⚠️ AI-assisted commits leak secrets at roughly twice the rate of human-written ones.

Coding agents can read .env files and MCP configs, while the same credentials may persist across CI/CD, tickets, and collaboration tools.

🔗 How the sprawl happens → https://thehackernews.com/2026/09/secrets-sprawl-is-identity-problem-that.html

Corp MDM spyware steals new SMS and can redirect calls on Android devices.

The logistics-focused campaign delivers it through fake Google Play pages. Once sideloaded and granted SMS and phone permissions, the app hides its launcher and sends new inbound texts to attacker infrastructure.

How it works: https://thehackernews.com/2026/09/corp-mdm-spyware-targets-logistics.html

‼️third-party[.]com is now serving Windows users a ClickFix lure disguised as a Cloudflare check.

The domain is referenced as a placeholder across 1,700+ repositories. The lure copies a PowerShell command to the clipboard, while non-Windows visitors see a decoy.

🔗 here’s how it works → https://thehackernews.com/2026/09/placeholder-third-partycom-referenced.html

‼️ The attacks worth watching this week barely look like attacks.

>> A search result
>> A coding tool
>> A software update
>> One normal-looking link

Behind them: AI search poisoning, leaked source code, malicious updates, supply-chain attacks, EDR evasion, and one-click code execution.

16 stories in this week’s ThreatsDay: https://thehackernews.com/2026/09/threatsday-ai-search-poisoning-ai.html

‼️ OnePlus confirmed a stock phone could be rooted by an installed app. Then it warned the researcher not to publish.

The app needs no special permissions. OnePlus confirmed the two flaws in May, but no fix was available when the researcher disclosed them. No real-world exploitation is known.

How the root chain works → https://thehackernews.com/2026/09/unpatched-oneplus-flaws-let-installed.html

WSO2 and Adobe Commerce flaws are being exploited in attacks.

The WSO2 bug can lead to remote code execution through unrestricted file upload. The Adobe flaw can switch a customer session to another account. CISA has added both to KEV, with federal agencies given until Sept. 27 to patch.

What attackers can exploit: https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html

🚨 Cloudflare Containers flaw let customers read other tenants' leftover databases and credential files.

Researchers recovered residual data on 18 of 24 production placements by reading reused disk blocks. Cloudflare fixed the flaw and says it found no evidence of abuse beyond authorized testing.

How it worked → https://thehackernews.com/2026/09/cloudflare-fixes-flaw-that-let-one.html

🚨 Attackers are exploiting a Roundcube pre-auth SQL injection flaw patched in May.

CVE-2026-48842 can expose mail credentials and stored messages through the virtuser_query plugin.

Read: https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html

Bitget says suspected North Korean hackers stole $351.6 million after compromising a backend wallet system.

The attackers spoofed transaction data and triggered Bitget’s authorization process to move funds. Withdrawals are temporarily suspended while the breach is investigated.

What Bitget says happened: https://thehackernews.com/2026/09/bitget-says-suspected-north-korean.html

AI can turn a failed privilege-escalation attempt into another test within minutes.

Attackers get faster troubleshooting and script fixes. SOC teams still lose evidence, confidence, and context across handoffs, forcing analysts to rebuild the same incident.

That speed gap is the real problem → https://thehackernews.com/2026/09/the-soc-doesnt-need-to-start-over-with.html

PamStealer now needs its C2 server to unlock the macOS payload.

The new variant uses an X25519 key exchange, a fake Wavel wallet lure, and redundant persistence, including global Git hooks.

Read: https://thehackernews.com/2026/09/pamstealer-macos-malware-adds-live-c2.html

‼️ Mini Shai-Hulud came back without a new attacker update.

Two compromised GitHub Actions became reachable again while their tags still pointed to malicious commits, letting downstream workflows resume executing the credential stealer.

🔗 Here's how the attack reactivated: https://thehackernews.com/2026/09/compromised-github-actions-came-back.html

🚨 Kiteworks tells customers to shut systems down for nine hours after federal intelligence warned that a threat actor may target some of its systems.

The company says it has found no evidence of compromise and recommends upgrading to version 9.5.1.

Read: https://thehackernews.com/2026/09/kiteworks-urges-customers-to-shut-down.html

‼️ Attackers are exploiting a SharePoint flaw that Microsoft says can enable remote code execution.

CISA also flagged a MikroTik RouterOS flaw used in a chain that gives unauthenticated attackers full admin access to vulnerable routers.

Learn how the two attack paths work: https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html

⚠️ Elementor CSRF flaw can create a rogue WordPress admin account when an administrator opens a crafted link.

The bug affects 4.3.0 and 4.3.1, bypasses CSRF protection across the site's REST API, and is fixed in 4.3.2.

Here's how it works: https://thehackernews.com/2026/09/elementor-csrf-flaw-lets-attackers-take.html

🚨 An attacker bypassed auth on an employee-run AI agent, obtained its model provider API key, and racked up the equivalent of $600,000 in token use over three weeks.

There was no spending limit, and dashboard gaps helped the activity go unnoticed.

🔗Why visibility comes first → https://thehackernews.com/2026/09/zero-trust-for-ai-agents-starts-with.html

🚨 One URL-encoded character is helping attackers bypass WAF rules protecting Oracle PeopleSoft.

UNC6240/ShinyHunters is exploiting CVE-2026-35273 to deploy web shells on dozens of systems, then using post-exploitation tools including SIDEEYE.

Read: https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html

🚨 Lunex uses a vulnerable AMD driver to blind security monitoring before stealing browser credentials.

The BYOVD chain zeroes kernel callbacks tied to security products, then the stealer collects credentials and cryptocurrency wallet data.

🔗 Read more → https://thehackernews.com/2026/09/lunex-stealer-abuses-amd-driver-to.html

‼️ WARNING — Citrix NetScaler is facing two unpatched RCE 0-days under active exploitation.

Researchers at watchTowr say the flaws are being exploited in the wild. Citrix has not confirmed them or released a patch, affected-version guidance, workaround, or indicators of compromise.

What defenders should know now: https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html

‼️ BREAKING: Citrix confirms two NetScaler flaws have been exploited and has released fixes. CVE-2026-88771 and CVE-2026-88772 were observed exploited on unmitigated deployments.

The new advisory covers 8 new CVEs affecting NetScaler ADC and Gateway.

Read details → https://thehackernews.com/2026/09/warning-two-unpatched-citrix-netscaler.html