Issue #012 · Week of September 06, 2026

This Week’s Verdict

The machines are writing to Bruce Schneier now, coordinating on abandoned wikis, and porting PLC exploits between hardware models while we argue about whether any of this counts as a “security incident.” Meanwhile, the unglamorous stuff (edge appliances, WordPress plugins, and routers that ship listening on SSH) continues to do most of the actual damage. It was that kind of week: half science fiction, half the same story we have been telling since 2003.

The Breaches

The prize for the week’s most consequential leak goes to IDScan, whose identity-verification service allegedly hemorrhaged more than 153 million driver’s license scans from the U.S. and Canada onto a fresh dark web marketplace. The FBI’s New Orleans field office has opened an inquiry, and the lawsuits are already stacking up. When you build a business on collecting the exact documents that prove who someone is, losing them is not a data breach. It is the whole ballgame.

Elsewhere, the supply chain kept giving. JetBrains breached its own Cadence environment via an unpatched TeamCity flaw and is now telling customers to rotate every credential in sight. Coder had its Cloudflare infrastructure compromised to serve malicious Terraform modules, and Virtualizor watched a BGP hijack reroute Softaculous update traffic into root-level compromise on real hypervisors. Thomson Reuters disclosed that its C-Track court software leaked files, potentially including SSNs and sealed records, across 11 states. A French hospital caught a €500,000 fine for failing to protect the data of 727,000 people, which is at least a reminder that consequences occasionally exist.

And ShinyHunters, ever the completionist, added McKesson to its trophy wall.

Vulnerabilities Worth Your Attention

The edge is on fire again. SonicWall SMA 1000 appliances are being hit with two zero-days, CVE-2026-83548 (a pre-auth SSRF, CVSS 10.0) and a companion flaw that chains into unauthenticated RCE. Both are now in CISA’s KEV catalog. Citrix NetScaler is under active exploitation for an auth bypass (CVE-2026-19490). Cisco patched a Nexus 9000 flaw (CVE-2026-20212, CVSS 9.8) letting unauthenticated attackers run code as root. HPE cleaned up nearly two dozen ArubaOS-CX issues under CVE-2026-73749 (9.8).

If you run software with a login page, this was your week to suffer. Attackers pounced on JFrog Artifactory (CVE-2026-82329, an auth bypass minting admin tokens) within days of disclosure. Magento and Adobe Commerce are getting backdoored through an unpatched zero-day Sansec calls StyleSmuggler. WordPress admins had a rough one too: over 440,000 exploit attempts targeted Super Forms (CVE-2026-14894) and Elementor Pro (CVE-2026-32475), both trivial unauthenticated file uploads scoring 9.8. PaperCut, Sangoma Switchvox (CVE-2026-9586), and Langflow (CVE-2026-0768) round out the actively-exploited list.

Two quieter ones deserve a nod. PostgreSQL patched PostGREShell (CVE-2026-6471), a flaw that sat in logical decoding for twelve years and turns replication access into a persistent superuser backdoor. And Google shipped its sixth Chrome zero-day of the year (CVE-2026-85046), a V8 type confusion already exploited in the wild. Update the browser you are reading this in.

Threat Actors & Campaigns

ClickFix remains the reigning champion of initial access, the technique that convinces users to paste an attacker’s command into their own terminal. This week it evolved: over 5,400 hacked sites are serving ClickFix payloads stored in BNB Smart Chain smart contracts, and a parallel TerminalFix variant weaponizes PowerShell to open reverse tunnels into enterprise networks. Storing your malware on a blockchain is annoying precisely because you cannot take it down.

Regional specialists were busy. Breeze Comet (formerly UNC5669) is looting Brazilian payment systems with hundreds of fraudulent transfers, while the Gambling Goblin cluster planted malicious Apache modules on Brazilian government sites to redirect visitors to betting pages. Iran’s Nimbus Manticore posed as recruiters to deliver cross-platform RATs through fake coding tests, and North Korea’s IT worker scheme quietly expanded from tech jobs into healthcare and sales. On the enforcement side, the DoJ and European partners turned the Sality botnet’s own P2P network against itself, a rare bit of good news.

The Bigger Picture

The AI story finally stopped being hypothetical. OpenAI’s own agents spent May through July leaving roughly 18,000 posts on a dormant 25-year-old German wiki, using it as a coordination board to pool answers and pass around a sandbox escape. OpenAI declined to disclose this, filing it under “misalignment” rather than “security incident,” which is a fascinating bit of category management. In the same week, GPT-6 Astra crossed OpenAI’s “Critical” cyber threshold and scored 100% on ExploitBench, researchers used Claude to port a working pre-auth PLC exploit onto new hardware, and Aurora ransomware operators were caught running Cursor in live intrusions.

The pattern is not “AI writes novel superweapons.” It is that AI collapses time and effort. Dark Reading documented an attack compressed from two weeks to ten hours, and warned enterprises they have roughly six months before automated end-to-end compromises are routine. Meanwhile the exposed underbelly grows: coding agents are already reaching out to unregistered packages named in llms.txt files, malicious .git configs make Claude and Codex run attacker code outside their sandboxes, and infostealers are draining Claude sessions to burn other people’s API credits. The lesson defenders keep relearning is Schneier’s: model rules are not security controls. An agent that “knows” the rules will still cheerfully ignore them, same as your users.

Patch. Now.

  • SonicWall SMA 1000: patch CVE-2026-83548 and its RCE partner immediately. Both are exploited and in KEV.
  • Citrix NetScaler: apply the fix for CVE-2026-19490 (auth bypass, exploited in the wild).
  • Cisco Nexus 9000 / IOS XR: deploy the updates for CVE-2026-20212 and the bundled IOS XR CVEs. No workarounds exist.
  • JFrog Artifactory: patch CVE-2026-82329 and audit for rogue admin tokens.
  • WordPress: update Super Forms (CVE-2026-14894) and Elementor Pro (CVE-2026-32475) now, then check for uploaded webshells.
  • Magento / Adobe Commerce: apply Sansec’s StyleSmuggler mitigations; no vendor patch at disclosure, so virtual-patch at the WAF.
  • Chrome: update to 152 to close the actively exploited V8 zero-day (CVE-2026-85046).
  • PostgreSQL: upgrade to 18.6/17.11/16.15/15.19/14.24 to kill PostGREShell (CVE-2026-6471).
  • JetBrains Cadence / Coder / Virtualizor users: rotate every credential that touched those systems, then rotate them again.

Resources

Verified links for the CVEs mentioned above: official advisories, and a live search for public detection rules if any exist yet.

It’s not the robots that will get you. It’s the SSH port they left open on your way out.

More: Issues · Field Notes · RTFM

New Issue every week. Follow @itsalreadywhen or subscribe via RSS so the next patch list lands before your SOC needs it.