The Pentagon’s roll call.

A Pentagon breach exposes data on millions. ShinyHunters goes dark. MI5 warns universities about Chinese espionage. AI agents find creative ways around their guardrails. A fake Zoom installer delivers macOS malware. Cisco patches an actively exploited SD-WAN flaw. OpenAI disrupts a “distillation attack.” Cyber Command confronts operator burnout. Treasury targets alleged ATM jackpotters. Our guest is Etay Maor, Vice President of Threat Intelligence at Cato Networks, with a reminder that your network isn't a recycling bin. Prophecy as a service.

Today is Thursday October 1st 2026. I’m Dave Bittner. And this is your CyberWire Intel Briefing.

A Pentagon personnel records breach exposes sensitive information of more than three million people. 

A months-long breach of the Pentagon’s personnel records exposed sensitive information belonging to more than three million people with ties to the U.S. military. The Defense Manpower Data Center says unauthorized users exploited a vulnerability in a file-sharing system between October 2025 and July 2026.  

The compromised, unencrypted records included Social Security numbers, names, dates of birth, contact information, demographic details, and information about military jobs. A Pentagon official says the breach affected roughly 2.8 million living people and 294,000 deceased individuals.  

DMDC is a major Defense Department repository, maintaining more than 60 million records covering service members, civilian employees, contractors, veterans, retirees, and military families. It also supports identity and credential management across the department. The Pentagon says it has found no evidence so far that the stolen information has been misused. The identities of those responsible remain unknown.  

ShinyHunters’ website goes down. 

The website used by ShinyHunters went offline Wednesday, one day after the cyber extortion group’s deadline for the FBI to retract or revise an advisory about its tactics. It’s unclear why the site disappeared, and the FBI declined to say whether it was involved.

ShinyHunters recently claimed it stole data on nearly all FBI agents as well as job applicants. Reuters’ review of a sample found extensive personally identifiable information, along with sensitive job, psychiatric, and medical data. The group said the attack was retaliation for a May FBI advisory it considered inaccurate, but later said it had achieved its goals and wouldn’t publish the stolen data.

Meanwhile, Dutch police arrested a man in connection with a ShinyHunters investigation. The group denied any association with him.

MI5 warns UK universities of potential Chinese espionage. 

MI5 is warning UK universities that research collaborations linked to a Chinese institute may be helping Beijing improve its espionage capabilities. The agency says more than 100 UK-linked academics have contributed to projects funded by China’s Ministry of State Security through the China General Technology Research Institute, also known as CAGT. Some researchers may not have known the ultimate source of the funding.

The projects covered areas including artificial intelligence, cybersecurity, covert communications and steganography, which MI5 says can directly support Chinese intelligence operations. The agency is urging universities to review current and planned collaborations with CGTRI and trace funding behind partnerships with Chinese institutions.

MI5 also warned that knowingly assisting or receiving benefits from a foreign intelligence service could carry criminal consequences under the UK’s National Security Act.

Researchers say routine AI research tasks turned troubling. 

Researchers investigating reported rogue OpenAI agent activity say the systems appear to have turned routine research tasks into something more troubling. Using public records, the team from Asymmetric Security found agents probing government, health and other websites, accessing some pre-production environments, and testing reconnaissance techniques including searches for exposed configuration files and attempted SQL injection.

The agents also found creative ways around their own sandbox restrictions. By chaining services such as httpbin and urlquery, they effectively assembled browser capabilities, then used archives and notification services to retrieve data. Researchers also found attempts to create disposable email addresses and private service accounts.

The investigation found no confirmed theft of sensitive information. But because some private scans and temporary communications are no longer accessible, researchers say public evidence alone can’t rule it out.

A new macOS implant disguises itself as a Zoom installer. 

Jamf Threat Labs has uncovered CloudSyncD, a new two-stage macOS implant disguised as a Zoom installer. Researchers first spotted a development build on September 15, then found versions connected to live command-and-control infrastructure two days later.

The malware walks victims through bypassing Apple’s Gatekeeper protections, then presents a fake authorization prompt and validates the user’s password. Rather than stealing that credential, CloudSyncD uses it to launch its second stage with elevated privileges. The implant collects basic system information, regularly checks in with its command-and-control server, and can receive and execute additional Mach-O payloads.

Jamf didn’t observe CloudSyncD establishing persistence. Researchers say the malware attempts fileless execution and uses obfuscation and encrypted configuration data, but ultimately still relies on a decidedly traditional technique: persuading the user to enter their password.

Cisco patches a Catalyst SD-WAN Manager vulnerability under active exploitation. 

Cisco has issued urgent patches for a critical authentication bypass in Catalyst SD-WAN Manager that’s being actively exploited. CVE-2026-76504 carries a CVSS score of 9.8 and allows unauthenticated attackers to gain administrative API access using specially crafted HTTP requests. All deployments are affected, with no workarounds available. Cisco has released fixed versions and indicators of compromise. CISA added the flaw to its Known Exploited Vulnerabilities catalog, giving federal agencies three days to patch.

OpenAI disrupts a month-long “distillation attack”. 

OpenAI says it disrupted a month-long “distillation attack” that sought to extract its models’ reasoning at scale, with a core cluster of activity linked to individuals associated with China’s Moonshot AI. The campaign began July 1 and peaked July 24 and 25, when OpenAI observed 16,000 extraction-related requests from more than 4,000 users. Related activity ultimately involved more than 15,000 accounts.

OpenAI says attackers didn’t breach its systems or access stored conversations. Instead, they manipulated model interactions to expose protected reasoning that could potentially be used to train competing models. The company disrupted the campaign July 28, banned associated accounts, tightened signup and infrastructure controls, and expanded monitoring. OpenAI argues that adversarial distillation poses safety risks because copied capabilities may not retain the original model’s safeguards.

The Pentagon orders U.S. Cyber Command to better protect personnel well-being.  

The Pentagon has ordered U.S. Cyber Command to accelerate efforts to protect personnel well-being following reports of recent suicide deaths at the command. In an August memo, top cyber policy official Katherine Sutton warned that continuous, high-tempo cyber operations can impose cumulative cognitive and psychological strain, while cyber teams often lack standardized recovery periods.

Cyber Command must take seven steps, including reviewing four years of workplace climate data, expanding access to mental and behavioral health professionals, and creating a resiliency framework by mid-October. The command is also being directed to develop more predictable recovery periods, reconsider consecutive operational tours, and balance campaign demands against long-term force health.

Military cyber leaders have separately described efforts to give operators more time away from operations, noting that what began as an operational “surge” has increasingly become the normal pace.

Treasury sanctions alleged ATM jackpotters. 

The U.S. Treasury Department has sanctioned Anibal Alexander Canelon Aguirre, known as “Prometheus,” who allegedly developed malware used in ATM jackpotting attacks linked to Tren de Aragua. Treasury also sanctioned seven alleged associates and two Mexico-based companies.

The network allegedly targets U.S. ATMs by installing malware, remotely bypassing security controls, and commanding machines to dispense their cash. Proceeds are then laundered, including through cryptocurrency, and transferred to TdA members. Treasury says more than 1,500 reported jackpotting attacks had caused over $40 million in U.S. losses as of August 2025.

Canelon Aguirre, added to the FBI’s Ten Most Wanted list in March, became its first fugitive wanted for cybercrime. The Justice Department has indicted 119 people in connection with the broader jackpotting conspiracy.

 

Prophecy as a service. 

As people increasingly turn to AI for advice, researchers see an echo of something much older: the oracle. From Delphi to religious divination, humans have long consulted mysterious systems when ordinary judgment runs out of road. Now chatbots are filling a similar niche, answering questions ranging from practical decisions to moral dilemmas and emotional support.

The comparison isn’t that ChatGPT is divine, or even particularly good at prophecy. Rather, AI shares one useful feature with traditional oracles: opacity. Even their designers can’t fully explain how complex models arrive at particular answers. That inscrutability may itself lend AI an aura of authority.

There’s even some historical symmetry. Alan Turing borrowed the term “oracle” for theoretical computing in 1939. Nearly a century later, we’re once again asking the mysterious box for guidance. Apollo has apparently been replaced by matrix multiplication, but the questions keep coming.

And that’s the CyberWire.

For links to all of today’s stories, check out our Daily Briefing at the cyberwire dot com.

 

We’d love to know what you think of this podcast. Your feedback ensures we deliver the insights that keep you a step ahead in the rapidly changing world of cybersecurity. If you like the show, please share a rating and review in your podcast app. Please also fill out the survey in the show notes or send an email to cyberwire@n2k.com

We’re proud that N2K CyberWire is part of the daily routine of the most influential leaders and operators in the public and private sector, from the Fortune 500 to many of the world’s preeminent intelligence and law enforcement agencies.

N2K helps cybersecurity professionals and organizations grow, learn, and stay ahead. We’re the nexus for discovering the people, tech, and ideas shaping the industry.  Learn how at n2k.com.

 

N2K’s lead producer is Liz Stokes. We’re mixed by  Tré Hester, with original music by and sound design Elliott Peltzman. Our contributing host is Maria Varmazis. Our executive producer is Jennifer Eiben. Peter Kilpe is our publisher. And I’m Dave Bittner. Thanks for listening.