⚠️ A $320/month phishing kit can steal Microsoft 365 sessions after MFA succeeds.

NovaCookies relays the login in real time and captures the authenticated session, while the sign-in itself can look ordinary.

BeyondTrust's Len Noe explains why detection has to move past the login.

How the attack works: https://thehackernews.com/expert-insights/2026/09/the-login-worked-that-was-attack.html

‼️ WARNING - F5’s BIG-IP APM 0-day is being exploited for unauthenticated RCE.

CVE-2026-94127 affects systems where APM acts as an OAuth authorization server. F5 has released hotfixes, and CISA added the flaw to KEV.

What to patch and check: https://thehackernews.com/2026/09/f5-patches-critical-big-ip-apm-zero-day.html

🚨 Three Chrome-Windows 0-days were exploited in one chain to escape Chrome’s sandbox and achieve remote code execution.

Chinese threat actor UTA0565 used fake sites in the attacks, with the chain ultimately deploying CLEANGULP malware.

Here's how the chain worked: https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html

🚨 A public exploit now targets an unpatched Ubuntu 26.04 kernel flaw that can escape containers and gain root on the host.

The AF_UNIX bug is reachable through syscalls allowed by default Docker and Kubernetes seccomp profiles. No attacks are confirmed.

How it works: https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html

⚡ Anthropic’s Opus 5.5 tried to escape or tamper with a sandbox in 1.5% of safeguard-free test runs.

⚡ OpenAI’s GPT-6 Luna worked around access-denied restrictions in 42% of runs, down from 77% for its predecessor.

Read where the safeguards still failed → https://thehackernews.com/2026/09/anthropic-and-openai-models-still.html

‼️ ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.

A second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.

🔗 Learn more → https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html

Quantify Cyber Risk & Earn CPEs at CRX’26

Black Kite and Optro are joining forces for an exclusive workshop at CRX’26!

The two-hour workshop “Quantifying cyber risk in terms that drive decision-making" is on October 14th at 2:00 PT, and will feature Black Kite’s Strategic Advisor and founder of the FAIR model Jack Jones, Black Kite’s CSO Bob Maley, alongside Optro’s CISO Richard Marcus, to discuss best practices in cyber risk quantification and present practical strategies for framing risk and driving decision-making.

Register Now → https://thn.news/risk-experience-2026

⚠️ Compromised MemTensor packages are pushing the sckit credential stealer through npm and PyPI.

The Go-based malware targets developer and cloud secrets, launching on memory recall in the npm plugin or as soon as the PyPI module is imported.

Read more about this supply-chain compromise - https://thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html

🛑 This Windows malware takes no orders from an attacker's server.

It lets up to four AI models, including DeepSeek and Gemini, vote on its next move: steal credentials and wallet data, inject code, or stay installed.

Read about CLOSEDQUORUM → https://thehackernews.com/2026/09/windows-malware-is-built-to-let-up-to.html

‼️ Two chained SSH flaws gave attackers full admin on MikroTik routers — one of them using -2 as a username.

No password. No SSH key. No authentication at all.

CERT Polska says it was exploited before patches shipped.

Learn how it works ↓ https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html

‼️ You can commit code to a GitLab repo by emailing it.

Every GitLab user gets a private address for filing issues. Hidden inside is a non-expiring account token. If that address leaks, someone can send a patch that GitLab commits as you and, with your permissions, target main or trigger CI/CD.

Incoming email also bypasses 2FA and IP restrictions.

Read: https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html

Attackers are using malicious Terraform providers to deliver Go malware through HashiCorp’s registry.

The malware uses Ethereum smart contracts and Slack as dual C2 channels and can execute Go or JavaScript commands.

Inside the supply-chain technique: https://thehackernews.com/2026/09/attackers-use-malicious-terraform.html

⚡ Attackers are exploiting WordPress CVE-2026-87902 within hours of disclosure.

The attacks use pearcmd.php to write attacker-controlled PHP files to disk, but only when specific theme and server conditions are met.

🔗 How the exploit works → https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html

⚠️ TeamFiltration targeted 5,700+ Microsoft 365 accounts. Seven were compromised, all unmonitored service accounts still using default passwords.

The campaign spanned 28 tenants and used password spraying against dormant identities.

Learn more about this attack → https://thehackernews.com/2026/09/teamfiltration-compromises-seven.html

Samsung’s mobile AI security model starts with where data goes.

The enterprise playbook: keep sensitive tasks on-device when possible, govern cloud processing centrally, tie AI to managed corporate identities, and build it on a trusted device foundation. Galaxy AI and Knox are Samsung’s example.

The four questions: https://thehackernews.com/expert-insights/2026/09/enterprise-mobile-ai-security-trade.html

🚨 OpenAI’s AI agent bypassed controls on an Australian Medicare statistics portal and accessed non-public files.

PM Anthony Albanese said OpenAI took too long to notify the government and called its disclosure unacceptable.

🔗 Here's what happened → https://thehackernews.com/2026/09/openai-agent-bypassed-australian.html

Your AI productivity gain has a hidden headcount cost.

ActiveState's new report, The AI Remediation Bill, puts a number on AI's downstream cost: engineers spend a conservative floor of 6.7% of their time fixing or revisiting AI-assisted development, about 139 hours a year, which for a 500-engineer org is nearly 34 full-time engineers.

Join the waitlist → https://thn.news/ai-remediation-bill

A fake Cloudflare check ended with Vidar Stealer running inside a signed Microsoft process.

Researchers mapped 17,000+ infected URLs. About 3,000 still served ClickFix lures, while Polygon smart contracts let operators swap lure hosts without touching the compromised sites.

Inside the chain: https://thehackernews.com/2026/09/17000-urls-reveal-how-clickfix-turns.html

🚨 Attackers use hacked Ukrainian sites to serve fake Cloudflare CAPTCHAs for Psychedelic Stealer.

The ClickFix lure copies an msiexec command and tells users to run it. The stealer targets passwords, tokens, and crypto-wallet data.

🔗 Read → https://thehackernews.com/2026/09/hacked-ukrainian-sites-serve-fake.html

Every unpatched CVE is a bet that no one exploits it before you fix it. And for teams stuck on older versions of Java, the odds get worse every year you put off patching. We’re talking 242 new CVEs published daily, up 80% from 2025

If you're stuck on hard-to-upgrade Java versions, pulling a backported version keeps your application secure while you focus on shipping what’s next. Chainguard Libraries for Java now includes CVE remediation, letting you stay safe while you plan your next major upgrade.

Learn More → https://thn.news/cve-remediation