TLDR INFORMATION SECURITY 2026-09-30

how Gateway Load Balancer and FORTIGATE NEXT-GENERATION FIREWALL

consolidate it all into a single dashboard. SEE HOW THE DEPLOYMENT WORKS: * GATEWAY LOAD BALANCER INTEGRATION: Route traffic to a FortiGate security VPC for unified inspection * UNIFIED SECURITY PROFILES: Configure routing tables and shared policies across cloud and on-premises * REAL-TIME DETECTION AND RESPONSE: Monitor threats and take action from a single FortiGate dashboard

GET THE TECHNICAL ARTICLE →

PENTAGON PERSONNEL AGENCY DATA BREACH IMPACTS 3 MILLION PEOPLE

The Defense Manpower Data Center exposed unencrypted personal data through a vulnerable file-sharing server. Unauthorized users accessed files between October 2025 and July 16, 2026. Records included Social Security numbers, names, birth dates, contact details, demographic data, and military specialties. The breach affects 2.76 million living people and 294,000 deceased individuals.

OFFICIAL MCP PYTHON SDK FLAW CAN LET MALICIOUS SERVERS STEAL OAUTH CREDENTIALS

A high-severity flaw in the official MCP Python SDK let malicious MCP servers redirect OAuth token requests to attacker-controlled endpoints. Affected 1.x (1.9.1–1.29.1) and 2.x (2.0.0–2.1.1) clients sent the client secret, authorization code, and PKCE proof key to the attacker, enabling full account takeover with the app's granted permissions. Fixes are in 1.30.0 and 2.2.0. ClientCredentialsOAuthProvider and PrivateKeyJWTOAuthProvider also require passing issuer= to pin the expected login service.

AUTOMATED AI AGENT USED TO BREAD CYBERSECURITY NONPROFIT DIVD

The Dutch Institute for Vulnerability Defense (DIVD) reported that they suffered an AI-driven breach. The organization said that the breach was “loud and very, very messy” with the agent working autonomously and over explaining itself in comments, allowing the DIVD to easily reverse-engineer its attack. The threat actor exploited a vulnerability in a vulnerability in an undisclosed software that the organization stated was not Citrix NetScaler.

ATTACKERS ABUSE CHATGPT CUSTOM GPTS TO DELIVER RAT VIA CLICKFIX

Sponsored Google results led victims to "Plus 5.6," a Custom GPT on chatgpt.com that answered every prompt with a fake outage notice pointing to a Google Sites ClickFix lure, and Huntress tied at least 40 incidents to the campaign. The eight-stage chain sideloaded malicious DLLs through Canon-signed (later Stardock-signed) binaries, hid its loader inside a WAV file and a NuGet package. It then unpacked a full-featured RAT from a custom encrypted file system that located its C2 over DNS-over-HTTPS. The signed hosts change with each wave, so defenders should detect behaviors instead: PowerShell spawning msiexec on GUID-named MSIs in %TEMP%, signed apps running from fake %LOCALAPPDATA%\Programs folders, and self-restoring Run key and scheduled task pairs, which require killing the process before removing persistence.

NEEDYMANTIS: UNPACKING A POST-COMPROMISE MALWARE FAMILY USED IN TARGETED OPERATIONS

NeedyMantis is a modular post-compromise malware family deployed since at least October 2025 by China-based actors, including Storm-3069 from the DAEMON Tools supply chain compromise, against telecoms, universities, intergovernmental organizations, and government contractors. It was sideloaded as fake DLLs alongside legitimate software like Poedit, curl, Vim, and TightVNC, then unpacked from custom XOR-encrypted archives through shellcode loaders into a stripped-down PE format, and communicated over WebSockets with RC4-encrypted traffic and loadable modules. Defenders should hunt for spoofed DLLs such as WinSparkle.dll or libcurl.dll in unusual ProgramData paths, the hard-coded "firefox/21.0" user agent, and connections to corp.tripswithengine[.]com.

AI AGENTS ARE PRIVILEGED USERS; WHO IS AUDITING THEIR ACCESS?

Enterprises monitor human logins closely but often grant autonomous AI agents broad production access via long-lived service accounts and API tokens. These agents can initiate, approve, and execute high-value actions end-to-end, collapsing segregation of duties. The piece lays out six controls: isolate agent identities, scope permissions to the minimum needed, assign a business owner, log prompts and tool calls, run periodic access reviews, and build an out-of-band kill switch.

[Join the Tailscale PAM beta waitlist]

RIG SECURITY (PRODUCT LAUNCH)

Rig Security provides an identity protection platform for agentic AI. It maps identity dependencies across providers, cloud, on-prem, network edges, and endpoints. A lightweight sensor distinguishes AI agent sessions from human sessions and enforces policy at runtime, and the system blocks risky agent actions without disabling the human account.

MALICIOUS DRIVERS (WEB APP)

A searchable list of tracked, signed, and abused kernel drivers.

CRYPTOPTIC

cryptoptic is a tool that uses CodeQL, orchestrated via GitHub Actions, to scan a repository or entire GitHub organization and produce an inventory of every cryptographic function in use, the library it comes from, and when it gets called.

24-YEAR-OLD ARRESTED IN DUTCH INVESTIGATION INTO SHINYHUNTERS

Dutch police arrested a 24-year-old Amsterdam man, identified by multiple sources as Pepijn van der Stap (aka “Umbreon”), in connection with the ShinyHunters hacking group. He previously served time for extorting over a dozen companies, earning €1.5–2.7 million, and was released in December while still facing civil suits.

FBI REPORTEDLY DECLARES ‘CYBER SECURITY INCIDENT' AFTER HACKERS STEAL AGENTS' PERSONAL DATA

The FBI told staff that a hack of its FBIJobs.gov portal exposed agents' and applicants' names, addresses, job titles, Social Security numbers, and some medical records, including blood and urine samples and psychiatric reports. ShinyHunters says it exploited an Oracle PeopleSoft vulnerability and is not demanding money, but wants the bureau to correct an earlier report about its activities. The portal remains offline, and the bureau has not publicly confirmed whether the breach meets the legal threshold for a “major incident” requiring notification to Congress.

OPENAI SCRAPS ROLLOUT OF NEW AI MODEL OVER SAFETY CONCERNS

OpenAI will not release GPT-6.1 Astra after tests found problems with scope, authorisation, and reporting completed work.

JADEPUFFER CRIMS HIJACKED AZURE IDENTITIES AND USED THEM TO BLOW UP CLOUD RESOURCES

Microsoft linked Storm-3168, the actor behind JadePuffer (the first documented agentic ransomware), to an 18-hour June attack in which two hijacked Azure service principals were used for reconnaissance and then destruction, likely after an employee exposed client secrets in a public GitHub issue.