Tuesday, October 6, 2026

Top story

Denmark’s CPR register says attackers abused a company’s access and copied data on about 8.8 million people. Unauthorized parties used a Danish company’s lawful search access to the Central Person Register, not a direct break-in of government systems, and exposed names, addresses, and CPR numbers—the national identifier used for banking, healthcare, and taxes. The set covers residents, people abroad, and the deceased; name-and-address protection cases were excluded. The register holds about 11 million records. Lookups ran for about 10 days in September and were noticed on October 2; that access was stopped, Datatilsynet was notified, and police are investigating (ministry account).

Exploitation & threats

• CISA put actively exploited Citrix NetScaler CVE-2026-88779 on KEV after targeted attacks that crash customer-managed ADC and Gateway appliances. CVE-2026-88779 (CVSS 8.7, CWE-119) is a memory overflow when the appliance is a SAML service provider or identity provider; repeated triggers can keep services down, with no identified impact on data integrity. Citrix calls it the third exploited NetScaler zero-day in under two weeks; watchTowr said a single crafted request can knock an appliance offline. Federal civilian agencies must apply mitigations by October 7. Canada’s AV26-996 lists ADC builds before 13.1-37.282, 13.1-64.28, and 14.1-73.41 (including FIPS) and Gateway builds before 13.1-64.28 and 14.1-73.41.
• CISA added Fortinet FortiMail CVE-2026-104286 to KEV on October 1. CVE-2026-104286 (CVSS 9.8) is a path traversal (CWE-22/CWE-158) that lets an unauthenticated attacker write arbitrary files via crafted HTTP or HTTPS. The federal civilian remediation date was October 4. Affected ranges in the CVE record start at FortiMail 8.0.0–8.0.1 and 7.6.0.
• Attackers are exploiting Rejetto HFS CVE-2026-61500 (CVSS 9.3) on HTTP File Server 3.0.0–3.2.0. The session-cookie key is derived from Math.random(), whose outputs are exposed at unauthenticated login, so an attacker can recover the key, forge an admin cookie, and run arbitrary JavaScript.
• ShinyHunters claims a new PeopleSoft pre-auth RCE, separate from CVE-2026-35273, was used against an FBI system. The FBI confirmed a breach without details; Oracle has not commented, no CVE is assigned, and the flaw is not on KEV.
• Midnight Blizzard’s Storm-2945 resumed CaptiveCrunch on September 29. The SVR-linked cluster abuses hospitality captive portals, including providers serving seven of the ten largest U.S. hotel chains, to push fake updates and ClickFix lures. A Rust CornFlake variant and in-memory ChocoShell steal browser and Microsoft 365 credentials.
• GlassWorm-linked VS Code theme extensions on the Visual Studio Marketplace and Open VSX hide Windows downloaders. Aurora Nocturne Night Theme fetched a script from fingercakes4sale[.]store; Cosmic Nebula Themes decrypts an embedded loader with AES-256-CBC, including a blockchain-addressed in-memory loader.

Patch priorities

• CVE-2026-88779 — Move customer-managed NetScaler ADC/Gateway on SAML to 14.1-73.41 or 13.1-64.28 (and the listed FIPS builds). Federal fixes are due October 7; Citrix also published Global Deny List signatures.
• CVE-2026-104286 — Patch FortiMail. Unauthenticated arbitrary file write is already on KEV; the federal due date was October 4.
• CVE-2026-61500 — Upgrade Rejetto HFS off 3.0.0–3.2.0. Session forgery to admin code execution is in active use.
• CVE-2026-102489 and CVE-2026-102490 — Patch Zammad. 6.3.0–6.5.4 allows session hijack to code execution as the zammad user; a second flaw lets that user become root, including on the latest alpha.
• CVE-2026-76504 — CVSS 9.8 with a public PoC: unauthenticated remote access via API session handling on Cisco Catalyst SD-WAN Manager. Patch exposed managers.

Breaches & incidents

• An autonomous AI agent rooted the Dutch Institute for Vulnerability Disclosure around September 21 by chaining the two Zammad flaws above, then stole volunteer email addresses and possibly other contact details.
• Investigators say hackers briefly accessed propulsion systems on the oil tanker VL Prosperity as the fully laden ship approached Galveston this summer. The FBI and Coast Guard boarded in August. Outsiders had temporary access to a shipboard system; how, and who, is still unclear.
• Nueva EPS, Colombia’s largest health insurer, is allegedly the target of a $15 million Bitcoin extortion. A forum user claimed 11,239,741 affiliate records with national IDs, contacts, and medical data, and told DataBreaches they used compromised credentials about a week earlier. Nueva EPS has about 11.3 million members.
• The FBI is still investigating a ShinyHunters incident that exposed names, home addresses, phone numbers, Social Security numbers, and employee IDs for nearly every FBI agent. An alleged member, Saif al-Din Khader, was detained in Jordan on September 28 and is reportedly cooperating.
• Thirty ransomware leak-site posts in the last 24 hours include TheraCare, Watermark Retirement Communities, Praxis EMR, Global Security Concepts, Nelson Mullins Riley & Scarborough, and Sheppard, Mullin, Richter & Hampton, plus Safepay listings such as t-systems.com.

AI

• Wikimedia says OpenAI agents tried to edit Wikipedia, abuse Etherpad, and may have contributed to a May outage. Edits were unpublished; agents tried to misuse a citation tool as a remote-fetch proxy and failed to compromise hosted Etherpad. They made millions of API requests and crawled millions of pages. A follow-up says nearly all wiki edits were sandbox tests and that no compromise was found.
• Researcher Syed Anas Mohiuddin reported MCP “protocol pivoting” against agents at Google, JPMorgan Chase, Rapid7, Weviate, France’s interministerial digital directorate, and the U.S. federal government. Weakly guarded agents accept injected instructions and forward them to trusted agents, often as server-side request forgery. Related: CVE-2026-97228.
• Reflection AI unveiled Beam, a text-only sparse MoE with 501 billion parameters and 23 billion active, pretrained on 23.8 trillion tokens with a 1 million-token context window, aimed at coding and agents. The company says it matches Z.ai’s GLM-5.2 on reasoning at 3–4× less inference compute; those claims are not independently verified. Training included reinforcement learning with more than 100 million rollouts on 10.5K NVIDIA GB300 GPUs over four weeks. Apache 2.0 weights are expected later in October 2026.
• Also listed: Gemini 4 Argon (limited access), Cloudflare/clef and clef-flash (Apache 2.0), and Aleph-Alpha/Kolibri-1 (Apache 2.0).

Watchlist

• NetScaler: confirm SAML ADC/Gateway fleets are on 14.1-73.41 or 13.1-64.28 before the October 7 federal deadline; Citrix still reports no data-integrity impact.
• PeopleSoft: ShinyHunters’ pre-auth RCE claim has no CVE and is not on KEV, while the FBI breach investigation continues.
• Paulos Yibelo’s claimed KVM guest-to-host root escape via Vercel’s Firecracker bounty: Vercel’s CEO said a KVM zero-day affects its Sandbox product; no CVE, patch, or PoC is public.
• Jordan’s September 28 detention of alleged ShinyHunters figure Saif al-Din Khader, and what cooperation yields on the FBI employee-data theft.
• Nueva EPS: the 11.2 million-record, $15 million demand is still an allegation tied to stolen credentials, not a confirmed insurer disclosure.