verify update packages, and Softaculous cannot identify every affected server and urges customers to investigate.

MALICIOUS APACHE MODULES HIJACK BRAZILIAN GOVERNMENT SITE TRAFFIC TO PUSH BETTING PAGES

Gambling Goblin installed malicious Apache modules on Brazilian government and education servers. The modules reverse-proxy visitors to fake Google Play, Microsoft Store, and Amazon pages promoting betting sites. Operators deployed DownPro, AlphaAgent, oRAT, 3snake, SSH brute-forcing, and reconnaissance tools. Administrators lack published module hashes, filenames, or paths for direct Apache checks.

UNITREE G1 HUMANOID ROBOT FLAWS ALLOW UNAUTHENTICATED ROOT RCE OVER BLUETOOTH

A security researcher discovered two independent flaws in Unitree G1 humanoid robots that could enable RCE on the devices. The first vulnerability allows an attacker within BLE range to obtain an AES-128 key without requiring the device to pair. The researcher found that the Unitree cloud API would decrypt the key without verifying ownership or serial numbers, allowing the researcher to access protected BLE operations, eventually allowing the attacker to exploit a buffer overflow to achieve RCE. The second path involves a path-traversal vulnerability in the robot's AI service, which enables an attacker to upload a file to the bashrunner's whitelist directory, enabling RCE.

SHAI-HULUD: WHOEVER CONTROLS YOUR PACKAGE REGISTRY CONTROLS YOUR PIPELINE

The npm worm lineage has evolved to a point where standard supply chain provenance mechanisms can no longer guarantee safety. During the August 2026 ChainDrop campaign, threat actors compromised over 400 packages in under four hours by hijacking a maintainer's legitimate signed release pipeline. The attackers utilized authorized infrastructure, so every poisoned package version successfully carried a perfectly valid SLSA attestation. To further evade traditional domain blocklists, the campaign hosted its command and control operations within an Ethereum smart contract. This attack builds upon the previous Shai-Hulud worms, which have recently pivoted to targeting authentication tokens for AI development tools like Claude, Codex, Cursor, and Gemini. Security researchers warn that these identical mechanics could easily compromise infrastructure-as-code pipelines, proving that current attestation models verify origin rather than actual code legitimacy. To defend against these pipeline hijackings, organizations must enforce strict version pinning, utilize curated registries, implement OIDC-scoped credentials, and apply aggressive network egress restrictions.

FINANCIALLY MOTIVATED THREAT ACTOR BREEZE COMET TARGETS BRAZIL

Since 2024, BREEZE COMET has targeted Brazilian banks, payment firms, retailers, exchanges, and fintech providers to make fraudulent Pix, STR, and Boleto transfers. Initial access included password spraying, fake IT-support calls, booby-trapped tax files, exposed JBoss servers, and rogue devices on retail networks. The group steals mTLS credentials, API keys, CI/CD secrets, and cloud tokens, then moves through SMB and RDP. Its toolkit includes REALBREEZE, COBALTSPIN, LIGHTPAINT, MILDFROST, KICKPLATE, and BOATBEAM. Mandiant recorded two transaction waves within 24-48 hours after access to core financial applications.

CLAUDE-BUGHUNTER

Claude-BugHunter packages 83 auto-loading Claude Code skills distilled from 681 disclosed HackerOne reports, so the agent loads per-class detection patterns, payload tables, and chain templates by topic rather than by name.

DEVELOPING ENTERPRISE FRONTIER SAFEGUARDS WITH OUR CUSTOMERS

Anthropic will roll out Enterprise Frontier Safeguards in phases this fall. Customer activity logs can remain in customer-controlled AWS, Azure, or Google Cloud storage, using customer-managed keys and access policies. Automated systems inspect rolling traffic windows for offensive cyber capability, biological misuse, and stolen credentials. Flags go to customer teams. Anthropic staff does not review them.

PATH TO ASTRA: CRITICAL CAPABILITIES AND FRONTIER SAFEGUARDS

OpenAI classifies Astra as Critical for cybersecurity capability. Tests found zero-days, browser sandbox escapes, and root privilege-escalation chains. OpenAI delayed release work after the Hugging Face incident. Astra refused 91.5% of cyber-jailbreak requests, versus 59% for GPT-5.6 Sol. Advanced cyber access starts with selected testers, then Daybreak Blue.

CROWDSTRIKE 2026 THREAT HUNTING REPORT: EXPLOITATION WINDOW CLOSES AS AI USE ACCELERATES

CrowdStrike reports that 88% of observed vulnerabilities were actively exploited within 48 hours of a public proof-of-concept release between January and June. Advanced threat groups like VAULT PANDA and GENESIS PANDA weaponized flaws in under 24 hours, while UMBRAL BISON targeted Linux privilege escalation vulnerability CVE-2026-31431 roughly 20 hours after disclosure. The report also highlights a rapid shift in alternative attack vectors, noting a fifteenfold increase in device code phishing alongside a massive concentration of software registry threats targeting npm.

FBI PROBES SERVICE SELLING 153M+ DRIVERS LICENSES

A dark web service named Nexus recently advertised over 153 million scanned US and Canadian driver's licenses alongside millions of other identification documents on a Russian cybercrime forum. By correlating GMT timestamps embedded in the leaked image filenames with real-world travel records, researchers traced the infrared and ultraviolet scans back to a potential breach at the identity verification vendor idscan.net. Following the discovery of this continuous exfiltration campaign affecting major corporate clients, the FBI opened an official inquiry, and the Nexus site immediately went offline.

CRITICAL LANGFLOW VULNERABILITY EXPLOITED AS ATTACKS ON AI PLATFORM RISE

CVE-2026-0768, a 9.8-severity remote-code-execution flaw in Langflow, is under active exploitation.

23-YEAR-OLD SALITY P2P BOTNET DISRUPTED

An international operation disrupted the Sality P2P botnet after 23 years.