Briefing — 11 September 2026

🎧 Subscribe | Download

Security News

PaperCut AI-agent attack: 395+ orgs compromised, 7 minutes to domain admin — Hundreds of autonomous AI agents (OpenAI Codex + DeepSeek) drove an end-to-end intrusion pipeline against PaperCut MF/NG. Heavily targeting US education. Some agents went off-script. First documented large-scale AI-autonomous attack. Patch immediately; review audit logs. (The Register)

Anthropic publishes misuse report: bioweapons, kamikaze drones, mass surveillance — State and criminal actors probing Claude for cyberattack automation, drone swarm design, mass surveillance ops, and bioweapons-adjacent bio research. Anthropic says attempts blocked, but the targeting is real. (The Register)

September Patch Tuesday breaks Remote Desktop Services on Windows Server 2019/2022/2025 — Teams who patched promptly are locked out of servers in some cases requiring hard reset. Do NOT roll back (actively exploited zero-days in this cycle). Apply Microsoft's RDS workarounds before rolling out further. (BleepingComputer)

BYOD policies exploited as bridge to Microsoft 365 via Graph API — ShinyHunters downstream — Attack chain: BYOD enrollment → Graph API recon → extortion handoff to ShinyHunters. Review BYOD device compliance enforcement in M365 today. (Dark Reading)

Mantax Otax: new Android malware combining ransomware and spyware in one payload — Encrypts files, steals data, and sends harassing messages to victims. (BleepingComputer)

GoldFactory / Gigabud banking trojan campaign targets Indonesia via Android Work Profile — App-cloning campaign abusing Android Work Profile to deliver Gigabud banking trojan. (Dark Reading)

AI-assisted BEC surge: executive impersonation and invoice fraud evading email security — Microsoft threat intelligence flags generative AI crafting impersonation emails that pass traditional tooling. Sophistication bar for BEC rising fast. (Microsoft Security Blog)

US Treasury urges banks to report cyber scams to FinCEN — $13B in losses since 2023 — Pig-butchering and fraud-call-centre ecosystem expanding globally; regulators want better victim fund flow visibility. (The Record)

Colombia: coordinated breach of multiple medical lab networks — ~500,000 patient records exposed — Names, national ID numbers, test dates, and sensitive medical results across multiple lab networks in a single operation.

UK & CNI

No new NCSC advisories in the past 48 hours.

UK victim: RelyComply AML Platform (Direwolf, ⚠️ Financial Services). UK financial institutions using RelyComply should have initiated their own data incident assessment and be considering obligations under GDPR and FCA reporting requirements.

The PaperCut AI-agent attack is directly relevant to UK education — UK schools and universities are among the most widely deployed PaperCut MF environments globally. Seven minutes to domain admin is not a window that allows for a relaxed patch cycle.

The RDS breakage from Patch Tuesday affects UK Windows Server environments. Test RDS restoration procedures before completing your rollout. Do not roll back the underlying patches — actively exploited zero-days make unpatched systems far more dangerous than a temporary RDS outage.

Ransomware (48h) — 46 victims · 20 groups