Briefing — 15 September 2026

🎧 Subscribe to the podcast feed

Security News

Massive Chrome & Edge Security Update — 30+ CVEs Patched (Google / MSRC) — A sweeping Chromium security release addresses over thirty vulnerabilities including use-after-free bugs in V8 and ANGLE, out-of-bounds writes in Media, type confusion in V8 and XML, and race conditions across the browser; update Chrome and Edge immediately.

Revolut Suffers Data Breach via Government Agency Impersonation (CybersecurityNews) — An unauthorised actor used a fraudulent email domain mimicking a government agency to submit bogus information requests, resulting in sensitive Revolut customer data being exposed through social engineering rather than technical exploitation.

China's Intelligence Minister Warns AI Threatens Communist Party Stability (The Register) — State Security Minister Chen Yixin published a warning in China Cyberspace Magazine that AI poses an existential risk to CCP control mechanisms, a notable signal of how Chinese intelligence views the dual-use nature of technology they also deploy offensively.

US Military Confirms Offensive Space Weapons Now in Orbit (Ars Technica) — Air Force Secretary Troy Meink made the first public confirmation that the US has deployed "space control weapons" in orbit, with significant implications for the contested infrastructure underpinning GPS, communications, and CNI globally.

Hazel Health Hit by Dire Wolf Ransomware — 341GB Claimed (Threat Intelligence) — Healthcare provider Hazel Health has been claimed by the Dire Wolf group with 341 gigabytes of alleged stolen data; healthcare organisations should treat Dire Wolf as an active and capable threat actor.

Honda Claimed by Panzer Ransomware — 380GB (Threat Intelligence) — Panzer ransomware is claiming a breach of Honda with 380 gigabytes of data allegedly exfiltrated, with a stated publication timeline of 20–21 days.

HandyTrac Property Key Management System Breached (Threat Intelligence) — A group calling itself SHADOWBYT3$ claims to have breached HandyTrac, stealing physical-to-digital key maps, property vulnerability logs, and employee credential data — a sensitive compromise for building security operations.

Kimberly-Clark Claimed by ShinyHunters (Threat Intelligence) — Consumer goods giant Kimberly-Clark has appeared on ShinyHunters' leak site, adding another major brand to the group's growing list of claimed victims.

UK & Critical National Infrastructure

UK Ransomware Victim: Gilco Scaffolding (UK) has appeared on Qilin's leak site in the past 48 hours. Qilin remains one of the most operationally active ransomware groups, claiming seven victims across this window alone.

Healthcare Alert: Hazel Health's claimed breach by Dire Wolf is the most significant healthcare-sector incident in this cycle. Defenders in NHS and private healthcare should be aware that Dire Wolf is escalating its targeting of health organisations.

Transport Sector: Multiple transport-sector victims appear in this window — RoadEx America and Alicotrans (both Qilin), and Navitrans (Emperador group) — suggesting continued adversary interest in logistics and freight operators.

Government Sector: LockBit5 has claimed the Comune di Robecco sul Naviglio, an Italian municipality, reinforcing the ongoing trend of local government bodies being targeted by ransomware groups.

NCSC Advisories: No new NCSC alerts or advisories have been published in the past 48 hours.

Ransomware Victims (48h) — 26 Victims · 12 Groups