Critical Linux Kernel Vulnerabilities: Public Exploits Released
PremiumWorking public exploits released for four Linux kernel local-root flaws—patch promptly; unpatched systems remain at risk.
Monday, September 21
AI Uncovers Critical Vulnerability in Popular Software Decoder
PremiumHacktron used AI to find a widespread decoder flaw (HEIF/HEIC family) that enabled RCE affecting Meta and OpenAI repos.
Cisco's Urgent Patch for Active Exploit in Identity Services
PremiumCyberWire notes Cisco patched a maximum-severity zero-day and reports on Gyazo breach and other high-impact incidents.
Security Flaw in AI Coding Agents Exposes Risk of Malicious Plugin Swaps
PremiumPlugin4Shell allows repo owners to swap pinned plugin code, enabling supply-chain subversion of AI coding agents like Claude Code and Codex.
Critical Vulnerability in Check Point Software Exposes Systems to Root-Level Attacks
PremiumCheck Point released fixes for a critical vulnerability allowing remote code execution as root on management systems.
Steam Vulnerability Opens Door to SYSTEM Privilege Escalation on Windows
PremiumBrokenPipe PoC abuses Steam Client Service to silently escalate a local standard user to NT AUTHORITY\SYSTEM privileges.
Colorado Water Systems Breach Highlights Infrastructure Vulnerabilities
PremiumTwo privately managed Colorado water systems suffered cyber intrusions, highlighting operational and public-safety risks to utilities.
Global Fraud Network Dismantled by Turkish Authorities in Major Crackdown
PremiumTurkish authorities dismantled a transnational investment fraud network, arresting 201 suspects and seizing significant assets.
CISA Urges Immediate Action on Exploited Linux Kernel Vulnerabilities
PremiumCISA added multiple Linux kernel CVEs (including CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to KEV for immediate remediation.
North Korean Hackers Exploit 30,000 Devices, Steal Millions in Crypto
PremiumAdvisory links WaterPlum to at least 30,000 infected devices worldwide and over $10.7 million in stolen crypto transfers.
Revolut Breach and Cisco Vulnerabilities Highlight Ongoing Cybersecurity Threats
PremiumReports claim a Cisco Email Gateway zero-day was exploited while Revolut data breach details surfaced, indicating active user data exposure.
Supply Chain Attack on Brevo Compromises 100,000 Websites
PremiumCompromised Brevo API key deployed a Cloudflare worker to inject malware into about 100,000 websites.
Researchers Exploit AI to Breach OpenAI Accounts and Internal Code Repository
PremiumResearchers chained AI assistance and forum/login flaws to access OpenAI employee accounts and internal repositories; vendor patched issues.
Massive Data Breach Exposes 23 Million Gyazo User Records
PremiumAttackers exploited a Gyazo server flaw to exfiltrate roughly 23 million user records, prompting incident response.
Microsoft Fixes Critical Vulnerability in Azure AI Foundry
PremiumCVE-2026-85889 allowed unauthenticated privilege escalation in Azure AI Foundry; Microsoft released an urgent patch.
Friday, September 18
AI-Driven Multi-Stage Data Breach Uncovered in Spain
PremiumSpanish regulator AEPD reports first AI-agent-powered multi-stage data breach exfiltrating personal data via automated agent.
BIND 9 Update Addresses Critical Security Vulnerabilities
PremiumISC patched 14 BIND 9 vulnerabilities, including unauthenticated DoH crash and cache-poisoning risks affecting DNS servers.
AI Agents' Self-Modification Raises Security Concerns
PremiumResearch finds AI agents can retrain and redeploy models mid-task, risking secret leakage and removal of safety refusals.
AI Coding Assistant Hijack Leads to Major Security Breach
PremiumAttacker hijacked an AI coding-assistant session to poison recommendations and spread Shai-Hulud across ~100 internal repositories, stealing secrets.
Critical Vulnerabilities in TP-Link Cameras Expose Privacy Risks
PremiumOPSWAT researchers found two zero-days in TP-Link cameras that enable remote eavesdropping and data exposure.
Get these articles delivered to your inbox.
Subscribe free