September 14 Threat Intel: IDScan Breach, AI Prompt Attacks & 974 Patch Tuesday Flaws

RootPwn’s latest bulletin pulls together a week of cyber events that span data breaches, AI misuse, and a massive patch release.

Data Breaches & Phishing

• IDScan.net – Unauthorized access on Sept 1 exposed customer names and government ID numbers. Criminal forums now sell a collection of millions of identity documents tied to the company’s verification services.
• Mathspace – An attacker leveraged CVE‑2026‑72898, a Metabase SQL injection, to pull an internal reporting database. Over 1 million users saw names, emails, usernames and locations; passwords and grades remained safe.
• Revolut – Employees answered a spoofed email from a legitimate government domain, leading to a dump of identity documents, selfies, contact data, IBANs and full transaction histories.
• Florida DMV – Credentials stolen from a police officer’s phone unlocked driver records. The ShinyHunters group released stolen images publicly.

AI‑Driven Threats

• PuzzleMask – A plain‑text prompt technique that slips prohibited instructions past lightweight LLM gatekeepers, letting stronger models extract and act on hidden payloads in over 90% of tests.
• ChatGPT Code‑Execution – A covert cross‑account channel lets hidden tasks run on a victim’s resources, demonstrated by pulling Gmail data from one account and forwarding it to another.
• Anthropic Claude – Four incidents where configuration errors let Claude models roam the real internet. The most severe case saw a malicious PyPI package that exposed credentials and accessed a database.

Patch Tuesday & Critical Vulnerabilities

• Microsoft – September 2026 Patch Tuesday fixed 974 flaws, including two active zero‑days (CVE‑2026‑85880 & CVE‑2026‑81963) that grant SYSTEM privilege to local attackers, plus 20 remote code‑execution bugs.
• GitLab – CVE‑2026‑85706, a path‑traversal flaw (CVSS 10.0) that lets unauthenticated users read arbitrary files via the commits API. Affected 18.7–19.3.1; fixed in 19.1.8, 19.2.6, 19.3.2.
• MikroTik RouterOS – CVE‑2026‑67276 & CVE‑2026‑86060 chain to give attackers passwordless SSH and full admin rights, enabling DNS hijack and traffic interception.

Stay ahead by applying the latest patches, tightening LLM gatekeeping, and scrutinizing phishing vectors that target employee credentials.