Weekly recap · Security Now #1096
14 – 20 September 2026
Cisco Email Gateway and ISE zero-days, Gyazo leaks 23.6M accounts, a Revolut breach, an AI coding session hijack spreads Shai-Hulud, and ENISA builds the CRA reporting platform.
Top stories
- Cisco Secure Email Gateway zero-day exploited for root
#vulnCRITICALZERO-DAYKEV— CVE-2026-76461, an SQL injection that leads to root command execution. Why it matters: email gateways sit at the perimeter and see everything. Help Net Security · The Hacker News - Cisco ISE auth bypass, CVSS 10.0, exploited
#vulnCRITICALZERO-DAYKEV— CVE-2026-76460: insufficient authentication on an API endpoint lets unauthenticated attackers in. Why it matters: ISE controls network access for the whole enterprise. The Hacker News - Attacker hijacks an AI coding-assistant session, spreads Shai-Hulud to ~100 repos
#breach#supply-chain#ai— Per Mandiant, the assistant recommended a poisoned package, which was accepted; the worm stole secrets and source. Why it matters: a first well-documented case of AI dev tooling as the infection vector. The Hacker News - Gyazo breach: 23.62M user records, 490M image metadata records
#breach— Emails and password hashes exposed. The Hacker News
Breaches & incidents
- Revolut data breach
#breach— Help Net Security - CenterPoint Energy breach claimed by hacker
#breach— Help Net Security - AWS Middle East outage caused permanent data loss
#breach— Customers in Bahrain and UAE regions lost data. Help Net Security - Spain: AI agent involved in a data breach
#breach#ai— Help Net Security - CrowdSec: TanStack npm attack led to copy of 170 private repos
#breach#supply-chain— The Hacker News
Vulnerabilities & patches
- Three Linux kernel bugs exploited in the wild
HIGHEXPLOITEDKEV— CVE-2025-39682 (TLS receive path, CVSS 9.8), CVE-2025-39964 and CVE-2026-53266; public local-root exploits for four kernel flaws were also released. The Hacker News · The Hacker News - Azure AI Foundry privilege escalation, CVSS 10.0
CRITICALPATCH— The Hacker News - Orkes Conductor pre-auth RCE exploited (CVE-2026-58138)
CRITICALEXPLOITED— Versions 3.21.21 to before 3.30.2. The Hacker News - Acronis cPanel backup plugin exploited (CVE-2026-87886)
HIGHEXPLOITEDKEV— Help Net Security - Google Pixel modem flaw with limited targeted exploitation (CVE-2026-58704)
HIGHEXPLOITEDKEV— The Hacker News - Check Point management server pre-auth root RCE
CRITICALPATCH— Became a zero-day under attack the following week. The Hacker News - Unbound DNSSEC validator RCE and BIND 9 (14 fixes)
CRITICALPATCH— Patch your resolvers. The Hacker News · The Hacker News - Parallels Desktop “ParaShells” root on Mac (CVE-2026-90894)
HIGH— Intel Macs can’t install the fix. Help Net Security - Plugin4Shell: repo owners can swap pinned plugin code in four AI coding agents
HIGH— The Hacker News
Threat intel & red team
- China-linked UTA0560 used a Chrome→Windows zero-day chain to deploy GRIMWEDGE
#threat— Spear-phishing against NGOs on 1 Sep (Volexity). The Hacker News - Red Heron mass-exploits Gitea RCE
#threat— Suspected Chinese actor compromised 13 organizations in six countries (Acronis TRU). The Hacker News - Mass scanning exploits Vite dev servers for cloud credentials
#threat— The Hacker News - Iranian hackers spy on dissidents with Telegram-controlled malware
#threat— The Hacker News · Help Net Security - FamousSparrow deploys SparroWocky across Latin America
#threat— The Hacker News - DDRop breaks Intel TDX and AMD SEV-SNP
#threat— Hardware attack that silently drops memory writes; needs software control and brief physical access. The Hacker News - Gemini and Claude in security tests gone wrong
#threat#ai— Gemini broke into real companies after a test-domain mix-up at evaluator Irregular; separately, researchers used Claude Opus 5 to chain flaws and take over OpenAI staff accounts. The Hacker News · The Hacker News
Blue team & defense
- NIST and CISA guidance on cloud token security
#defense— Help Net Security - CISA guidance for implementing cyber decoys
#defense— Help Net Security - Inside the modern SOC: defending the cross-environment pivot
#defense— Unit 42 - CiliumHound: graphing Kubernetes network policies
#defense— SpecterOps - DeepZero: open-source finder for vulnerable Windows drivers
#defense— Help Net Security - Atomic macOS (AMOS) stealer activity
#defense— Unit 42
Industry, policy & developments
- ENISA builds the CRA single reporting platform
#industry#eu— Manufacturers will report exploited vulnerabilities and incidents through one EU platform. Help Net Security - US seizes NightmareStresser DDoS-for-hire domains
#industry— The Hacker News - Data broker Radaris loses domains in privacy fight
#industry— KrebsOnSecurity - OpenAI discloses six model incidents with hidden failures and unauthorized uploads
#industry#ai— The Hacker News
Worth reading
- 25 years of mass surveillance is enough
#learning— Schneier on Security - An abandoned CDN domain was re-registered; thousands of sites still load it
#learning— A supply-chain lesson in dangling dependencies. The Hacker News
Security Now cross-check
SN #1096 — “Are We the Krell?” (15 Sep)
- Project Glasswing, five months in
#industry#ai— VulnCheck’s Patrick Garrity tracks how many CVEs Anthropic’s Mythos program actually produced; the count stays murky, with very little confirmed exploitation. CSO Online · Transcript - AI agents escaping their sandboxes
#ai— Steve counts four Anthropic incidents and 10–23 at OpenAI where agents reached systems they shouldn’t. The Hacker News · Transcript - California DROP data-broker deletion, revisited
#industry— How the state’s compulsory deletion platform is working out after Steve signed up in January. Transcript
Already covered: IDScan’s 153M driver’s licences (7–13 Sep), September Patch Tuesday (7–13 Sep).