Vol. 1 · No. 001Week of September 21, 2026
Threat Brief/ The Wire
Sorted automatically. Filtered by you.
Refreshed 07:26 UTC
From this link

Everything

Everything · Last 14 days

RSS
Customize1

Stack

Identity & cloud
Network edge
Endpoints
Web & code
Campus systems
Research AI

Topics

Sources

Show
Window
Order
Reset
CampusHeadlineSourceAgeCVEBrief
MED Android’s October 2026 Updates Patch 25 Vulnerabilities SecurityWeek 32m —
MED Atlassian Patches Critical Vulnerability Affecting 8 Products SecurityWeek 51m —
LOW AI Agent Gateway: Open-source tool keeps credentials out of agent configs Help Net Security 2h —
LOW OpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing Help Net Security 2h —
LOW AI endpoint management: Visibility, compliance, and remediation Help Net Security 2h —
HIGH Even with OT network visibility, critical infrastructure operators struggle with legacy equipment Help Net Security 3h —
LOW Automation, AI agents or people? Sorting out who handles each security finding Help Net Security 3h —
LOW Check your X.Org server version because a dozen vulnerabilities have been patched Help Net Security 4h CVE-2026-93524 +1
LOW Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System SecurityWeek 6h —
LOW ClickFix Attacks Evolve to Better Hide Malicious Payloads Dark Reading 11h —
MED Critical Healthcare Systems Aren't Quantum-Ready Dark Reading 11h —
MED Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes The Hacker News 13h —
LOW Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan The Hacker News 13h —
LOW Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps Dark Reading 14h —
LOW IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams Dark Reading 14h —
LOW 'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates Dark Reading 14h —
LOW Alleged ATM malware creator appears in Nebraska court after arrest The Record 16h —
LOW South Korean officials believe AI agents were used to hack several banks The Record 16h —
LOW ClickFix Attack Hides VBScript Payload in Browser Cache Infosecurity Magazine 16h —
HIGH Osaka Metropolitan University cancels classes after suspected ransomware attack The Record 17h —
LOW FBI Blames Contractor’s Missed Patch for ShinyHunters Breach SecurityWeek 17h —
MED CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely Security Affairs 17h CVE-2026-96940
MED Nikkei Discloses Two Employee Cloud Account Compromises Infosecurity Magazine 17h —
LOW Anaconda combines agent swarms with autonomous security testing Help Net Security 18h —
LOW Rogue OpenAI agents made unauthorized Wikipedia edits and millions of requests to Wikimedia Help Net Security 18h —
LOW AppViewX targets shadow AI risks with agent discovery and runtime enforcement Help Net Security 18h —
LOW New Relic adds terminal-based investigation and recovery checks with Ground Truth CLI Help Net Security 18h —
LOW ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware The Record 18h —
MED More RMM Tools In the Wild, (Tue, Oct 6th) Exploited SANS ISC 18h —
LOW Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities Infosecurity Magazine 18h —
LOW FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware SecurityWeek 19h —
MED Critical Medical Devices Unable to Support PQC Transition Infosecurity Magazine 19h —
LOW LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings The Hacker News 20h —
MED Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks SecurityWeek 20h —
LOW ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise Infosecurity Magazine 20h —
LOW Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies The Hacker News 20h —
MED Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers The Hacker News 20h —
MED Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 SecurityWeek 20h —
LOW Long-Running NPM Malware Campaign Accumulates 40,000 Downloads SecurityWeek 21h —
LOW 8.8 Million Impacted by Data Breach at Denmark’s Central Person Register SecurityWeek 22h —
LOW FBI Drops Accenture Contractor After Sensitive Data Breach Security Affairs 22h —
LOW Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports The Hacker News 22h —
LOW Police Urge Passkey Use After Surge in Cybercrime Profits Infosecurity Magazine 22h —
LOW Social Engineering Detection Moves Into the Live Conversation SecurityWeek 23h —
MED Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds Infosecurity Magazine 23h —
MED Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access Security Affairs 24h CVE-2026-86360
MED Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products The Hacker News 24h CVE-2026-21589
LOW FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach The Hacker News 25h —
MED ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure Security Affairs 25h —
LOW Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account The Hacker News 25h —
MED ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits The Hacker News 26h —
LOW Shares in British clothing company ASOS dive after hackers apparently send push notification The Record 27h —
LOW ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes Dark Reading 34h —
MED Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It. Exploited Security Affairs 37h CVE-2026-61500
MED Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes The Hacker News 39h CVE-2026-96940
HIGH Chinese Hackers Impersonate US Officials for AI Cyber Espionage Dark Reading 40h —
LOW ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes Infosecurity Magazine 41h —
HIGH ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests Exploited The Hacker News 41h —
LOW New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic Infosecurity Magazine 41h —
LOW Denmark ’s Population Registry Breached, 8.8 Million Affected Security Affairs 42h —
HIGH Citrix NetScaler Targeted Via New Zero Day Exploited Infosecurity Magazine 42h —
HIGH U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog Exploited Security Affairs 42h CVE-2026-88779
LOW Need for Speed: AI-Driven Attacks Are Changing Security Strategies Dark Reading 42h —
LOW The Credential Layer Is Expanding Faster Than Security Teams Can See It The Hacker News 44h —
MED Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 The Hacker News 44h —
MED Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access The Hacker News 45h —
LOW Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports Infosecurity Magazine 45h —
LOW More UK Schools Are Recovering Faster from Cyber Incidents Infosecurity Magazine 46h —
MED MI5 Raises Alarm Over Chinese Funding of UK Academic Research Security Affairs 46h —
HIGH Frontline Education Breach Impacts K-12 School District Staff Infosecurity Magazine 46h —
HIGH Iranian hacker accused of draining 31TB from university inboxes extradited to the US Security Affairs 47h —
MED Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE The Hacker News 47h CVE-2026-61500
LOW Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns Security Affairs 2d —
HIGH New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline Exploited The Hacker News 2d CVE-2026-88779
LOW TTY Logs and the Data it Captures, (Sun, Oct 4th) SANS ISC 2d —
LOW User Agent Strings Curiosities, (Sun, Oct 4th) SANS ISC 3d —
LOW ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members The Hacker News 3d —
HIGH China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing The Hacker News 3d —
LOW YARA-X 1.21.0 Release, (Sat, Oct 3rd) SANS ISC 4d —
LOW MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics The Hacker News 4d —
HIGH Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware The Hacker News 4d —
LOW The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations The Hacker News 4d —
LOW RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail Dark Reading 4d —
HIGH GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers The Hacker News 5d —
MED Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign The Hacker News 5d —
MED Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes Exploited The Hacker News 5d CVE-2026-63688
HIGH Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response Exploited Dark Reading 5d —
MED SWIFT Banking & Government Middleware Enables RCE Dark Reading 5d —
LOW Is Your Organization Ready for 2027's AI Accountability Era? Dark Reading 5d —
LOW Is It Fair to Blame 'Rogue' AI for Security Failures? Dark Reading 5d —
LOW Microsoft: AI Cuts Post-Compromise Attack Time to Minutes Infosecurity Magazine 5d —
LOW Vulnerability Backlogs Are an Ownership Problem Dark Reading 5d —
LOW Malicious Linux Implants Mimic Asian Mail Security Products Dark Reading 5d —
LOW OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling The Hacker News 5d —
LOW Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report The Hacker News 5d —
MED Police Target KillSec Ransomware Group with Arrests and Seizures Infosecurity Magazine 5d —
MED Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure Exploited Infosecurity Magazine 5d —
LOW Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools The Hacker News 5d —
HIGH Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes Exploited The Hacker News 5d CVE-2026-104286
MED Alleged KillSec Ransomware Mastermind a 16-Year-Old Dark Reading 5d —
MED Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers The Hacker News 6d —
MED ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories Exploited The Hacker News 6d —
MED WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory The Hacker News 6d —
HIGH Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation Exploited Infosecurity Magazine 6d —
MED China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders Infosecurity Magazine 6d —
MED CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer Infosecurity Magazine 6d —
MED Warlock Ransomware Hits Large Spanish, Portuguese Orgs Dark Reading 6d —
LOW How Financial Services Companies Can Modernize Their Software Supply Chain The Hacker News 6d —
LOW OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates The Hacker News 6d —
HIGH CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV Exploited The Hacker News 6d CVE-2026-76504
LOW AI Threats Top Cybersecurity Preparedness Gap, PwC Finds Infosecurity Magazine 6d —
LOW Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version The Hacker News 6d —
LOW MI5 Warns Over 100 Academics Helped China's Espionage Plans Infosecurity Magazine 6d —
LOW Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path The Hacker News 6d CVE-2026-86950
LOW ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st) SANS ISC 6d —
HIGH Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Exploited The Hacker News 6d —
MED MetaMask Security Incident Prompts Exit of Affected Ethereum Validators Exploited The Hacker News 6d —
HIGH Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs The Hacker News 6d —
LOW Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure Dark Reading 6d —
LOW Trump, Tech Giants Strike Voluntary AI Safety Accord Dark Reading 6d —
LOW As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half Dark Reading 7d —
MED Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net Dark Reading 7d —
MED AI-Found Vulnerabilities More Likely to Enable RCE, Google Says Infosecurity Magazine 7d —
LOW Trump, Six AI Giants Sign 'Super Intelligence' Safety Accord Infosecurity Magazine 7d —
LOW AI Boosts SOC Analyst Capacity but Limits Skill Development Infosecurity Magazine 7d —
LOW Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware Infosecurity Magazine 7d —
MED Apple Patches CoreGraphics Zero Day Exploited in Attacks Exploited Infosecurity Magazine 7d CVE-2026-86950
MED South Africa Seeks Help After Cyberattack Targets Air Traffic Control Dark Reading 7d —
MED Apple Zero-Day Vulnerability Weaponized in Targeted Attacks Exploited Dark Reading 7d CVE-2026-86950
LOW Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution Dark Reading 7d —
LOW Cloudflare Announces Public Certificate Authority for the Post-Quantum Web Dark Reading 8d —
HIGH 'NeedyMantis' Provides Long-Term Access to Compromised Networks Dark Reading 8d —
LOW RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model Infosecurity Magazine 8d —
HIGH Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers Dark Reading 8d —
MED Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials Infosecurity Magazine 8d —
LOW Microsoft Warns NeedyMantis Malware Enables Persistent Network Access Infosecurity Magazine 8d —
LOW Japanese Railway Operators Hit with Weekend Cyber Attacks Infosecurity Magazine 8d —
LOW Kiteworks Urges Customers to Restart Systems After Shutdown Notice Infosecurity Magazine 8d —
LOW Nvidia Launches AI Agent Safety Platform to Prevent Rogue Activities Dark Reading 8d —
LOW One Packet Can Crash OT Servers in Industrial Sectors Dark Reading 8d —
LOW Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts Dark Reading 8d —
LOW AI Agents Are Privileged Users; Who Is Auditing Their Access? Dark Reading 9d —
MED Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions Dark Reading 9d —
LOW JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack Dark Reading 9d —
MED Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation Krebs on Security 9d —
LOW Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach Infosecurity Magazine 9d —
LOW NVIDIA Launches Open Platform to Secure Autonomous AI Agents Infosecurity Magazine 9d —
LOW Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns Infosecurity Magazine 9d —
LOW MCP Is Creating Major Governance Gaps, Researchers Warn Infosecurity Magazine 9d —
HIGH Citrix Patches Critical Zero Days Under Active Exploitation Exploited Infosecurity Magazine 9d —

Showing 150 of 162 matching stories (162 in the last 14 days from 54 sources). Relevance and tags come from fixed keyword rules. Exploit data: CISA Known Exploited Vulnerabilities (CC0) and EPSS by FIRST (first.org/epss).

Running on the core news feeds only. Bind the WIRE KV namespace and the cron trigger to turn on all sources and exploit data.