Hello, stay ahead with CISO Brief 🚀

🔒 ServiceNow has released patches for three maximum-severity vulnerabilities in its ServiceNow AI Platform that enable low-complexity code injection, SQL injection, and privilege escalation without user interaction. Cloud instances have been updated, and self-hosted customers are urged to patch immediately. The flaws (CVE-2026-18885, CVE-2026-18886, CVE-2026-74820) could allow attackers to execute arbitrary code, alter or create instance data, and run arbitrary SQL against the database. ServiceNow also patched a high-severity sandbox escape (CVE-2026-6876); the vendor reports no known exploitation to date.

🔎 Our new research introduces perturbation probing, a two-pass, low-cost method that identifies the small set of feed-forward neurons causally responsible for targeted behaviors in aligned LLMs. Applied to Qwen3-4B and Qwen3.5-2B, the method found that tens of neurons (a tiny fraction of the model) control refusal and agreement behaviors, showing alignment can be highly concentrated. The study also defines the FFN/Skip ratio as a quick diagnostic predicting fragility across models.

🚀Starting today, Amazon EC2 C8gn instances powered by AWS Graviton4 processors are available in the AWS Europe (Paris) region. These instances deliver up to 30% better compute performance versus Graviton3-based C7gn instances and include 6th generation AWS Nitro Cards with up to 600 Gbps network bandwidth. C8gn supports sizes up to 48xlarge, up to 384 GiB memory, EFA on select sizes, and up to 120 Gbps EBS bandwidth for network-intensive workloads.

🔒 Berlin's state government confirmed an extortion attempt after its state administrative network was compromised in August and said it will not pay the attackers. Forensics found further data exfiltration from the Senate Department for Mobility, Transport, Climate Protection and Environment between August 7 and 12, 2026, and the scope may include personal or non-public records. Authorities, including state police, the public prosecutor and federal security agencies, are investigating while the Senate continues forensic work and coordination with data protection and security bodies.

🧭 Amazon Bedrock AgentCore Memory now supports flexible namespace variables that let developers scope long-term memories along custom application dimensions such as organization, tenant, team, or environment. Define up to five keys on a memory resource, reference them in a strategy's namespace template, and supply values at runtime via the CreateEvent API so the service substitutes them during memory extraction. The feature helps multi-tenant and complex-hierarchy applications avoid duplicate strategies and provides fine-grained control over memory organization and access. Flexible namespace variables are available today in all Regions where AgentCore Memory is generally available, at no additional cost.

🔒 Amazon Bedrock’s AgentCore Memory now supports fine-grained access control (FGAC), allowing per-user and per-tenant memory isolation via AgentCore Gateway without custom authorization code. Administrators can configure OAuth (JWT) authentication and attach Cedar policies to restrict access by caller identity, namespace claims, or specific Memory operations. The feature moves access enforcement into the infrastructure using cryptographic identity proof, and is implemented through the managed AgentCore Memory connector exposing 12 Memory operations as Cedar actions.

🔒 AWS Transform is now in scope for FedRAMP Class C in the US East (Ohio) Region, enabling customers to run workloads and build applications subject to those compliance requirements. FedRAMP provides a standardized federal approach to security assessment, authorization, and continuous monitoring. AWS Transform is an agentic migration and modernization service designed to accelerate enterprise migrations and reduce technical debt with less manual handoff and lost context.

🛡️ PaperCut released a second emergency security update after researchers found multiple bypasses of the initial fix for actively exploited vulnerabilities in PaperCut NG/MF. The company disclosed two CVEs—CVE-2026-81578 (auth bypass, 8.8) and CVE-2026-82078 (unsafe dynamic class-loading, 9.4)—that can be chained for remote code execution. The updated Emergency Patch Release 2 provides additional hardening and is available for versions 24–26 on Windows, Linux, and macOS; administrators are urged to install it and restrict web interface access.

🔒 AWS announces general availability of AWS Management Console Private Access, enabling VPCs with no internet connectivity to access supported service consoles via AWS PrivateLink endpoints. This routes authentication, static assets, console-only APIs, and service API calls through interface VPC endpoints, removing the need for an internet gateway or NAT. The feature is available in all AWS commercial Regions for a select set of consoles and integrates with sign-in resource control policies, VPC endpoint policies, and service control policies to enforce identity, resource, and network perimeters.

🛡️ GiveWP, a WordPress donation plugin with over 100,000 installs, contained a critical vulnerability (CVE-2026-82222) that allowed attackers to execute arbitrary server commands. Patchstack researchers reported the issue on July 28, showing exploitation required chaining unsafe unserialization, attacker-controlled serialized donations, and a bundled gadget chain. The vendor released a patch in version 4.16.7.2 on August 27 that blocks serialized payloads and cleans affected databases.

🚀 Amazon EC2 P6-B300 instances are now available in Asia Pacific (Hyderabad) and South America (Sao Paulo), expanding regional availability. These instances offer 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB GPU memory, 6.4 Tbps EFA networking, 300 Gbps ENA throughput, and 4 TB system memory. P6-B300 delivers increased networking, GPU memory, and TFLOPS versus P6-B200, targeting training and deployment of large trillion-parameter FMs and LLMs. The p6-b300.48xlarge size is available in multiple AWS Regions including US West (Oregon) and N. Virginia.

🛡️ This article examines how threat actors increasingly use less-obvious file types to bypass defenses and deliver malware. It outlines disk image formats (ISO, IMG, VHD, VMDK) that mount natively and can evade scanning, Office-related formats like .one and .xll that hide scripts or DLLs, and SVG files that can contain JavaScript. The piece also describes polyglot files and a notable IcedID campaign that chained ZIP→ISO→CHM→mshta to deploy payloads, and stresses the need for comprehensive scanning of these formats by security tools.

🛡️ Huntress and watchTowr reported attackers chaining two recently patched PaperCut vulnerabilities to bypass authentication and achieve remote code execution. PaperCut released a second emergency patch with additional hardening after disclosure of CVE-2026-81578 and CVE-2026-82078. Observed activity includes execution of Base64-encoded commands and deployment of a cross-platform Java .class file used for reconnaissance and cleanup.

🔍 A 68-year-old UK resident, Milan Ibrahim, has been sentenced to over six years in prison after running an illegal IPTV service that generated £980,812 over three years. The Police Intellectual Property Crime Unit (PIPCU) described the operation as sophisticated, involving 80 servers and offering pirated broadcasts from major rights holders including BBC, ITV, Sky, the Premier League and the Motion Picture Association. Authorities seized and shut down all servers, potentially exposing users who accessed the service to fines or other consequences, and will pursue Proceeds of Crime Act actions to recover funds.

🔒 Google announced Android 17 will add system‑level support for Encrypted Client Hello (ECH) to obscure domain names and prevent network eavesdropping. The update enables ECH GREASE by default so connections to non‑ECH servers remain indistinguishable, and OkHttp has integrated ECH for third‑party apps. Android 17 also enforces Local Network Protection, enables Certificate Transparency by default, and allows carriers to disable 2G to mitigate downgrade and SMS blaster attacks.

📣 The Amazon CloudWatch agent now supports reading systemd journal (journald) logs directly from Linux instances and sending them to Amazon CloudWatch Logs without writing files to disk. This native integration preserves journald structured metadata such as unit, priority, and process information. You can filter by systemd unit, priority, and journal fields, apply regex filters to reduce noise and control costs, and the feature is available in all AWS Commercial and GovCloud(US) regions. Update to the latest CloudWatch agent and add a journald section to your configuration to enable this functionality.

🚀 Amazon Aurora MySQL-Compatible Edition 3 now supports MySQL 8.0.45, bringing community fixes and Aurora-specific improvements. You can upgrade during scheduled maintenance windows using automatic minor version upgrades and the AWS Organizations Upgrade Rollout Policy to orchestrate phased upgrades across clusters. Upgrades may be done in-place or via snapshot restore, and this release is supported in all Regions where Aurora MySQL is available.

🚀 Amazon Bedrock in AWS GovCloud (US) now supports SpaceXAI Grok 4.6, a flagship model designed for coding, agentic tasks, and knowledge work. Grok 4.6 provides a 500k context window and configurable reasoning efforts (low, medium, high, xhigh). The model is accessible via the bedrock-runtime endpoint (Responses, Chat Completions, Converse APIs) and bedrock-mantle in GovCloud (US-East), with cross-Region inference routing for scaled access. Review the model card in the Amazon Bedrock User Guide to get started.