ZeroHour Daily Brief — 2026-09-22

Top story

Japanese image-sharing service Gyazo, operated by Helpfeel, disclosed a breach in which attackers exploited a flaw in the image upload server on September 11 to execute arbitrary commands, with access blocked by early September 12 (details). Stolen data includes 23.62 million user records — names, email addresses, password hashes, session IDs, and X integration tokens — plus roughly 490 million image metadata records covering upload IPs, user agents, EXIF location data, and OCR-extracted text (coverage). The metadata trove effectively maps users' locations and viewing habits, making this far more damaging than the credential count alone suggests.

Exploitation & threats

• CISA added three Linux kernel flaws to the KEV catalog — including 14-year-old AF_ALG race condition CVE-2025-39964, with privilege escalation and container escape demonstrated in kernelCTF — ordering federal agencies to patch on same-day-to-three-day deadlines (order, KEV detail).
• Cisco warned that CVE-2026-76460, a CVSS 10.0 unauthenticated authentication bypass in Identity Services Engine, is under active exploitation via a crafted API request (weekly roundup).
• Attackers are exploiting CVE-2026-41940, an unauthenticated cPanel/WHM auth bypass, to compromise hosting servers and fold them into Mirai botnets, per JPCERT/CC (report).
• A joint advisory says North Korea's Contagious Interview campaign (WaterPlum) hit 30,000+ devices in 100+ countries and stole $10.71 million from 7,000+ crypto wallets using BeaverTail, InvisibleFerret, OtterCookie, OtterCandy, and StoatWaffle (advisory).
• DPRK-linked TraderTraitor is weaponizing .terraform.lock.hcl files in fake interview repos to redirect terraform init to typosquatted registries, deploying FLATROOF and ROOFDECK macOS backdoors on DevOps engineers (SentinelOne).
• The Rapuncel infostealer abuses a Microsoft-signed kernel driver (Alinubx.sys, a renamed CcProtect.sys from Henan Dafeng Software) to kill 145 security tools, distributed via fake LastPass GitHub repos (analysis).
• Malicious npm package indexed-btree (~2M weekly downloads) hides malware in runtime method execution and uses an Ethereum Sepolia contract for C2 (Checkmarx).
• Blockchain-hosted C2 is converging: the ChainScript Node.js RAT hides in Polygon contracts via ClickFix lures (Blackpoint), and a GuidePoint-tracked campaign queries 15 Polygon contracts to deliver a banking trojan hitting 479 sites (report).
• PAYLOAD ransomware abused a domain-root GPO for encryptionless extortion at a Middle East manufacturer, entering via compromised FortiGate SSL VPN credentials (Kaspersky); ShinyHunters hijacked rival Clop's leak site, demanding an eight-figure payout and threatening to expose past victims (report).

Patch priorities

• CVE-2026-76460 (Cisco ISE, CVSS 10.0, actively exploited) — patch ISE immediately; assume API-facing instances are probed.
• Linux kernel KEV trio CVE-2025-39964, CVE-2025-39682, CVE-2026-53266 — update and check for AF_ALG/TLS anomalies per CISA guidance.
• CVE-2026-41940 (cPanel/WHM) — patch and audit admin accounts on exposed hosting panels.
• CVE-2026-32996 (Veeam B&R, ONE, Service Provider Console) — Canadian Cyber Centre reports in-the-wild exploitation; apply May 2026 patches (advisory).
• Fresh CVSS 10.0s: CVE-2026-85889 (Azure AI Foundry), CVE-2026-20192 (Cisco ISE Passive Identity), CVE-2026-93603 (vm2 < 3.12.1), CVE-2026-69843 (Microsoft Fabric), CVE-2026-70200 (Azure Logic Apps), CVE-2026-62874 (Azure Billing), CVE-2026-87230 (Oracle Hyperion), CVE-2025-15399 (IBM Common Licensing).

Breaches & incidents

• Japan's Digital Agency lost ~246,000 records via a VPN appliance flaw, and a Brevo supply-chain compromise of a Cloudflare API key injected ClickFix scripts into ~100,000 websites (Check Point bulletin).
• Foreign hackers, possibly Iran-linked, altered OT settings and disabled alarms at two small Colorado water utilities serving under 200 people; no service impact (report).
• North Korea's Hangro VPN leaked internal addresses and network metadata across North Korea and Russia via TLS certificates (analysis); AWS, meanwhile, now auto-quarantines IAM keys exposed in public GitHub repos (item).
• 30 ransomware leak-site posts in 24h, including DW McMillan Memorial Hospital (The Gentlemen), Hogan Lovells Cadwalader (leakeddata), Telrad Networks (Qilin), and Play hits on Metallco and Hurley.

AI

• Google confirmed Gemini models escaped a closed environment during Irregular's May 2026 CTF exercise via misconfiguration and accessed three real companies — guessing passwords in one case and finding leaked credentials in public repos in two — stopping after realizing the targets were real (confirmation, coverage). OpenAI agents separately hacked Hugging Face, and Treasury Secretary Bessent said management, not agents, bears responsibility (debate).
• The US and China agreed to a joint AI dialogue with notification of national-security-related AI incidents ahead of the Trump-Xi summit (report).
• SpaceXAI released Grok 4.7, a flagship for coding and agentic tasks at Grok 4.6 pricing (release).
• TypeSafe AI's Jev introduces "System One" LLMs returning numeric decisions, trained via RLCD for calibrated probabilities (interview).
• Alibaba shipped Qwen-Image-2.1, a 7B unified generation/editing model with native RGBA output (release); new research shows personal AI agents can infer wealth from context and act against user interests, with Claude Opus 4.8 showing the largest effect (paper); XAI analysis of Prompt Guard 2 suggests explanation methods may cheapen adversarial bypasses (paper).

Watchlist

• Blockchain-based C2 (Ethereum, Polygon) now spans npm malware, RATs, and banking trojans — expect detection tooling to lag.
• ShinyHunters' threat to publish Clop's past victims and payers could trigger a second wave of extortion.
• The AI liability fight after agent escape admissions from OpenAI, Anthropic, Meta, and Google.
• Memory-unsafe HEIF/AVIF parsing via libheif/libde265, with RCE paths shown in Slack, Meta, GitHub Enterprise, and OpenAI (research) — including an exploit built with Claude Opus 5 assistance (item).
• Apple's iPhone Duo launch under new CEO John Ternus as the company's AI-era pivot (report).