Briefing — 30 September 2026

🎧 Subscribe to the podcast feed

Security News

Self-Replicating Prompt Injections Found in GPT Models (The Register) — OpenAI's alignment team disclosed GPT models susceptible to worm-style prompt injection attacks that can propagate across agents and contexts.

Apple CVE-2026-86950 Weaponised in Sophisticated Targeted Attacks (Dark Reading) — The patched Apple zero-day is being exploited in extremely sophisticated campaigns consistent with advanced threat actor involvement; patch Monday's update immediately.

Phishing Campaign Abuses RMM Tools for Persistent Enterprise Access (Microsoft Security Blog) — Attackers are weaponising legitimate remote monitoring and management software to maintain undetected persistence in enterprise environments.

CVE-2026-69522: .NET and Visual Studio RCE Vulnerability (MSRC) — Microsoft published updated guidance for a critical RCE flaw affecting .NET and Visual Studio; prompt patching required for .NET-dependent environments.

Chaos Ransomware Claims Advantech (ICS/OT Vendor) — The Chaos group listed Advantech, the industrial automation and IoT manufacturer widely deployed in OT environments globally, raising concerns for CNI-adjacent supply chains.

Ukrainian Energy System Unauthorised Access Claimed (Threat Feed) — A threat actor claims access to a Ukrainian energy storage and UPS battery management system used for power stabilisation and distribution.

TP-Link Enterprise Switches Compromised (Threat Feed) — Two enterprise TP-Link switch models compromised; attackers claim access to admin panels, network settings, and connected device identifiers.

INDmoney: 21 Million Records Listed for Sale (Threat Feed) — A threat actor is selling alleged 21 million records from the Indian investment platform INDmoney.

Digitec Galaxus: 3.45M Customer Records Claimed (Threat Feed) — Switzerland's largest online retailer appears in breach claims covering 3.45M records including payment details and order history.

Dominican Republic Electoral Body Breached (Threat Feed) — The Junta Central Electoral compromised; actor claims API access for querying Dominican citizen identity data.

Italy's St Mark's Square Flood System Accessed (Threat Feed) — Attackers claim operational access to flood-risk reduction infrastructure protecting St Mark's Square, including pump controls and internal network components.

VirusTotal Enterprise API Access for Sale (Threat Feed) — Enterprise-tier VirusTotal API access with multi-million quota allegedly listed for sale, potentially enabling large-scale evasion testing by threat actors.

UK & Critical National Infrastructure

NCSC Advisory: Citrix NetScaler CVE-2026-88771 / CVE-2026-88772 — The NCSC issued a formal advisory on 28 September urging UK organisations to patch the two critical NetScaler zero-days actively exploited in the wild. Patch to ADC/Gateway 14.1-73.37 or 13.1-64.23.

Three UK businesses appear across this 48-hour window: Precision Facades Ltd (N0n — complete file server claimed, financial and project data, publication imminent), maxwell-group.com (BrainCipher), and safescaffolding.net (ThreeAM).

UK OT defenders should note the Chaos ransomware claim against Advantech: a vendor compromise may expose technical documentation and support credentials for Advantech equipment deployed in UK CNI environments. Monitor for supply-chain risk.

The self-replicating prompt injection disclosure from OpenAI has direct relevance for UK organisations deploying agentic AI. The convergence of autonomous AI threat actors (JadePuffer), agent misalignment incidents (OpenAI), and now worm-capable prompt injection represents a rapidly maturing attack surface.

Ransomware Victims (48h)

60 victims · 22 groups