U.S. cybersecurity and intelligence agencies report that six Chinese AI companies have conducted large-scale distillation attacks on American frontier AI models since at least late 2024. These attacks involved extracting billions of tokens from the targeted AI models. The activity represents a significant concern regarding intellectual property and AI model security but does not describe a software vulnerability or exploit in the traditional sense.
This report discusses how multi-factor authentication (MFA), while effective at preventing direct account takeovers, is increasingly circumvented by attackers targeting account recovery mechanisms. Attackers exploit weaknesses in identity verification processes at service desks to reset passwords or authentication methods, effectively bypassing MFA protections. The analysis emphasizes the need for stronger identity verification controls during account recovery to prevent social engineering attacks from leading to account compromise.
voidsec-proxy is a lightweight open-source operational security (opsec) toolkit implemented in Python. It provides a single CLI interface with 18 modules covering proxy chaining, scanning, DNS, password generation, encryption, steganography, shells, forensics, anonymization, and more. The toolkit is designed for basic opsec tasks and does not have any reported vulnerabilities or exploits in the wild. There is no indication of security flaws or malicious behavior in the provided information.
The CyberAgents Exchange AI Inspector is a new security review process developed by Tenable in partnership with OpenAI to rigorously vet community-submitted AI agents, skills, MCP servers, and multi-agent playbooks. It combines Tenable's exposure detection expertise with OpenAI's GPT Cyber models and human oversight to analyze a broad attack surface unique to AI agents, including LLM instructions, tool-chaining permissions, and prompt injection risks. The inspection process dynamically matches AI model tiers to submission risk levels, ensuring thorough vetting without excessive computational overhead. This initiative aims to help security teams confidently adopt agentic AI by providing a cybersecurity-native registry with a transparent and comprehensive review process. The CyberAgents Exchange launched as an open-source, vendor-agnostic registry and has grown to host over 100 AI listings. The AI Inspector is expected to be available in September and anchors reviews to specific code commits to maintain traceability and integrity.
US government agencies have warned that China-based AI companies are systematically extracting advanced capabilities from US frontier AI models through a process called distillation. This process involves capturing model outputs and reasoning to train competing AI models. The activity, reportedly conducted with Chinese government awareness, targets models such as Claude, GPT, Gemini, and Grok, resulting in financial harm and undermining US technological leadership. The agencies describe this as a strategic economic threat and a planned national-level action. Mitigation recommendations include coordinated defensive measures across the US AI ecosystem and the use of differential privacy to protect model outputs.
This article proposes ORKS (Open Revocable Key Standard), an open standard designed to enable API keys to be self-revocable and quickly disabled upon detection of leakage. It introduces a key format embedding issuer information, a discoverable revocation endpoint, unauthenticated revocation by possession of the key, and declared constraints such as IP allowlists and expiry. The standard aims to reduce the window of exposure for leaked API keys, especially in environments where autonomous AI agents hold and use credentials. The proposal includes a quarantine mode to mitigate denial-of-service risks from unauthenticated revocation requests. ORKS is currently a draft specification open for review and contribution.
An individual in Ohio was sentenced to 15 years imprisonment for engaging in cybercrimes involving sextortion and cyberstalking. The perpetrator used AI-generated sexually explicit videos to extort multiple victims. This case highlights the misuse of AI technology for criminal harassment and exploitation.
This entry references the ISC Stormcast podcast episode from September 9th, 2026, hosted by the SANS Internet Storm Center. It is a general security news update without specific vulnerability or threat details.
Microsoft is introducing new age-awareness APIs in Windows 11 that enable applications to determine if a user is a child, teenager, or adult without revealing the exact date of birth. These APIs provide age ranges based on verified Microsoft account information, allowing apps to tailor experiences and safeguards accordingly. The feature supports age verification status checks and aims to streamline age-appropriate protections, including for AI experiences. Age verification is currently available in select regions and will expand over time. The APIs are available to Windows Insiders and will be rolled out broadly soon.
The DoppelCart fraud network operates over 119,000 fake e-commerce shops, primarily in the .SHOP domain, to steal payment card details. These fake shops impersonate legitimate brands by copying their catalogs, branding, and images, often offering large discounts to lure victims. The checkout pages collect sensitive payment information including card numbers, expiration dates, security codes, cardholder names, and even one-time bank confirmation codes, transmitting this data in real time to attackers. Over 105,000 of these fake shops remain active, making DoppelCart the largest publicly documented fake-shop cluster by domain count. Victims who do not receive purchases may contact the legitimate brands, which are impersonated in the scam. The main hosting provider for these sites did not respond to takedown requests. A searchable database has been created to help companies identify and respond to DoppelCart impersonations.
Microsoft released Windows 11 cumulative updates KB5124008 and KB5122880 for versions 23H2, 24H2, and 25H2. These updates include security patches addressing approximately 1,000 vulnerabilities discovered in previous months, along with bug fixes and new features such as a movable taskbar, enhanced Start menu customization, and improvements to Windows Search and File Explorer. The updates are mandatory and part of the September 2026 Patch Tuesday release. No new issues have been reported with these updates so far.
This content is a discussion post on Reddit's r/cybersecurity forum asking how security teams handle false positive fatigue without missing real threats. It explores challenges related to tuning detection rules and managing alert noise in SIEM and XDR systems. There is no specific vulnerability, exploit, or threat detailed in the post.
Hidden prompt injection attacks manipulate autonomous AI agents by embedding malicious instructions in documents, metadata, emails, images, or code. These hidden prompts cause AI agents to perform unintended or dangerous actions by treating attacker-controlled content as trusted guidance. Because AI agents operate at machine speed with user-level privileges and lack human judgment, such attacks can lead to unauthorized data exfiltration, file deletion, or other harmful activities. The threat is difficult to detect using traditional security tools, as these hidden instructions do not resemble conventional malware. Mitigation focuses on preventing the ingestion of poisoned content by scanning and detecting hidden instructions before AI agents process them.
Alleged white-hat hackers exploited a vulnerability in the Liquid Network's federation wallet, stealing approximately 4,000 Bitcoin (~$320 million). The hackers demanded that the vulnerability be fixed before returning the stolen funds. To date, about 3,400 Bitcoin (~$263 million) have been returned, with roughly 598 Bitcoin (~$47 million) still outstanding. The incident caused Liquid to suspend transactions and pause network activity while federation members work on fixes and security improvements. The exact method of the theft remains unclear, but the SideSwap Peg-out Authorization Key was involved without being compromised. Other Liquid assets were unaffected by this incident.
OpenAI is experiencing an ongoing outage affecting ChatGPT's image generation and file upload functionalities. Users report failures and delays when generating images and uploading files, with some uploads appearing successful but remaining unavailable. OpenAI is actively investigating and applying mitigations, but issues persist. This outage follows previous service disruptions and occurs ahead of the planned launch of the GPT-6 Astra model.
The August 2026 Microsoft security update may cause recurring application errors (0xc0000409) on Windows Server 2016 systems where the Compatibility Appraiser diagnostic service is enabled. This issue affects both physical and virtual machines, including VMware and Azure environments. The CompatTelRunner.exe process crashes, generating event log warnings, but device functionality is not impacted. Microsoft acknowledges this as a known issue and recommends dismissing the event log warnings temporarily until a fix is released in a future update.
Cylake, a cybersecurity startup founded by former Palo Alto Networks executives, has raised $245 million to develop an AI-native cybersecurity platform designed for highly regulated organizations that cannot rely on public cloud infrastructure. The platform aims to operate entirely on-premises or in private cloud environments, providing customers with full control over their data, infrastructure, and security operations. Cylake's solution targets government agencies and enterprises with strict data sovereignty requirements, addressing visibility gaps caused by fragmented security products. The company plans a beta release by the end of 2026 and general availability in 2027.
This content is an Ask Me Anything (AMA) session hosted by Larry Pesce, a cybersecurity expert with over 20 years of experience in IoT, wireless hacking, and software supply chain security. The post is an invitation for the community to ask questions about various security topics, including hardware and firmware hacking, wireless security, supply chain security, and regulatory compliance. It does not describe a specific vulnerability, exploit, or active threat.
Microsoft warned customers last week that they may experience application crashes on some Windows Server 2025 due to recent memory management changes. [...]