🐛 COMMON VULNERABILITIES AND EXPOSURES 6[−]
24 SepCISA outlines improvement plan for CVE programThe white paper is the latest step in trying to create a “Quality Era” for the Common Vulnerabilities and Exposures (CVE) program as the number of CVEs surges. The post CISA outlines improvement plan for CVE program appeared first on CyberScoop .CYBERSCOOP.COM
24 Sep KEVCheck Point hacked: The security software protecting your network has become a prime attack targetA firewall is supposed to be the barrier between attackers and the enterprise network, but that barrier can itself become a threat actors’ tool. Check Point has revealed that attackers are actively exploiting two vulnerabilities in its Security Gateway and Security Management pro…CSOONLINE.COM
24 SepUbuntu kernel CVE fixes are moving to a weekly release scheduleUbuntu kernels will ship every week under a new release schedule from Canonical, which is merging its four-week cycle for regular Stable Release Updates (SRUs) and its two-week cycle for security fixes into a single two-week cycle. The cycles overlap, each starting a week after t…HELPNETSECURITY.COM
24 SepCritical WordPress Vulnerability Exploited Immediately After DisclosureTracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code. The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek .SECURITYWEEK.COM
24 SepAttackers Exploit WordPress CVE-2026-87902 Within Hours of DisclosureThreat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauth…THEHACKERNEWS.COM
24 SepSolarWinds Patches Critical RCE Flaws in Observability Self-HostedThe vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication. The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek .SECURITYWEEK.COM
⚠️ VULNERABILITY DISCLOSURE 9[−]
24 SepEurope’s technology backbone is becoming a cyber targetDisruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipula…HELPNETSECURITY.COM
24 Sep404: scam not found.This week, hosts of N2K CyberWire Maria Varmazis and …THECYBERWIRE.COM
24 SepWhat to do first when you get 90 days to secure AI agent dataIn this interview with Help Net Security, Kelly Herrell, CEO at Nol8, explains where AI agents create exposure inside organizations. The first thing to examine is the data path: what an agent can reach, what enters its context, and where results go. Ticketing systems, CRM platfor…HELPNETSECURITY.COM
24 SepTeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default PasswordsCybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial …THEHACKERNEWS.COM
24 SepGNOME 50.5 security fixes patch a gvfs CVE and Epiphany code injectionGNOME 50.5, which the GNOME Release Team shipped on September 24, patches a CVE in the gvfs file system layer, a JavaScript injection flaw in the Epiphany web browser and a use-after-free bug in the librsvg image library. The release updates 22 modules. Users who browse with Epip…HELPNETSECURITY.COM
24 SepAviation solved the vigilance problem. AI just gave security a worse oneAn air traffic controller watching a busy scope will, sooner or later, miss the one aircraft that matters. Sustained attention decays under load, a limit aviation named the vigilance decrement and has spent seventy years designing around. AI has moved every knowledge worker into …CSOONLINE.COM
24 SepOpenAI hacked Australian Medicare govt site, probed data providersOpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as part of a research project. [...]BLEEPINGCOMPUTER.COM
24 Sep17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on disk. Our new global threat report traces the technique from a novelty in late 2023 to a subscription product with on-chain infrastructur…THEHACKERNEWS.COM
24 SepCISA: Ransomware gangs now exploiting critical TeamCity flawThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability patched in July. [...]BLEEPINGCOMPUTER.COM
📋 SECURITY BULLETINS 1[−]
24 SepMicrosoft fixes bug that broke Windows File History backup featureMicrosoft has fixed a known issue that breaks the built-in File History backup feature on some Windows systems after installing the September 2026 security updates. [...]BLEEPINGCOMPUTER.COM
📢 SECURITY ADVISORIES 3[−]
24 SepOpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public FilesAn AI agent on an internal OpenAI research task bypassed access controls on an Australian government Medicare statistics portal in June, Prime Minister Anthony Albanese said. The portal publishes aggregate figures, such as spending, and is separate from the systems that hand…THEHACKERNEWS.COM
24 SepOpenAI agent breached Australian govt. site after bypassing access blocksAn OpenAI research agent gained unauthorized access to an Australian government Medicare statistics portal in June after repeatedly encountering access restrictions and finding ways around them, Prime Minister Anthony Albanese said on Thursday. The agent accessed both public and …CYBERINSIDER.COM
24 SepAn OpenAI Agent Hacked Australia's Health Service. Their Government Found Out Months Later.The country's prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether OpenAI broke the law.WIRED.COM
🔥 INCIDENT REPORTING 6[−]
24 SepCan you trust AI with critical infrastructure?In traditional IT, isolating a compromised endpoint can stop an attack. In operational technology (OT) environments, that same action could disrupt control of a pipeline, cause a rupture, or trigger environmental damage. That’s why adopting AI in critical infrastructure requires …THECYBERWIRE.COM
24 SepClaude.ai is about 3x faster after 3,000+ changesAnthropic engineers made claude.ai and the Claude desktop app roughly three times faster during a two-week sprint in August, with Claude finding the bottlenecks and writing the fixes. The team merged more than 3,000 changes and says none of them caused a customer-facing incident …HELPNETSECURITY.COM
24 SepUS Court Sentences Armenian Man to Prison for Ryuk Ransomware AttacksKaren Vardanyan has also been ordered to pay over $1.2 million in restitution to victims. The post US Court Sentences Armenian Man to Prison for Ryuk Ransomware Attacks appeared first on SecurityWeek .SECURITYWEEK.COM
24 SepHow tax policy can stop threat actors from breaching US water systemsNew federal programs take years to launch and fund. State and local governments need cybersecurity software now. The One Big Beautiful Bill already enables tax incentives. Congress should clarify and deploy them. The post How tax policy can stop threat actors from breaching US wa…CYBERSCOOP.COM
24 SepAstrana Health Data Breach Impacts Private, Confidential InformationHackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers. The post Astrana Health Data Breach Impacts Private, Confidential Information appeared first on SecurityWeek .SECURITYWEEK.COM
24 SepOpenAI Agent Hacks Australian Medicare PortalAustralian PM Anthony Albanese criticized OpenAI’s response to the incident, which occurred in June 2026INFOSECURITY-MAGAZINE.COM
🕵️ THREAT INTELLIGENCE 8[−]
24 SepISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
24 SepSrsly Risky Biz: Bring on the AI lawsuitsTom Uren and Patrick Gray talk about US Treasury Secretary Scott Bessent ruling out liability exemptions for AI companies. Its a good move. Leaving the companies on the hook keeps the pressure on them to do better with their cyber security and testing controls. They also discuss …RISKY.BIZ
24 SepYour security program knows about the firewall, but does it know about the elevator?By early August, attackers had hit water systems in at least seven U.S. states. The FBI and EPA said the intruders remotely accessed internet-facing programmable logic controllers, the small industrial computers that run pumps and valves. Operators lost monitoring or control, and…HELPNETSECURITY.COM
24 SepApple’s new iOS 27 feature looks for signs you’re being scammedApple introduced a scam-prevention feature called Impersonation Risk Detection with iOS 27 and iPadOS 27. The feature allows supported apps to request a risk assessment when a user takes an action that could be connected to an active social engineering scam. “Impersonation Risk D…HELPNETSECURITY.COM
24 SepNew Android malware RemControl steals banking PINs and blocks removal attemptsA new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than 30 banks in Italy, France, Spain, Polan…HELPNETSECURITY.COM
24 SepGoogle plans to give Private AI Compute a memory that follows users across devicesGoogle plans to add private, server-side memory to Private AI Compute, enabling AI assistants to maintain continuity across devices while providing privacy protections normally associated with on-device processing. Private AI Compute is Google’s cloud platform for processing sens…HELPNETSECURITY.COM
24 SepOpera’s free VPN now turns on automatically on public Wi-FiOpera is rolling out an update to its built-in VPN that can automatically activate when its desktop browser detects a public or unsecured Wi-Fi network. The feature remains opt-in and is initially becoming available to Opera users in the United States and France. The change is de…CYBERINSIDER.COM
24 SepBegin at the End: How to Enable Agentic RemediationAgentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. The post Begin at the End: How to Enable Agentic Remediation appeared first on SecurityWeek .SECURITYWEEK.COM
🌐 CYBER THREAT LANDSCAPE 2[−]
24 SepCLOSEDQUORUM, the malware that asks four AI models what to do nextCisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required. Cisco Talos found malware, dubbed CLOSEDQUORUM, that holds a vote before deciding what to steal from you. Four AI models vote on its next move, with…SECURITYAFFAIRS.COM
24 SepMacSync under the microscope: new delivery methods and a new payloadWe look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.SECURELIST.COM
📡 INFOSEC NEWS 6[−]
24 SepWhen digital tools get it wrong.This week, Dave and Ben sit down to look at a recent court ruling which has rejected limits on cell phone border searches. Additionally, the two look at another case where a woman was falsely accused of bank robbery after an AI facial recognition system misidentified her and is n…THECYBERWIRE.COM
24 SepOne URL, Three Different Tricks, (Thu, Sep 24th)Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is the defanged link:
ISC.SANS.EDU
24 SepGoogle’s location data privacy failures draw a €403 million fineTurning off Location History did not necessarily stop Google from recording where users went. Ireland’s privacy regulator has now fined the company €403 million.MALWAREBYTES.COM
24 SepData Overtakes Skills as Top Threat Hunting Challenge, SANS Study FindsSANS Institute report claims data rather than skills is now the main hurdle for threat huntersINFOSECURITY-MAGAZINE.COM
24 SepOver 75% of Organizations Experience Microsoft 365 Governance IssuesShareGate study claims to reveal a governance ‘crisis’ as AI usage growsINFOSECURITY-MAGAZINE.COM
24 SepUK Government Shifts to Service-Led Cyber Governance After Stinging AuditWhitehall is shifting from mandatory cyber controls to service-led governance following a critical audit exposing failures of its 2022 cyber strategyINFOSECURITY-MAGAZINE.COM