{"id":49,"date":"2026-09-22T12:02:44","date_gmt":"2026-09-22T16:02:44","guid":{"rendered":"https:\/\/ainews.sunjetcyber.com\/?p=49"},"modified":"2026-09-22T12:02:45","modified_gmt":"2026-09-22T16:02:45","slug":"ai-cybersecurity-privacy-briefing-september-22-2026","status":"publish","type":"post","link":"https:\/\/ainews.sunjetcyber.com\/?p=49","title":{"rendered":"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><em>A summary of today&#8217;s most newsworthy AI-related cybersecurity and privacy developments.<\/em><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">1. Meta&#8217;s &#8220;Muse&#8221; AI Assistant Could Be Hijacked to Act on an Attacker&#8217;s Behalf<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Security researcher Patrick Wardle disclosed a zero-day flaw in Meta&#8217;s Muse, a personal AI assistant with reach into a user&#8217;s email, calendar, WhatsApp, and social accounts. Any locally running program or terminal command could quietly redirect one of Muse&#8217;s undocumented settings, letting an attacker steal the token that authenticates the user&#8217;s Muse session and take over the assistant&#8217;s privileges. Wardle demonstrated the flaw by getting Muse to write malicious files and take photos via the webcam, in some cases with no visible warning to the user; Meta has issued a hotfix for the Mac app.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Risk:<\/strong>&nbsp;Any organization whose staff use always-on AI assistants with broad account access faces a new class of attack where compromising the assistant, not the underlying accounts, is enough to hand an attacker the assistant&#8217;s full reach \u2014 email, calendar, payments, and files included.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">2. AWS&#8217;s Agent Platform Leaks &#8220;Encrypted&#8221; Credentials in Plain Text<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Palo Alto Networks&#8217; Unit 42 showed that AI agents built on Amazon&#8217;s AgentCore platform can be tricked, via a single poisoned support ticket, into leaking credentials that AWS advertises as protected by an encrypted vault. Because the agent&#8217;s shell tool runs with unrestricted access to the same memory where secrets are briefly decrypted for use, a prompt-injection attack triggered the agent to run a &#8220;diagnostic&#8221; script that exfiltrated a master authentication token to an outside server. AWS says it reviewed the finding and closed it as informative, placing the responsibility on customers to restrict agent tool access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Risk:<\/strong>&nbsp;Organizations deploying AWS&#8217;s default agent configuration may be exposing master credentials to any attacker who can slip instructions into content the agent processes \u2014 a common entry point for support desks, ticketing systems, and other agent-facing workflows.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">3. Cisco Talos Releases Toolkit to Track Malware That Consults AI Models for Its Next Move<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cisco Talos launched CAIRN, an open-source toolkit that hunts for malware built around AI components by scanning for traces like API endpoints, agent-style tool-call syntax, and jailbreak language, without running the suspect code. Alongside the release, Talos detailed CLOSEDQUORUM, the first documented Windows implant designed to poll up to four commercial AI models \u2014 DeepSeek, Qwen, Mistral, and Gemini \u2014 and vote on its next malicious action, from credential theft to process injection. The sample is not confirmed to be active in the wild, but the underlying decision-making architecture is real and functional.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Risk:<\/strong>&nbsp;As malware developers experiment with offloading tactical decisions to AI models, traditional detection based on hardcoded command-and-control infrastructure becomes less reliable, pushing defenders toward behavior- and metadata-based hunting well before this technique becomes widespread.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Sources: Cybernews, Cisco Talos \/ Cyber Security News. Compiled September 22, 2026.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A summary of today&#8217;s most newsworthy AI-related cybersecurity and privacy developments. 1. Meta&#8217;s &#8220;Muse&#8221; AI Assistant Could Be Hijacked to Act on [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-49","post","type-post","status-publish","format-standard","hentry","category-ai"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026 - AI News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ainews.sunjetcyber.com\/?p=49\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026 - AI News\" \/>\n<meta property=\"og:description\" content=\"A summary of today&#8217;s most newsworthy AI-related cybersecurity and privacy developments. 1. Meta&#8217;s &#8220;Muse&#8221; AI Assistant Could Be Hijacked to Act on [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ainews.sunjetcyber.com\/?p=49\" \/>\n<meta property=\"og:site_name\" content=\"AI News\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-22T16:02:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-22T16:02:45+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#\\\/schema\\\/person\\\/d0b6f5b09a6d9dae4a3064ca4d61a84e\"},\"headline\":\"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026\",\"datePublished\":\"2026-09-22T16:02:44+00:00\",\"dateModified\":\"2026-09-22T16:02:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49\"},\"wordCount\":476,\"publisher\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#organization\"},\"articleSection\":[\"AI\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49\",\"url\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49\",\"name\":\"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026 - AI News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#website\"},\"datePublished\":\"2026-09-22T16:02:44+00:00\",\"dateModified\":\"2026-09-22T16:02:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?p=49#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#website\",\"url\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/\",\"name\":\"AI News\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#organization\",\"name\":\"Sunjet Cyber\",\"url\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/sunjet_shield_logo_v4_jpg.jpg\",\"contentUrl\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/sunjet_shield_logo_v4_jpg.jpg\",\"width\":1680,\"height\":1920,\"caption\":\"Sunjet Cyber\"},\"image\":{\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/sunjetcyber\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/#\\\/schema\\\/person\\\/d0b6f5b09a6d9dae4a3064ca4d61a84e\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62c5fe926ce0e1ce0935e99e2fa4998da20c17a53fb85d7e679c251d36c1d389?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62c5fe926ce0e1ce0935e99e2fa4998da20c17a53fb85d7e679c251d36c1d389?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/62c5fe926ce0e1ce0935e99e2fa4998da20c17a53fb85d7e679c251d36c1d389?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/ainews.sunjetcyber.com\"],\"url\":\"https:\\\/\\\/ainews.sunjetcyber.com\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026 - AI News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ainews.sunjetcyber.com\/?p=49","og_locale":"en_US","og_type":"article","og_title":"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026 - AI News","og_description":"A summary of today&#8217;s most newsworthy AI-related cybersecurity and privacy developments. 1. Meta&#8217;s &#8220;Muse&#8221; AI Assistant Could Be Hijacked to Act on [&hellip;]","og_url":"https:\/\/ainews.sunjetcyber.com\/?p=49","og_site_name":"AI News","article_published_time":"2026-09-22T16:02:44+00:00","article_modified_time":"2026-09-22T16:02:45+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ainews.sunjetcyber.com\/?p=49#article","isPartOf":{"@id":"https:\/\/ainews.sunjetcyber.com\/?p=49"},"author":{"name":"admin","@id":"https:\/\/ainews.sunjetcyber.com\/#\/schema\/person\/d0b6f5b09a6d9dae4a3064ca4d61a84e"},"headline":"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026","datePublished":"2026-09-22T16:02:44+00:00","dateModified":"2026-09-22T16:02:45+00:00","mainEntityOfPage":{"@id":"https:\/\/ainews.sunjetcyber.com\/?p=49"},"wordCount":476,"publisher":{"@id":"https:\/\/ainews.sunjetcyber.com\/#organization"},"articleSection":["AI"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/ainews.sunjetcyber.com\/?p=49","url":"https:\/\/ainews.sunjetcyber.com\/?p=49","name":"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026 - AI News","isPartOf":{"@id":"https:\/\/ainews.sunjetcyber.com\/#website"},"datePublished":"2026-09-22T16:02:44+00:00","dateModified":"2026-09-22T16:02:45+00:00","breadcrumb":{"@id":"https:\/\/ainews.sunjetcyber.com\/?p=49#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ainews.sunjetcyber.com\/?p=49"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ainews.sunjetcyber.com\/?p=49#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ainews.sunjetcyber.com\/"},{"@type":"ListItem","position":2,"name":"AI Cybersecurity &amp; Privacy Briefing \u2014 September 22, 2026"}]},{"@type":"WebSite","@id":"https:\/\/ainews.sunjetcyber.com\/#website","url":"https:\/\/ainews.sunjetcyber.com\/","name":"AI News","description":"","publisher":{"@id":"https:\/\/ainews.sunjetcyber.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ainews.sunjetcyber.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ainews.sunjetcyber.com\/#organization","name":"Sunjet Cyber","url":"https:\/\/ainews.sunjetcyber.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ainews.sunjetcyber.com\/#\/schema\/logo\/image\/","url":"https:\/\/ainews.sunjetcyber.com\/wp-content\/uploads\/2026\/09\/sunjet_shield_logo_v4_jpg.jpg","contentUrl":"https:\/\/ainews.sunjetcyber.com\/wp-content\/uploads\/2026\/09\/sunjet_shield_logo_v4_jpg.jpg","width":1680,"height":1920,"caption":"Sunjet Cyber"},"image":{"@id":"https:\/\/ainews.sunjetcyber.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/sunjetcyber"]},{"@type":"Person","@id":"https:\/\/ainews.sunjetcyber.com\/#\/schema\/person\/d0b6f5b09a6d9dae4a3064ca4d61a84e","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/62c5fe926ce0e1ce0935e99e2fa4998da20c17a53fb85d7e679c251d36c1d389?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/62c5fe926ce0e1ce0935e99e2fa4998da20c17a53fb85d7e679c251d36c1d389?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/62c5fe926ce0e1ce0935e99e2fa4998da20c17a53fb85d7e679c251d36c1d389?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/ainews.sunjetcyber.com"],"url":"https:\/\/ainews.sunjetcyber.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=\/wp\/v2\/posts\/49","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=49"}],"version-history":[{"count":2,"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=\/wp\/v2\/posts\/49\/revisions"}],"predecessor-version":[{"id":51,"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=\/wp\/v2\/posts\/49\/revisions\/51"}],"wp:attachment":[{"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=49"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=49"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ainews.sunjetcyber.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=49"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}