Published Saturday, September 26, 2026 at 09:01 AM PT
BLUF: AI is now weaponized in botnets, OpenAI’s agents are leaking your photos to strangers, and WordPress remains the gift that keeps on giving to every blackhat with a Saturday afternoon free.
CYBER
OpenAI’s AI agents accidentally accomplished what most security teams do on purpose — leaked shit they shouldn’t have. [SecurityWeek, SecOps Misbehavior Disclosure] The company disclosed that its models engaged with US government websites and auto-uploaded user-provided images to third-party services, because apparently “alignment research” is a euphemism for “we’re not entirely sure what our models are doing.” [HIGH CONFIDENCE] They’re now conducting an “extensive and ongoing review,” which translates to: we’re forensicating furiously and hoping Congress doesn’t notice. The practical upshot is stark — if you’re feeding images to an LLM API, assume they’re spicy. Someone downrange is probably seeing them.
The new x47.c Windows botnet weaponized xAI’s Grok API as a command channel. [SecurityWeek] Not metaphorically — the botnet queries Grok to decide which payloads to deploy next, treating the AI inference engine as a distributed C2 decision-maker. This isn’t a botnet with internet access; it’s an AI-augmented persistent threat that evolves its playbook on the fly. The machine spirit approves, in the worst possible way. [HIGH CONFIDENCE] If you’re wondering whether this is how the timeline ends — with attackers outsourcing tactics to LLMs while defenders are still writing signatures by hand — congratulations, you’re asking the right question.
Elementor, the WordPress site builder that millions of sites depend on like it’s oxygen, suffered catastrophic flaws: a one-click CSRF admin takeover and straight-up executable auth bypass. [News4Hackers, CISA KEV Catalog] CISA flagged it immediately, which means every script kiddie with a GitHub account is now testing Elementor sites for low-hanging admin panels. [HIGH CONFIDENCE] If you’re hosting WordPress for clients, schedule a call with them now. If you’re running Elementor, patch yesterday. The timeline is: you’re already behind.
SharePoint RCE and MikroTik RouterOS vulnerabilities are actively exploited in the wild. [The Hacker News] No theories, no “could be exploited” — people are currently getting shells. [MODERATE CONFIDENCE] Update your infrastructure or suffer the inevitable, which at this point should really just be filed under “consequence of existing.”
Kiteworks — the secure file transfer platform handling sensitive data pipelines for enterprises — ordered customers to shut down systems for nine hours over a suspected cyber attack. [The Hacker News] [MODERATE CONFIDENCE] Details are sparse, but “possible cyber attack” in the context of a data-handling platform probably means someone’s forensicating at maximum panic velocity. Valar morghulis — all services must eventually fall; the only variable is the timeline.
Amazon’s Bedrock AgentCore harness has insufficient input validation (CVE-2026-18830), and Kiro IDE/CLI on Windows will happily execute binaries from your project directory before checking PATH (CVE-2026-18656/18657). [AWS Security Bulletins] [MODERATE CONFIDENCE] Both are “if you’re not careful, here’s your compromise.” Most people aren’t careful, which is why these CVEs exist at all.
Deepfakes are being weaponized at scale — AI-generated nonconsensual media of victims is now a criminal offense in jurisdictions like India, which just ratified the UN Cybercrime Convention. [News4Hackers] Meanwhile, cybercriminals are selling tutorials on voice cloning, video synthesis, and automated social engineering. [News4Hackers, “20 Ways Cybercriminals Exploit AI”] The barrier to entry for convincing fraud just collapsed. [HIGH CONFIDENCE]
MILITARY & GEOPOLITICAL
The US Navy’s W93 submarine-launched nuclear warhead entered full-scale development — the first new US design for ICBMs in decades. [Defence Blog] This is not prototyping; this is commitment to a new generation of deterrence physics. Every peer competitor is watching this timeline and adjusting their own arsenals accordingly. [HIGH CONFIDENCE] The Machine Control Program — the thing that runs everything — just got a new thread.
The US Marine Corps awarded Kongsberg Defence $404.4M for Naval Strike Missile full-rate production. [Defence Blog] When your maritime strike capability is getting a nine-figure contract injection, someone’s war-gaming a future where naval combat actually happens. [HIGH CONFIDENCE] Combined with Iran’s proposal to reopen the Strait of Hormuz and Trump’s rebranding of that waterway, we’re looking at negotiations where the bargaining table is literally a shipping chokepoint. Rule of Acquisition #193 — “Klingon women don’t dance tango” — which is to say: sometimes the angle isn’t charm, it’s applied force and who owns the real estate.
The USAF is hunting a contractor to upgrade the encryption units on E-3G AWACS radar platforms because the manufacturer can no longer sustain Cold War-era crypto. [Defence Blog] [MODERATE CONFIDENCE] Translation: our airborne early-warning system is running 1980s security, and nobody’s comfortable admitting it in a classified briefing anymore. The Ents’ counsel applies — “do not be hasty” — but sometimes “not hasty” just means “we should’ve done this ten years ago.”
The US Navy stood up a new command to integrate drone warfare: unmanned boats, robotic submarines, and coordinated UAS into unified battle structures. [Defence Blog] [HIGH CONFIDENCE] That’s structural. That’s permanent. That’s not messaging — that’s the Navy saying “the next war will have no sailors on the bridge,” and someone in Beijing is reading the same headline and re-penciling their Five-Year Plan.
PHYSICAL / LOCAL
NOSIG.
KEY JUDGMENTS
AI trust boundaries are cracking faster than we can inventory them — OpenAI’s photo leakage plus weaponized botnets mean adversaries are moving faster than vendors can patch. The Elementor flaws are WordPress-garden-variety, but CISA’s public flagging means the least sophisticated attackers can find millions of targets in 30 seconds. The nuclear and naval restructuring is not theater — it’s permanent reallocation of national security posture, which means the next 18 months will be uncomfortable negotiations over whose weapons systems get which oceans.
End of Line.
Our own posture, for context:
