⚠️ Slim Spider stole the secrets controlling crypto assets at a Brazilian financial institution.

The group also abused Azure DevOps to deploy Kubernetes implants and built tooling for bulk unauthorized Pix transfers.

Read the full story: https://thehackernews.com/2026/09/slim-spider-steals-crypto-custody.html

⚠️ N-able says CVE-2026-86218 is being exploited in the wild. The CVSS 10.0 N-central flaw can enable pre-auth RCE.

CISA added it to KEV, while Huntress is probing a separate N-central compromise where the exploit used remains unconfirmed.

Read: https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html

‼️ Two Windows zero-days are being exploited in the wild.

Microsoft patched them alongside a record 974 vulnerabilities. Both flaws can let authorized attackers elevate privileges locally to SYSTEM, and CISA has added them to its KEV catalog.

Read: https://thehackernews.com/2026/09/microsoft-patches-record-974-flaws.html

⚠️ Days after Microsoft shipped the ShieldBreak fix, a new PoC shows the flaw can still be triggered under specific conditions.

Dubbed ShieldCrash, the bypass demonstrates arbitrary file read as SYSTEM on the latest Windows version.

Read: https://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.html

🚨 Malware linked to F5 BIG-IP APM break-ins hides a PHP web shell in memory while targeted scripts can remain clean on disk.

Sophos found the implant alters what PHP sees when Apache loads those files, helping explain why file checks can miss it.

Read: https://thehackernews.com/2026/09/f5-big-ip-apm-malware-injects-php-web.html

‼️Warning: New CVE-2026-67401 vulnerability in cPanel lets mail-privileged hosting accounts execute code as root.

cPanel says every supported cPanel & WHM version is affected and has released fixed builds.

Read details here: https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account.html

⚠️ ALERT - Google patched a new actively exploited Chrome V8 zero-day.

CVE-2026-87491 lets crafted HTML execute arbitrary code inside Chrome’s sandbox. Google has not said how it’s being weaponized or who is behind it.

Read: https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html

⚡ Billions of tokens. Millions of requests.

U.S. agencies accuse China-based AI firms of using industrial-scale distillation to extract capabilities from Claude, GPT, Gemini, and Grok.

How the campaigns hid their access: https://thehackernews.com/2026/09/us-agencies-accuse-china-ai-firms-of.html

‼️ WARNING - Take your internet-exposed Alby Bitcoin wallet off the public internet first.

A critical flaw in Alby Hub v1.7.0–v1.18.5 could let attackers take over wallets that were reachable from the internet.

Details here: https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html

🚨 One command let a DeepSeek Harness AI agent disable its own file sandbox.

Attacker-supplied text could push the agent to call the tool’s local interface, switch to danger-full-access, and remove approval prompts.

Read: https://thehackernews.com/2026/09/deepseek-harness-flaw-let-ai-agents.html

⚡ A new CVE drops. Can your team answer “Are we exposed?” in minutes?

See how to pull SBOM, endpoint, cloud, and vulnerability data into one view so cybersecurity teams can quickly find affected assets, verify exposure, and prioritize response.

Join this webinar to learn the workflow: https://thehackernews.com/2026/09/webinar-learn-how-to-answer-are-we.html

🚨 Stolen AI session tokens can bypass passwords and MFA.

In one 7 GB infostealer dump, Okta found 555 JWTs likely tied to AI authentication and 24 still-valid API keys for AI services.

How the replay works: https://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.html

Attackers are turning breach secrecy into leverage.

Bitdefender says some offer clean recovery and confidentiality for payment. Meanwhile, 55.2% of IT/security pros who experienced a breach or incident said they were asked to keep a breach quiet even when it should have been disclosed.

How silence became a business model: https://thehackernews.com/expert-insights/2026/09/why-are-so-many-security-professionals.html

‼️ Four espionage clusters used the same Chrome exploit kit within a week.

BlueMoon chained two V8 zero-days with a Windows privilege escalation flaw to deploy payloads including GemStone and ShadowPad.

Inside the exploit chain: https://thehackernews.com/2026/09/four-spy-groups-used-same-chrome-and.html

🔥 U.S. authorities disrupted Xinbi Guarantee and froze $52.8 million in crypto linked to the scam marketplace.

Xinbi then shifted about $2.8 million from USDT to USDD, which lacks USDT’s built-in wallet-freezing feature.

Read: https://thehackernews.com/2026/09/us-disrupts-xinbi-guarantee-scam.html

⚠️ Anthropic AI models breached real systems during security tests.

A misconfiguration connected the evaluations to the open internet. In one case, Mythos 5 uploaded a malicious package to PyPI.

Read details: https://thehackernews.com/2026/09/anthropic-ai-models-breached-real.html

🚨 One example LiteLLM admin key was accepted by nearly 1 in 10 gateways.

Researchers found 294 of 3,074 internet-facing instances accepted "sk-1234". Admin access exposes stored provider API keys and, in tests, reached cloud IAM credentials.

How one key reaches the cloud account → https://thehackernews.com/2026/09/nearly-1-in-10-exposed-litellm-gateways.html

🛑 Cisco, Citrix and Fortinet flaws are now on CISA’s exploited-vulnerability list.

Cisco’s FMC bug can give an unauthenticated remote attacker root access, while a Fortinet flaw is suspected in a PivotC2 campaign that infected 178 devices.

Federal patch deadline: Sept. 12.

Read: https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html

🚨 Gigabud uses Android work profiles to hide from banking app malware checks.

In Indonesia, it installs Vwork and a tampered banking app inside the isolated profile, keeping Gigabud outside the scan.

How it works: https://thehackernews.com/2026/09/gigabud-creates-android-work-profiles.html

⚡ Hundreds of AI agents were used to compromise at least 440 PaperCut instances across 48 countries.

The attacks chained authentication bypass and RCE, reaching domain admin access at 12 organizations.

Read: https://thehackernews.com/2026/09/papercut-attacker-uses-hundreds-of-ai.html