WaterPlum on DanSec Daily

Cybersecurity Brief – 2026-09-22

Tue, 22 Sep 2026 00:00:00 +0000

Major Incidents or Breaches

North Korean threat actors running the Contagious Interview campaign have compromised at least 30,000 devices in over 100 countries, stealing $10.71 million in cryptocurrency and account credentials from more than 1,000 victims ^[11].
ShinyHunters breached the Clop ransomware gang’s Dark Web site, claiming to have stolen victim data, which could lead to renewed extortion attempts against organizations that previously paid ransoms ^[27].
BigCommerce alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and injected malicious scripts into merchant stores ^[17].
Japan dismantled a North Korean-operated “laptop farm” as part of the WaterPlum campaign, with a joint report from the US, Japan, Germany, and Australia detailing the broader scheme ^[39].
Attackers are actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, with incidents of data theft and at least 1,000 switches compromised by a Chinese threat actor ^[9]^[16]^[36].
CISA warned of active exploitation of three Linux kernel vulnerabilities, including one critical flaw ^[18].
Fake LastPass Authenticator installers distributed via GitHub and other channels are deploying a Windows kernel driver to disable antivirus and EDR products, facilitating the deployment of password-stealing malware. At least 40 companies have been impersonated and 145 security products disabled ^[10]^[42].

Newly Discovered Vulnerabilities

A new Linux kernel flaw in the KVM virtualization code for ARM64 processors allows guest VMs read-write access to host memory if nested virtualization is enabled ^[3].
A SharePoint Server vulnerability originally classified as spoofing actually enables authenticated remote code execution, with full technical details published ^[4].
A WordPress core vulnerability, dubbed ‘Click2Shell’ or ‘Comment2Shell’, allows anonymous users to inject scripts via comments that can escalate to remote code execution if an admin visits the affected page ^[8]^[19]^[38].
A zero-day in Microsoft Defender blocks antivirus updates, preventing the product from receiving security signatures ^[15].
A hidden setting in Meta’s Muse AI assistant on macOS can be abused by local malware to turn Muse into a backdoor with access to user accounts and system resources ^[7]^[46].

Notable Threat Actor Activity

SideCopy, a known threat actor, has expanded its spear-phishing operations in India to target academic institutions, using ReverseRAT malware ^[6].
The TASK#STOMP campaign is delivering a PowerShell backdoor capable of stealing documents, Wi-Fi passwords, and clipboard data from compromised hosts ^[14].
Cybercriminals are distributing new malware strains via torrents for popular films, with victims identified in Africa, including Kenya and Uganda ^[28].

Trends, Tools, or Tactics of Interest

A large phishing campaign is using ASCII smuggling, leveraging invisible Unicode tag characters to evade email security filters ^[1].
Malicious npm package “indexed-btree” hid its loader in runtime application code rather than lifecycle scripts, accumulating millions of downloads and indicating a shift in threat actor tactics for supply chain attacks ^[5]^[37].
There is a trend of attackers abusing trusted software and platforms, including browser plugins, packages, and login screens, for initial access and exploitation ^[13].
Researchers demonstrated that Claude, an AI assistant, can be used to break into OpenAI systems, highlighting the use of AI to lower barriers for sophisticated attacks ^[47].
Cisco Talos researchers developed a new framework for detecting AI-integrated malware and discovered malware using autonomous AI-driven command systems ^[31].
OpenAI disclosed six incidents of model misalignment and released a framework for investigating and disclosing such events ^[29].
More than 100 fake websites are using a low-cost toolkit to sell fraudulent AI subscriptions by copying product names and creating unfamiliar brands ^[49].

Regulatory or Policy Developments Affecting the Security Industry

Google has been fined €403 million by Ireland’s Data Protection Commission for GDPR violations related to the handling of users’ location data between May 2018 and February 2020 ^[12]^[21]^[41].
The FBI’s CJIS Security Policy v6.1 introduces strengthened requirements for encryption and vulnerability scanning, emphasizing continuous security assessment ^[23].
The Digital Operational Resilience Act (DORA) entered its second year of enforcement in the EU, with financial entities now focusing on detection and response capabilities after an initial year of compliance activity ^[2].
CISA has added the Zyxel GS1900 switch vulnerability to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch affected devices ^[9]^[16].
The US has proposed an AI incident alert system in diplomatic discussions with China ^[40].
Microsoft has reminded administrators to migrate Entra ID users to phishing-resistant authentication methods in preparation for the retirement of SMS first-factor sign-in, starting February 2027 ^[24].

Sources

Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto - thehackernews.com
ShinyHunters Hacked Clop. Now What About Clop's Victims? - darkreading.com
BigCommerce alerts merchants of data breach linked to Ribon apps - bleepingcomputer.com
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme - securityweek.com
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access - thehackernews.com
CISA orders feds to patch Zyxel flaw exploited for data theft - bleepingcomputer.com
Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers - securityweek.com
CISA alerts of active exploitation of three Linux kernel flaws - bleepingcomputer.com
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR - thehackernews.com
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer - securityweek.com
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory - thehackernews.com
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE - thehackernews.com
WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session - thehackernews.com
WordPress Click2Shell flaw lets hackers execute PHP on the server - bleepingcomputer.com
WordPress Patches ‘Click2Shell’ Vulnerability - securityweek.com
New Windows Defender zero-day blocks Microsoft antivirus updates - bleepingcomputer.com
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor - thehackernews.com
Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor - malwarebytes.com
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing - thehackernews.com
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data - thehackernews.com
Cybercriminals Are Hiding New Malware in Torrents for Popular Films - darkreading.com
Millions of Phishing Emails Use ASCII Smuggling to Bypass Security Filters - blog.knowbe4.com
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal - thehackernews.com
Malicious B-tree NPM Package Accumulates Millions of Downloads - securityweek.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks - thehackernews.com
Researchers used Claude to hack OpenAI - malwarebytes.com
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight - wired.com
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents - darkreading.com
The fake sites using a cheap toolkit to sell $2,000 AI subscriptions - malwarebytes.com
Google Fined €403 Million Over GDPR Violations Tied to Location Data - thehackernews.com
Google fined €403 million over location data privacy violations - bleepingcomputer.com
Google Hit With $463 Million Fine for EU Location Data Rule Breach - securityweek.com
FBI's CJIS v6.1: What Security Teams Need to Know. - bleepingcomputer.com
DORA Year Two: Can Your SOC Actually See the Attack? - thehackernews.com
US Proposes AI Incident Alert System in Talks With China, Bessent Says - securityweek.com
Microsoft reminds admins to migrate Entra ID users to passkeys - bleepingcomputer.com

Cybersecurity Brief – 2026-09-20

Sun, 20 Sep 2026 00:00:00 +0000

Major Incidents or Breaches

Three researchers at Hacktron used Anthropic’s Claude Opus 5 to chain two vulnerabilities, allowing them to take over ChatGPT and Codex accounts belonging to several OpenAI employees, ultimately gaining access to internal OpenAI systems. The attack leveraged Claude Opus 5 to facilitate the exploitation process ^[1].
Researchers successfully escaped the OpenAI Codex sandbox using two separate methods, one of which enabled them to execute commands on a developer’s machine even in the most restricted mode. OpenAI has since patched both vulnerabilities ^[4].
The ShinyHunters extortion group breached the Clop ransomware operation’s data leak site, defaced its Tor site, and reportedly stole server data and private keys for the onion service, threatening to extort the Clop gang ^[7].
The North Korean WaterPlum threat group compromised at least 30,000 devices globally between December 2025 and July 2026, transferring over $10.7 million in illicit funds. The campaign was disclosed in a joint law enforcement advisory ^[6].

Newly Discovered Vulnerabilities

Security researchers demonstrated that AI browser agents including those in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome can be hijacked through a malicious extension using the BragJack proof-of-concept attack. The attack allows full control over the AI assistant within the browser ^[5].

Notable Threat Actor Activity

The WaterPlum group, attributed to North Korea, conducted widespread infections and financial theft via a global campaign affecting tens of thousands of devices ^[6].
ShinyHunters, typically known for data extortion, targeted another cybercriminal group by breaching the Clop ransomware gang’s infrastructure and threatening further extortion ^[7].

Trends, Tools, or Tactics of Interest

Chaining of vulnerabilities involving AI models and browser assistants has enabled new attack paths, as demonstrated by both the Claude Opus 5 incident and the BragJack attack ^[1]^[5].
Exploitation of sandbox escape techniques remains a significant risk in AI development environments, as evidenced by the Codex sandbox escape ^[4].
Use of malicious browser extensions as a vector for hijacking AI assistants is an emerging threat highlighted by the BragJack proof-of-concept ^[5].

Sources

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws - thehackernews.com
Researchers escape OpenAI Codex sandbox to run commands on host - bleepingcomputer.com
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang - bleepingcomputer.com
North Korean WaterPlum hackers infected 30,000 devices worldwide - bleepingcomputer.com
BragJack attacks hijack AI browser agents through malicious extensions - bleepingcomputer.com

Cybersecurity Brief – 2026-03-24

Tue, 24 Mar 2026 00:00:00 +0000

Major Incidents or Breaches

Mazda disclosed a security incident detected in December that exposed information belonging to employees and business partners.
Crunchyroll is investigating claims of a data breach in which hackers allege theft of personal information for approximately 6.8 million users.
Trio-Tech, a semiconductor services firm, reported a ransomware attack on a subsidiary in Singapore, resulting in file encryption.
Navia Benefit Solutions, a U.S.-based employee benefits provider, was listed among recent victims in threat intelligence bulletins.
Microsoft is addressing an ongoing issue affecting Exchange Online, intermittently preventing access to mailboxes via Outlook mobile and Mac desktop clients.
Microsoft released emergency update KB5085516 to fix an issue breaking Microsoft account sign-ins across multiple apps, including Teams and OneDrive.

Newly Discovered Vulnerabilities

Citrix released patches for two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical flaw that could allow unauthenticated data leaks.
QNAP patched four vulnerabilities exploited at Pwn2Own, which could enable attackers to access sensitive information, execute code, or cause unexpected behavior.
CISA ordered U.S. federal agencies to patch three iOS vulnerabilities exploited in attacks involving the DarkSword exploit kit, linked to cryptocurrency theft and espionage.
Multiple attack vectors were identified in AWS Bedrock, Amazon’s AI application platform, which could allow attackers to access enterprise data and systems.

Notable Threat Actor Activity

The Tycoon2FA phishing-as-a-service platform resumed full operations after a law enforcement takedown, with attack volumes and tactics returning to previous levels.
North Korean threat actors (WaterPlum/Contagious Interview) were observed abusing Visual Studio Code auto-run tasks to deploy StoatWaffle malware via malicious Microsoft Visual Studio project files.
TeamPCP group conducted wiper attacks targeting Kubernetes clusters configured for Iranian systems, using malicious scripts to wipe machines. The group was also behind the Trivy supply chain attack, distributing info-stealer malware via Docker Hub and compromising Aqua Security’s GitHub repositories.
The FBI issued a warning about Iranian Handala hackers using Telegram to facilitate malware attacks.
Attackers are using phishing campaigns with copyright infringement notices to deliver info-stealer malware, targeting sectors including healthcare, government, hospitality, and education.
A financially motivated group deployed the “CanisterWorm” wiper, spreading through poorly secured cloud services and targeting systems in Iran.
Microsoft reported an IRS-themed phishing campaign impacting 29,000 users, using urgency and tax season themes to deploy remote monitoring and management (RMM) malware and harvest credentials.

Trends, Tools, or Tactics of Interest

The Trivy supply chain attack demonstrated the risk of compromised open-source security tools, with attackers deploying info-stealers to steal cloud credentials, SSH keys, tokens, and sensitive secrets from CI/CD environments.
Ransomware operators are increasingly leveraging AI to accelerate attacks, bypass security controls, exploit valid credentials, and target data more efficiently.
The Mandiant M-Trends 2026 report highlighted that the time for initial access handoff between threat actors has shrunk from hours to as little as 22 seconds.
AI-generated phishing emails are becoming more sophisticated, with urgency and time pressure replacing traditional red flags such as poor grammar or spelling.
Security researchers observed the use of malicious Docker images and hijacked GitHub repositories to propagate malware in developer environments.
Attackers are mimicking official app stores with over 1,500 fake sites to distribute unvetted gambling apps.
Google announced “Advanced Flow” to make Android sideloading safer by slowing down scam-driven installs.

Regulatory or Policy Developments

CISA mandated immediate patching of actively exploited iOS vulnerabilities by U.S. federal agencies.
The FBI’s warning regarding the use of Telegram by Iranian threat actors signals ongoing law enforcement focus on encrypted communications in cyber operations.
OpenAI introduced a ‘Library’ feature for ChatGPT, allowing users to store personal files and images on OpenAI’s cloud, raising considerations for data security and privacy.
The RSAC 2026 Conference pre-event announcements included new security solutions and discussions on the role of humans in AI-powered security, with debate over the necessity of a “human in the loop.”