Briefing — 14 September 2026

🎧 Subscribe to the podcast feed

Security News

Chess.com Leak Exposes 7.3M Users, Evidence Points to Scraping (Security Affairs) — 7.3 million Chess.com user accounts have surfaced online; investigation points to a large-scale scraping operation rather than a direct breach of Chess.com systems.

220 Million Traveller Records Exposed in Vietnam-Linked APIS Leak (Slashdot) — An Advance Passenger Information System breach linked to Vietnam has exposed 220 million traveller records including names, passport data, and flight histories — one of the largest travel-sector exposures recorded.

Plesk Backup Manager Vulnerability Allows Low-Privileged Users to Gain Root Access (CyberSecurityNews) — A critical privilege escalation flaw in Plesk's Backup Manager allows low-privileged users to achieve root — patch immediately if running Plesk in production.

Critical Dell ObjectScale Vulnerabilities Could Allow Remote System Compromise (CyberSecurityNews) — Multiple critical vulnerabilities in Dell's ObjectScale enterprise storage platform could enable remote system compromise; ObjectScale is widely deployed in hybrid cloud environments.

Alleged Sale of SonicWall Brute Force Source Code and Scanner (Threat Feed) — Source code for a purpose-built SonicWall brute force tool and network scanner is being offered on exploit.in, significantly lowering the barrier for opportunistic attacks against SonicWall devices.

Alleged Sale of ALTair Android Banking Bot (Threat Feed) — ALTair, an Android banking trojan targeting financial apps directly, is being marketed on underground forums.

Alleged Data Leak of Banjercito (Threat Feed) — Vehicle processing records from Banjercito, Mexico's military bank, have been posted on RaidForums — useful for identity fraud and social engineering targeting military-adjacent personnel.

Alleged Sale of Las Vegas Casinos User Database (Threat Feed) — A dataset of Las Vegas casino user leads from 2026 is being offered for sale on darknetarmy.

Alleged Unauthorized Access to ASEAN Ministry of Defence (Threat Feed) — Network controller credentials for an unidentified ASEAN Ministry of Defence are being offered for sale.

Alleged Data Breach of CANTV (Threat Feed) — Venezuela's state telecoms provider CANTV has suffered a data breach with records now circulating on darknet forums.

Cerámicas Kantu Falls Victim to Panzer Ransomware (Threat Feed) — Spanish ceramics manufacturer Cerámicas Kantu has been claimed by Panzer Ransomware.

UK & Critical National Infrastructure

No NCSC advisories were published in the past 48 hours.

Strad Solutions 🇬🇧 — A UK-based cloud hosting, managed IT, cybersecurity, and disaster recovery provider has been claimed by Vexy Ransomware. 46.5 GB of data is claimed; infostealer data shows 78 user credentials and 43 credential-linked URLs already in circulation. MSP compromises carry significant downstream risk — customers using Strad for hosting or DR should verify their incident response channels and check for anomalous access.

Gilco Scaffolding 🇬🇧 — Claimed by Qilin ransomware. Construction sector UK victim.

israeluk.org targeted by hacktivists — The Israeli Embassy UK website has been targeted by a hacktivist operation. Operational impact appears limited but reflects ongoing geopolitical conflict activity in the UK's online environment.

UK defenders should note the SonicWall brute force source code sale flagged in today's feed. SonicWall devices are commonly deployed as VPN gateways in UK SME and mid-market environments, and purpose-built scanning tooling in wide circulation significantly increases exposure risk.

HaveIBeenPwned — New Breaches

Ransomware Victims (48h)

31 victims · 12 groups