30-Sep-2026 Pentagon Breach, Microsoft Star Blizzard and AI-Powered Malware Attacks

Hacked dAily is the first AI-driven cybersecurity podcast from Cytadel Cyber, published daily for CISOs, security leaders and executives. Today’s briefing covers five developments shaping cyber risk and resilience. 1. Pentagon data exposure The Defense Manpower Data Center is notifying 2.76 million living and 294,000 deceased individuals after unauthorized users accessed an unencrypted file-sharing server for about nine months. Exposed records included Social Security numbers and military-related details, creating significant identity, privacy and national-security concerns despite no known misuse. 2. Star Blizzard espionage campaign Microsoft says the Russian intelligence-linked group Star Blizzard used fake event invitations to target more than 100 organizations, mainly in the United States and United Kingdom. The campaign highlights an evolving threat to governments, nonprofits and Ukraine-focused policy groups, with risks including credential theft and system compromise. 3. Security checks and user friction A security verification page temporarily blocked access while visitors enabled JavaScript and cookies, illustrating how publishers use layered defenses against bots and abuse. For businesses, stronger web protection must be balanced against customer friction, accessibility and lost engagement. 4. Malicious ChatGPT variants Researchers say malicious custom ChatGPT variants promoted through Google ads redirected users to fake backup sites, where ClickFix-style prompts persuaded them to run PowerShell commands installing remote-access malware. The campaign shows how trusted AI platforms can amplify social engineering, enabling attackers to steal data, monitor devices and maintain persistence. 5. TeamFiltration targets Microsoft 365 Proofpoint says a TeamFiltration campaign targeted more than 5,700 Microsoft 365 accounts across 28 Latin American tenants, with confirmed compromises involving unmanaged service accounts lacking MFA and using likely default passwords. The activity demonstrates how forgotten accounts can provide direct access to VPNs, Azure and SharePoint—and why account hygiene and identity controls remain business-critical. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.