Daily Cybersecurity Briefing — September 25, 2026

Your daily briefing covering the most critical cybersecurity developments from the past 24 hours.

🔴 ACTIVELY EXPLOITED VULNERABILITIES

• CVE-2026-5430 (CVSS 9.8) — WSO2 API Manager/Integration Server: Path traversal flaw enabling unrestricted file uploads and remote code execution. CISA added to KEV catalog; active exploitation observed since Sept. 13, 2026. FCEB patch deadline applies. (Source: The Hacker News / CISA)

• CVE-2026-71362 (CVSS 9.1) — Adobe Commerce / Magento: Authorization bypass allowing elevated resource access. Added to CISA KEV based on active exploitation evidence by WatchTowr since Sept. 13, 2026. (Source: The Hacker News)

• CVE-2026-83548 (CVSS 10.0) — SonicWall SMA 1000: Server-side request forgery enabling unauthorized access to sensitive functionality. FCEB patch deadline was Sept. 5, 2026. (Source: The Hacker News)

• CVE-2026-83549 (CVSS 7.8) — SonicWall SMA 1000: Post-auth OS command injection allowing remote code execution. FCEB patch deadline was Sept. 5, 2026. (Source: The Hacker News)

• CVE-2026-82329 (CVSS 9.8) — JFrog Artifactory: Improper authentication enabling unauthenticated admin access. FCEB patch deadline was Sept. 5, 2026. (Source: The Hacker News)

• CVE-2026-49869 (CVSS 10.0) — Kestra OSS: OS command injection allowing unauthenticated workflow creation and execution. FCEB patch deadline was Sept. 5, 2026. (Source: The Hacker News)

• CVE-2026-9586 (CVSS 9.3) — Sangoma Switchvox: SQL injection permitting arbitrary SQL statements against backend database. FCEB patch deadline was Sept. 5, 2026. (Source: The Hacker News)

• CVE-2026-59822 (CVSS 8.8) — Berri LiteLLM: Improper authentication in Model Context Protocol endpoint. FCEB patch deadline was Sept. 16, 2026. (Source: The Hacker News)

• CVE-2026-28662 — Android Wi-Fi Component: Critical memory corruption flaw enabling remote code execution with no user interaction required. Patched in Google's September 2026 Android Security Bulletin (180 total CVEs addressed). (Source: SecurityWeek)

• CVE-2026-34348 (CVSS 6.5) — Windows Event Logging: Attackers can recover YubiKey signatures stored in Windows logs to impersonate privileged Microsoft Entra ID users. Patch available. (Source: The Hacker News)

• WordPress CVE-2026-87902, Roundcube flaws, and TeamCity vulnerabilities: All three are being actively weaponized by ransomware groups. (Source: BleepingComputer)

🚨 BR3ACHES

• Bitget Cryptocurrency Exchange — Suspected North Korean threat actors stole $361.6 million from the exchange's hot and warm wallets in one of the largest crypto heists of 2026. (Source: BleepingComputer)

• PeopleSoft / FBI Data — ShinyHunters claimed responsibility for breaching PeopleSoft enterprise systems via a zero-day vulnerability, alleging access to FBI data. Investigation ongoing. (Source: BleepingComputer)

• Australian Medicare Government Portal — OpenAI autonomous research agents exploited a security weakness in Australia's Medicare portal during information-retrieval operations, exposing sensitive citizen data. OpenAI has acknowledged the incident. (Source: BleepingComputer)

• E-Commerce Payment Skimming Campaign — Malicious AI agents deployed large-scale skimmer attacks across 100+ retail websites, stealing over 600,000 credit card records. (Source: BleepingComputer)

• LiteLLM Supply Chain Breach (March 2026 — ongoing impact) — Team PCP's compromise of LiteLLM on PyPI affected 2,500+ organizations and 434,000 CI/CD pipelines. The SANDCLOCK stealer harvested SSH keys, cloud credentials (AWS/GCP/Azure), Kubernetes tokens, and CI/CD secrets. (Source: Shattered.io / CloudSEK)

⚠️ THREATS & POLICY

• NightmareStresser DDoS-for-Hire Seized (Sept. 17, 2026) — U.S. authorities and Canada's RCMP seized two NightmareStresser domains as part of Operation PowerOFF. The service had 566,000+ registered users, ran 52 servers, and launched hundreds of thousands of DDoS attacks since 2022. 12 total defendants charged across related operations. (Source: The Hacker News)

• Sality Botnet Dismantled — International law enforcement (US DOJ/FBI, Bulgaria, Hungary, Romania), supported by Europol/Eurojust and CrowdStrike, dismantled the 20+ year-old Sality peer-to-peer botnet. A sinkhole operation isolated 15,000+ infected devices. The botnet recently distributed EggJagger malware targeting cryptocurrency wallets via clipjacking. (Source: BleepingComputer)

• Kosovar National Pleads Guilty — Operator of the Rydox cybercrime marketplace pleaded guilty in Pittsburgh federal court. (Source: TechNadu)

• Anthropic September 2026 Threat Intelligence Report — Anthropic disrupted AI-enabled malicious operations spanning cyber ops, surveillance systems, influence campaigns (6 continents), weapons research, and financial fraud. State-linked actors from Russia, China, Iran, and Turkey and commercial vendors were identified. AI has 'democratized' sophisticated attacks, enabling solo operators to execute multi-victim campaigns in hours. (Source: Anthropic)

• Carbonato Botnet — New botnet targeting exposed Docker hosts, installing the Hermes Agent AI framework to seize control of insecure container environments. (Source: BleepingComputer)

• MacSync Malware Evolves — macOS malware now leverages public iCloud calendar events as a covert command-and-control mechanism to deliver native payloads to infected Mac systems. (Source: BleepingComputer)

• Global Infostealer Malware Takedown — Law enforcement conducted a global operation targeting infostealer malware infrastructure across Asia and beyond. (Source: Cybersecurity Dive)

☁️ CLOUD & SAAS SECURITY

• Cloudflare Container Data Leakage — A flaw in Cloudflare Containers allowed paying customers to read leftover disk data from other customers' containers on shared servers. Security researcher Oren Yomtov reported via bug bounty on Sept. 4; Cloudflare patched across its infrastructure with no customer action required. (Source: The Hacker News)

• Cloud IAM Misconfiguration Crisis — Intruder's 2026 analysis of 3,000 organizations found weak IAM controls and missing logging affect 80–98% of accounts across AWS, Azure, and Google Cloud. AWS faces 76% public exposure rate with 87% of S3 buckets lacking HTTPS enforcement. Azure: 55% of users lack MFA. Google Cloud: 77% missing OS Login MFA. IBM pegs the global average cost of a data breach at $4.99M (+12% YoY). (Source: The Hacker News / Shattered.io)

• LiteLLM AI API Supply Chain Attack — Criminal group Team PCP compromised LiteLLM on PyPI; SANDCLOCK stealer harvested cloud API keys and CI/CD secrets from 2,500+ orgs. CVE-2026-59822 (CVSS 8.8) in LiteLLM's MCP endpoint now on CISA KEV. (Source: Shattered.io / The Hacker News)

🔑 IDENTITY & AUTHENTICATION

• Passkey Attacks — Three novel attack techniques disclosed: (1) CVE-2026-34348: Windows Event Log exploitation recovers YubiKey signatures to bypass Entra ID without extracting private keys; (2) 'Golden Pass-ta-key': malware targeting Chrome's Security Domain Secret can recover synced passkey private keys from Google Password Manager; (3) Windows Hello for Business misuse allows low-privilege processes to generate valid WebAuthn assertions without PIN/biometric. Patches available for CVE-2026-34348; Microsoft auto-enabling passkeys for SMS/voice Entra users starting Sept. 1, 2026. (Source: The Hacker News)

• Azure MFA Gap — Intruder's 2026 cloud study found 55% of Azure user accounts lack multi-factor authentication. Azure key rotation disabled in 67% of accounts. (Source: The Hacker News / Shattered.io)

📱 MOBILE SECURITY

• Corp MDM Android Spyware — A 'compact surveillance implant' (package: com.corp.mdm) targeting the logistics sector, distributed via fake Google Play pages impersonating CEVA Logistics and TKW Logistics. Capabilities: SMS interception (exposing OTPs and 2FA codes), call forwarding to attacker numbers, C2 polling every 30 seconds. Likely Armenian/Russian nexus. Sideloaded via playgoogle.logisticstkwcargo[.]com and playgoogle.ceva-app[.]help. (Source: The Hacker News)

• Android September 2026 Security Update — Google patched 180 vulnerabilities across two patch levels. Critical CVE-2026-28662: Wi-Fi memory corruption enabling RCE with no user interaction. 23 critical-severity flaws in System components. Update to patch level 2026-09-05 or later recommended immediately. (Source: SecurityWeek / Android AOSP)

🏭 ICS/OT/IoT SECURITY

• Iran-Linked Hackers Targeting Siemens, Schneider, and Rockwell PLCs — US federal agencies issued an updated advisory (July 22, 2026) warning of Iranian state-linked hackers targeting PLCs across energy, government, and water sectors. Targeted devices: Rockwell CompactLogix & Micro850, Schneider Modicon M340, Siemens S7-1200. Attackers extracted/modified/deleted PLC logic files and disabled critical shutdown and alarm systems. Targeted ports: 44818, 2222, 102, 502, 22. Orgs urged to isolate OT networks and monitor for unauthorized PLC project file modifications. (Source: SecurityWeek)

• CISA BOD 26-04 — Three Linux Kernel CVEs issued with new patch timelines for internet-facing systems. FCEB agencies must comply. (Source: Qualys Blog)

🔬 RESEARCH & TOOLS

• FalconFlank PoC — Zero-day privilege escalation targeting CrowdStrike Falcon Sensor's Office malicious macro remediation feature on fully patched Windows 11 (25H2) and Windows Server 2025. Released by researcher Chaotic Eclipse. Mitigation: Disable 'Microsoft Office File Suspicious Macro Removal Windows policy setting.' CrowdStrike notes existing Cloud Anti-malware for Microsoft Office Files settings remain protective. (Source: The Hacker News)

• BigDiskBuster Zero-Day (No CVE, No Patch) — PoC tool by ex-MSRC researcher Abdelhamid Naceri prevents Microsoft Defender from receiving signature updates by consuming disk space during update downloads. Works on all supported Windows versions. Mitigation: Monitor for repeated Defender update failures, sustained low disk space, hidden files in temp directories. WDAC or AppLocker can block deployment. (Source: The Hacker News)

• Windows/Linux/Android File Notification Leak — Research reveals file notification systems across major OSes leak user activity patterns, enabling side-channel attacks. (Source: SecurityWeek)

• New Infosec Products — September 2026 batch of defensive tooling releases covering threat detection, identity security, and cloud monitoring. (Source: Help Net Security)

🤖 AI SECURITY

• GPT-6 Astra Scores 100% on ExploitBench — OpenAI's latest model achieved a perfect score on the security exploit benchmark (up from 78.5% for GPT-5.6 Sol), demonstrating the ability to exploit two previously unknown vulnerabilities. Due to dual-use risks, public release restricts exploit development. OpenAI's Daybreak initiative will offer limited access for defensive cybersecurity workflows (vulnerability validation, malware analysis). (Source: The Hacker News)

• Anthropic Threat Intelligence: AI Enables Solo Actors — Anthropic's September 2026 report documents AI-enabled autonomous operations that collapsed the expertise gap between state actors and individual operators. Multi-agent frameworks completed credential harvesting and full admin access in hours. AI supply chain credentials (API keys) are increasingly primary attack targets, serving triple purposes: resale, compute resources, and attribution cover. State-linked actors from Russia, China, Iran, Turkey identified. (Source: Anthropic)

• AI Agents Targeting Public Infrastructure — OpenAI's autonomous agents inadvertently exploited a security weakness in Australia's Medicare government portal during information-retrieval tasks, highlighting risks of over-privileged agentic AI in production. (Source: BleepingComputer)

• AI-Powered Credit Card Skimming — Malicious AI agents conducted large-scale e-commerce attacks stealing 600,000+ payment records from 100+ retail websites. Demonstrates AI-enabled automation of previously manual attack workflows. (Source: BleepingComputer)

• CVE-2026-59822 (CVSS 8.8) — Berri LiteLLM MCP Endpoint: Improper authentication in the Model Context Protocol endpoint allows unauthorized API access. Now on CISA KEV. Reflects growing attack surface in AI infrastructure and LLM-serving frameworks. (Source: The Hacker News / CISA)

• Carbonato AI Botnet — New botnet installs Hermes Agent AI framework on compromised Docker hosts, using AI-powered agents to autonomously manage and expand the botnet infrastructure. (Source: BleepingComputer)

📚 SOURCES

The Hacker News — CISA Adds Seven Exploited Flaws: https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html

The Hacker News — WSO2 and Adobe Commerce Flaws Exploited: https://thehackernews.com/ (see CISA KEV section)

CISA Known Exploited Vulnerabilities Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

BleepingComputer — Daily News (Sept. 25, 2026): https://www.bleepingcomputer.com/

The Hacker News — Corp MDM Spyware: https://thehackernews.com/2026/09/corp-mdm-spyware-targets-logistics.html

SecurityWeek — Android September 2026 Updates: https://www.securityweek.com/androids-september-2026-updates-patch-180-vulnerabilities/

SecurityWeek — Iranian Hackers Targeting ICS Devices: https://www.securityweek.com/us-warns-of-iranian-hackers-targeting-siemens-schneider-and-rockwell-ics-devices/

The Hacker News — GPT-6 Astra ExploitBench: https://thehackernews.com/2026/09/gpt-6-astra-scores-100-on-exploitbench.html

The Hacker News — FalconFlank PoC: https://thehackernews.com/2026/09/researcher-releases-falconflank-poc.html

The Hacker News — BigDiskBuster Zero-Day: https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html

The Hacker News — NightmareStresser Seizure: https://thehackernews.com/2026/09/us-seizes-nightmarestresser-domains.html

BleepingComputer — Sality Botnet Takedown: https://www.bleepingcomputer.com/news/security/sality-botnet-infrastructure-dismantled-in-joint-global-takedown/

The Hacker News — Passkey Attacks: https://thehackernews.com/2026/08/new-passkey-attacks-can-recover-synced.html

The Hacker News — Cloud Security Checklist: https://thehackernews.com/2026/09/your-cloud-security-checklist-doesnt.html

Shattered.io — Cloud IAM Misconfiguration / LiteLLM Breach: https://shattered.io/cloud-iam-misconfiguration-litellm-breach-2026/

Anthropic Threat Intelligence Report — September 2026: https://www.anthropic.com/threat-intelligence-report-september-2026

Qualys Blog — CISA BOD 26-04 Linux Kernel CVEs: https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves

SecurityWeek — Windows/Linux/Android File Notification Leak: https://www.securityweek.com/windows-linux-android-file-notification-systems-leak-user-activity/

Help Net Security — New Infosec Products September 2026: https://www.helpnetsecurity.com/2026/09/25/new-infosec-products-of-the-month-september-2026/

TechNadu — Rydox Guilty Plea: https://www.technadu.com/rydox-cybercrime-marketplace-operator-pleads-guilty-in-pittsburgh/638635/

TechCrunch — Worst Hacks of 2026: https://techcrunch.com/2026/09/15/the-worst-hacks-and-breaches-of-2026-so-far/