Tuesday 15 September 2026Paper No. 1,386

Evening EditionRSS

ZOTPAPER

News without the noise

Security

164 articles · page 1 of 2

All AI Hardware & Devices Crypto Programming Security

Viewgrid list compact

OpenAI agents implicated in malicious RubyGems package attack

GPG Vulnerabilities Remain Unpatched, Researcher Claims in Post-CCC Talk

Revolut confirms customer data breach via fake government requests

Dutch NCSC Warns Imminent Exploitation of Critical Check Point VPN Flaws

Reports Claim OpenAI Agents Conducted Undisclosed Attack on RubyGems

13 Sept· 2 sources

OpenAI Agents Attacked RubyGems Software Service Months Before Hugging Face Hack, Researchers Say

JFrog Artifactory bugs under active exploitation as attackers chain flaws to seize admin control

Anthropic Reports Hackers Abused Claude AI to Steal Secrets from 1.8 Million Android Apps

Microsoft Warns of Passkey-Themed Phishing Attacks Targeting Corporate 365 Accounts

Ukrainian lawyer turned Conti ransomware coder sentenced to 4 years in US prison

EU Cyber Resilience Act's 24-hour vulnerability reporting rule takes effect

JFrog Artifactory Flaws Exploited in the Wild, Rust Backdoor Deployed

ClickFix attacks go viral as malware pushers exploit fake CAPTCHA overlays

US lawmakers urge secretive British court to open up Apple encryption case

GitLab Urges Immediate Patching of Maximum-Severity Path Traversal Flaw

Ukrainian national sentenced to four years for role in Conti ransomware attacks

New Android Malware Mantax Otax Combines Ransomware and Spyware to Encrypt Data and Steal Information

Surfshark VPN Discloses Breach of Internal Test Server After Configuration Error

AI agents used in widespread PaperCut exploit campaign, hitting 395+ organizations

Insecure by Default: Study Finds 1 in 5 MCP Access Policies Broken or Missing

Cisco Firewall Management Center Flaws Used by Ransomware Gangs and State-Sponsored Hackers

McKesson data breach affects 6.4 million individuals, ShinyHunters leak reveals

Minecraft-Met Crypto Gang Leader Pleads Guilty in $245 Million Heist

IDScan confirms breach linked to 153 million stolen driver’s licenses

11 Sept· 2 sources

CISA warns ransomware gangs exploiting critical WatchGuard firewall flaw

BlueMoon exploit kit spreads to at least four cyber-espionage groups, researchers say

10 Sept· 3 sources

AdaptHealth Confirms Data Breach Exposed 4.1 Million Patients

Cisco Confirms Active Exploitation of Maximum-Severity Secure FMC Flaw

Sydney Man Charged Over Court Data Breach Allegedly Used AI for Coding and Legal Advice

U.S. Lawmakers Urge Ban on Three Indian Hack-for-Hire Firms

Check Point uncovers covert data-stealing channel in OpenAI's internal Artifactory

Hackers stealing Claude AI tokens from subscribers via infostealer malware

9 Sept· 2 sources

Microsoft Patches Nearly 1,000 Vulnerabilities in Record-Breaking September Update

DoppelCart: 119,000 fake online shops caught stealing payment card data

Hackers Deploy Linux Rootkit to Breach F5 BIG-IP APM Devices, Inject Fileless Web Shell

Microsoft September 2026 Patch Tuesday Breaks Records with Nearly 1,000 Vulnerabilities Fixed

9 Sept· 2 sources

Microsoft's September 2026 Patch Tuesday fixes record 966 flaws, two actively exploited zero-days

Microsoft Shatters Patch Tuesday Record with 974 CVEs, Two Zero-Days Already Exploited

9 Sept· 3 sources

SAP patches maximum-severity 'OVERPASS' kernel vulnerability, critical S4GET auth bypass

Google warns extortion crews targeting AI data as new attack surface emerges

Over 220 Million Traveler Records Exposed in Vietnam-Linked APIS Database Leak

Adobe Issues Emergency Fix for Magento StyleSmuggler Zero-Day Exploited in the Wild

8 Sept· 2 sources

BigBear 2.0 phishing panel still online but infrastructure dark for three weeks, researchers say

8 Sept· 2 sources

UK peers push for personal liability for executives in Cyber Security Bill

ConnectWise Warns of Unpatched ScreenConnect Vulnerability, Provides Temporary Mitigation

UK food supply chain vulnerable to cyber-attacks, warns National Audit Office

MikroTik RouterOS zero-days exploited in the wild; CERT Poland warns of 'MikroTrick' attacks

Mathspace confirms breach affecting 1.08 million amid wider wave of Metabase attacks

7 Sept· 2 sources

N-able Patches Max-Severity RCE Flaw in N-central Amid Active Exploitation Reports

US Military Location Data Still Leaking Despite Ad ID Ban, Lawmakers Demand Probe

Over 5,400 Hacked Websites Serve ClickFix Malware Stored on Blockchain

US military removes ad trackers from personnel devices after location data security fears

5 Sept· 2 sources

IDScan Hit With Lawsuits Over Breach Exposing 153 Million Driver's Licenses

Critical Citrix NetScaler authentication bypass flaw now exploited in attacks

US Military Disables Ad Tracking on Troops’ Devices After Location Data Targeted Attacks

39 New Attack Methods Target Passkey Authentication Infrastructure

Researcher Releases CrowdStrike Falcon Zero-Day Exploit Dubbed 'FalconFlank' for SYSTEM Privileges

Vulnerability in Voting Scanners Allows Ballot Order Recovery Using AI

OpenAI pledges $1B in AI credits to help defend critical infrastructure from cyberattacks

Security researcher releases exploit for CrowdStrike Falcon, other endpoint security products

French Hospital Fined €500,000 Over Data Breach Exposing Records of 727,000 Patients and Relatives

Senator Urges NSA to Issue Public Guidance on VPN Best Practices

Coder's Cloudflare Infrastructure Breached in Supply Chain Attack on Terraform Modules

HPE Patches Critical Remote Code Execution Vulnerability in ArubaOS-CX

Flock Teach Cops How to Surveil Protests with 'No Kings' Rally as Case Study

Critical Elementor Pro Vulnerability Exploited to Hijack WordPress Sites

Plex Urges Immediate Patch for Multiple Security Vulnerabilities

Fishbrain breach exposes password hashes, salts of millions of anglers

Dark Web Platform Exposes 153 Million Driver’s Licenses; FBI Investigating

AI agents orchestrate entire ransomware attack in under 10 hours, leaving 80-page security audit

Palo Alto Networks Acquires Console for $500M, Adding AI Agents to Cortex Security Platform

3 Sept· 3 sources

Massive ID Document Data Breach Suspected After Dark Web Site Emerges with 150M Records

SQL Injection Flaw in WordPress Backup Plugin Exposes Millions of Sites to Takeover

SonicWall SMA1000 appliances under active attack from chained zero-days

FBI Investigates Massive Driver’s License Leak; ID Verification Firm IDScan Emerges as Suspected Source

3 Sept· 2 sources

Dropbox warns 5,000 users of account compromise via legacy Lenovo login integration

Dropbox accounts compromised via Lenovo email verification flaw, 5,000 affected

Hackers exploit BGP hijacking in supply chain attack targeting Softaculous users

UK Government Rejects Lords' Bid to Bring AI Vendors Under Cyber Security Bill

Researchers trick Fortune 500 AI agents into running malicious code via llms.txt files

US charges Russian national in malware campaign that hit 80,000 freelancers

Global Law Enforcement Dismantles Sality Botnet After Two Decades

International Operation Disrupts 23-Year-Old Sality Botnet, Targeting Cryptocurrency Theft

Rogue AI agents hijacked German wiki for coordination, researchers reveal

2 Sept· 2 sources

Nexus Dark Web Service Offers 153M+ Drivers Licenses as FBI Investigates Ongoing Breach

2 Sept· 3 sources

Phishing Attack Abuses Legitimate Faronics Deploy Tool to Install ScreenConnect Remote Access

Critical Langflow flaw actively exploited to steal OpenAI and AWS credentials

BGP Hijack Targets Virtualizor Update System, Malicious Patch Delivered to Small User Base

Aesto Health breach exposes 9.5 million patients, adding to wave of healthcare cyberattacks

2 Sept· 2 sources

33-hour BGP hijack targets Softaculous, delivers malware to Virtualizor installations

Nearly 22,000 Microsoft Exchange Servers Still Unpatched Against Critical Hijack Vulnerability

Nutex Health confirms patient data stolen in ransomware attack; The Gentlemen group claims responsibility

PaperCut zero-days exploited in data theft attacks after emergency patches

Healthcare Cyberattacks Disrupt Pacemaker Remote Monitoring, Expose Millions of Patient Records

Microsoft Warns of 'TerminalFix' ClickFix Variant Using Reverse Tunnels for Network Intrusions

Chinese Fire Ant hackers turn Cisco routers into covert spying platforms