ICYMI: 2026-09-14
Latest Headlines
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI Changed the Exposure Problem. Validation Needs to Change With It.
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe
Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development
New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate
Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution
CISOs Race to Control AI Agents Without Destroying Their Value
Three JFrog Artifactory Flaws Exploited for Backdoor Deployment
ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks
Hackers Exploit FortiGate SSL-VPN Vulnerability to Attack Broadband Provider
Hackers Mass-Scan Exposed Vite Servers to Steal AWS and Azure Cloud Credentials
UK Government Begins Moving 23 Million Users Away From Passwords
Nintendo Switch Vulnerability Allows Attackers to Run Unauthorized Code on Your Console
Microsoft Offers Up to $30,000 for Critical AI Flaws in Dynamics 365 and Power Platform
AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions
Malicious Twitch Extension Exposes OAuth Tokens of 30,000 Chrome and Firefox Users
WhatsApp’s New Restricted Chat Feature Locks Conversation on Your Primary Phone
Cyclops Blink Evolves Into x86-64 Linux Implant With Packet Sniffing and Internal Network Scanning
New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks
Microsoft releases emergency Windows updates to fix RDS failures
Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records
Twitch extension with 30K installs exposes users’ OAuth tokens
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
Hackers target exposed Vite dev servers to steal AWS, Azure secrets
Webinar: How malicious OAuth apps can lead to Google Workspace breaches
Microsoft: September updates cause RDS failures on Windows Server
Revolut discloses data breach exposing financial info, passports
Microsoft: September updates break audio on some Windows PCs
CISA: Hackers now exploit max severity GitLab flaw in attacks
– MTZ