Border Cyber Group

THE WEEK IN REVIEW

This week’s review finds attackers concentrating on authority: identity, email, DevOps, backup, industrial control, shipboard connectivity, and AI-enabled supplier access. The common risk is not one vulnerability, but the ability of a compromised system to command or influence many others.

19 Sep 2026 Siemens S7 PLC threat AI-assisted ICS attacks Cisco ISE CVE-2026-76460 Cisco Secure Email CVE-2026-76461 GitLab CVE-2026-85706 maritime cyberattack critical infrastructure defense Russian hybrid threats

Critical Infrastructure Threat Intelligence Briefing

Today’s briefing examines active targeting of Siemens industrial controllers, an expiring Cisco identity-control deadline, continuing exploitation of email, DevOps, and backup platforms, and unresolved maritime cyber-physical risk amid Europe’s expanding hybrid-threat response.

18 Sep 2026 Anthropic AI threat report AI misuse transparency frontier AI safety AI-assisted cyber operations AI supply-chain security responsible disclosure Critical Infrastructure Cybersecurity AI governance

From the Desk of the Editor

Anthropic’s repeated disclosures of AI misuse may be doing more than informing the public: they may be forcing frontier AI companies toward a new competitive norm in which credibility depends on showing what went wrong, what was stopped, and what remains unknown.

18 Sep 2026 maritime cyberattack VL Prosperity tanker AI threat report AI supply chain security Cisco ISE CVE-2026-76460 GitLab CVE-2026-85706 critical infrastructure protection Russian hybrid threat

Critical Infrastructure Threat Intelligence Briefing

Today’s briefing examines a confirmed malicious cyber incident aboard an energy tanker, AI-orchestrated attacks against suppliers and critical-sector targets, France’s hybrid-threat response, and still-active exploitation of Cisco, GitLab, and Acronis control planes.

17 Sep 2026 Cisco ISE CVE-2026-76460 Cisco Secure Email Gateway CVE-2026-76461 GitLab CVE-2026-85706 Acronis CVE-2026-87886 WSO2 CVE-2026-5430 BIND 9 security CHOSEN BRICK spyware critical infrastructure cyber

Critical Systems Threat Intelligence Briefing

Active exploitation is concentrating on identity, email, backup and DevOps control planes. Cisco ISE, Cisco Secure Email Gateway, GitLab and Acronis require emergency action; WSO2, BIND and Oracle need accelerated remediation. CHOSEN BRICK remains targeted endpoint risk.