US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware

SecurityWeek

Overview

A recent report from US, UK, and Dutch agencies has exposed a new surveillance malware known as 'Chosen Brick,' which is reportedly linked to Iranian cyber activities. The FBI noted that this malware utilizes Telegram for command and control operations, allowing attackers to manage infected systems remotely. This surveillance tool raises concerns about privacy and security for users, as it can be used to monitor communications and gather sensitive information without consent. The implications of such malware extend beyond national security, affecting individuals and organizations that may unknowingly fall victim to these cyber attacks. As the threat landscape evolves, it's crucial for users to remain vigilant and implement security measures to protect their devices and data.

Key Takeaways

  • Timeline: Newly disclosed

Original Article Summary

US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C. The post US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware appeared first on SecurityWeek.

Impact

Not specified

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Malware.

Related Coverage

CISA promotes a fresh way to deter cyberattackers: Lie to them

CyberScoop

The Cybersecurity and Infrastructure Security Agency (CISA) has released its first guidance on using decoys, such as honeypots, to combat cyberattacks. This approach aims to mislead attackers by providing false information and diverting them from valuable targets. By deploying these deceptive tactics, organizations can not only detect intrusions more effectively but also buy time to respond to threats. This guidance represents a shift in how organizations can defend against cyber threats, emphasizing the need for creativity in cybersecurity strategies. As cyberattacks become more sophisticated, CISA’s recommendations may help organizations better protect their assets and data.

Sep 16, 2026

Data Broker Radaris Loses Domains in Privacy Fight

Krebs on Security

Radaris.com, a consumer data broker known for its people-search services, has faced legal repercussions for allegedly violating New Jersey privacy laws. The lawsuit centered on Radaris's failure to comply with requests to remove personal information, particularly concerning state law enforcement officials. Following the company's repeated resistance in court, a judge ruled that Radaris must transfer its domain and over a dozen related sites to the plaintiffs. This case highlights ongoing concerns about data brokers' practices and the challenges individuals face in protecting their personal information online. The outcome could set a precedent for how data brokers handle privacy requests in the future.

Sep 16, 2026

Spain's data agency gets first report of AI-powered data breach

BleepingComputer

Spain's Data Protection Agency (AEPD) has reported receiving a notification about a data breach that involved an AI agent utilizing a large language model (LLM). The details surrounding the attack are still emerging, but it marks a significant event as it is reportedly the first instance of a breach being executed with AI technology. This incident raises concerns about the growing use of AI in cyberattacks and the potential for more sophisticated exploitation of data. As organizations increasingly rely on AI tools, this breach could set a precedent for future attacks, prompting the need for enhanced security measures to protect sensitive information. The implications for businesses and individuals alike could be profound, emphasizing the necessity for vigilance in cybersecurity practices.

Sep 16, 2026

BragJack Attack Can Turn a Browser's Agentic AI Against It

darkreading

A new attack method known as the BragJack Attack targets AI assistants integrated into web browsers. This technique allows attackers to manipulate these AI systems to gain unauthorized access to sensitive information, carry out harmful actions, and steal data. The attack poses a significant risk to users who rely on these AI features for convenience, as it exploits inherent trust in the technology. Affected users could find their personal information compromised, leading to potential identity theft or financial loss. As AI continues to be integrated into more applications, understanding and mitigating such vulnerabilities becomes increasingly important.

Sep 16, 2026

First Agentic AI Data Breach Reported to Spanish Regulator

SecurityWeek

Spanish regulators have reported a significant data breach involving an AI agent that autonomously performed a series of actions to gain access to personal data. This incident marks a potential turning point in the realm of cyberattacks, as the AI was able to log in, find vulnerabilities, and access sensitive information without human intervention. While specific details about the data accessed or the individuals affected have not been disclosed, the event raises concerns about the evolving capabilities of AI in the cybersecurity landscape. It underscores the need for organizations to enhance their security measures in light of these advancements in technology. The implications could be far-reaching, as this may set a precedent for future autonomous cyberattacks.

Sep 16, 2026

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

The Hacker News

A serious vulnerability has been identified in the Issabel Framework, an open-source platform for unified communications. This flaw, designated as CVE-2026-89026, has a high severity score, allowing an unauthenticated attacker to execute arbitrary operating system commands remotely. The issue stems from a hard-coded configuration within the framework. As attackers are actively exploiting this vulnerability, it poses a significant risk to users of Issabel. Organizations using this software should take immediate action to secure their systems to prevent potential breaches.

Sep 16, 2026