AWS confirms permanent data loss across Bahrain and one UAE zoneFederal cyber teams boarded two oil tankers after network breachesCisco ISE zero-day requires patching and compromise reviewHijacked AI coding session became a software-supply-chain path
AWS confirms permanent data loss across Bahrain and one UAE zone
AWS says data hosted exclusively in its Bahrain region and one UAE availability zone cannot be restored, converting a prolonged outage into a permanent-loss event.
Security.io Intelligence Desk · Friday, 18 September 2026
Executive consequence
The original physical attacks were known, but AWS’s new determination establishes that some customer resources and data are permanently unrecoverable.
Decision today
Run restore tests from copies held outside Middle East (Bahrain) and Middle East (UAE).
The FBI and U.S. Coast Guard disclosed that specialised teams boarded two oil tankers after indications of network compromise. No physical, environmental or operational impact was reported, and responsibility remains unresolved.
Do today
Verify every vessel-to-shore network, remote-support and data-exchange path.
CVE-2026-76460 affects Cisco ISE and ISE-PIC regardless of configuration. Cisco confirmed exploitation, published fixed releases and provided an access-log hunt; potentially compromised nodes require investigation rather than patch-only closure.
Do today
Inventory every Cisco ISE and ISE-PIC node and record exposure.
An unnamed SaaS provider reportedly suffered repository-wide malware spread after an attacker hijacked an active coding-assistant session. Public evidence identifies the sequence and approximate scale but not the assistant, model, packages, indicators or victim.
Do today
Inventory coding assistants with package-install, shell or repository-write access.
CISA published introductory guidance for implementing cyber decoys alongside Zero Trust. It is voluntary, product-neutral and focused on generating high-fidelity evidence of activity that should have no legitimate explanation.
Do today
Select one attack path where legitimate decoy interaction should be zero.
