RatHat can keep shell access to an Android device even after the malicious app is uninstalled.

It abuses Accessibility and local ADB pairing to establish persistent operator access, with AI used to help navigate the device.

How it survives removal: https://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.html

🚨 A claimed bug bounty hunter likely used an LLM to build PhantomRaven, an npm stealer that collects developer credentials and CI/CD secrets.

CrowdStrike linked the operator to malicious npm packages and similar activity targeting PyPI.

Read: https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html

⚠️ Importing one of 13 npm packages can load the WeaselBiscuit stealer directly into memory.

It harvests Chrome extension storage on Windows, macOS, and Linux. On Windows, C2 commands can also trigger keylogging and clipboard logging.

How the npm delivery chain works: https://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.html

🚨 Plugin4Shell vulnerability can make four widely used AI coding agents install plugin code that differs from the version they report as pinned.

The attack requires control of the plugin repository.

How it works: https://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.html

⚡ ReportURI browser alerts caught a ClickFix campaign before some reputation services did.

CSP reports from compromised e-commerce sites exposed attacker-controlled domains used in a chain that copied PowerShell commands to victims’ clipboards.

How the attack surfaced: https://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.html

🚨 Azure AI Foundry flaw lets unauthorized attackers elevate privileges over the network.

The CVSS 10.0 issue stems from missing authentication for a critical function. Microsoft says it is fully mitigated, with no evidence of exploitation.

Here's what the flaw could allow: https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html

⚠️ Transparent Tribe is targeting government and defense entities in India and Afghanistan with a new Rust backdoor.

RUSTYSHADE uses private GitHub repos for encrypted C2, while post-compromise activity includes Windows and Linux file stealers.

Read more about Operation RapidRust: https://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.html

‼️ WARNING - New WordPress "Click2Shell" vulnerability can force a silent theme install from a crafted link.

Researchers chained the flaw with a separate theme bug to execute code on the server.

Read details here → https://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.html

🚨 Four Linux kernel flaws now have public working exploits for local root.

DirtyAH6, TUNderflow, and PPPoEject require unprivileged user namespaces for an ordinary user. DiagSpill needs SCTP available but no special privileges.

Read → https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html

⚠️ Three Linux kernel flaws are being exploited.

One can enable local privilege escalation. The others can expose memory, crash systems, or corrupt cryptographic results. All three are now in CISA’s KEV catalog.

Read: https://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html

‼️ Google Gemini broke into real company systems during a security test.

A fictional company name matched a real domain while internet access was unintentionally enabled. Gemini guessed one password and found other credentials in a public repository before halting.

Read: https://thehackernews.com/2026/09/google-gemini-broke-into-real-company.html

🚨 Attackers are exploiting a critical Orkes Conductor RCE without authentication.

Nearly 7,000 attack attempts were blocked from Sept. 2–9, with attackers submitting crafted workflow definitions containing malicious JavaScript or Python expressions.

Here's how the exploit works: https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html

Upgrade to 3.30.2 or later.

🚨 A hard-coded static key in SolarWinds ARM can enable unauthenticated RCE.

CVE-2026-28326 affects ARM 2026.2 and earlier and is fixed in 2026.2.1. SolarWinds did not report in-the-wild exploitation.

Read: https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html

‼️ Claude Opus 5 helped three researchers build an image exploit that took over OpenAI's public help forum server.

A flaw in OpenAI's own login then let them take over staff ChatGPT/Codex accounts and reach an internal code repo — in under 72 hours.

Here's how the chain worked → https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html

Your IAM dashboard may not show who actually has access.

Local app accounts, embedded service credentials, legacy authentication, and cross-cloud trust can sit outside centralized reviews. Identity visibility maps those hidden paths to effective access and real usage.

Where IAM loses sight: https://thehackernews.com/2026/09/identity-visibility-in-2026-foundation.html

⚠️ North Korean Jade Sleet is linked to a breach of an Indian IT provider via a DevOps engineer’s Apple Silicon MacBook.

FLATROOF and ROOFDECK were found on the system, with capabilities for command execution, remote shell access, persistence, and data theft.

Inside the MacBook compromise: https://thehackernews.com/2026/09/jade-sleet-linked-to-indian-it-provider.html

⚠️ ChainScript RAT uses a Polygon smart contract to find its active C2 servers.

ClickFix lures deliver the Windows malware, which gives operators shell access, file control, screenshots, payload deployment, and remote JavaScript execution.

Inside the chain: https://thehackernews.com/2026/09/clickfix-lures-deploy-chainscript-rat.html

Election campaigns can’t firewall a cloned voice.

Fake profiles, spoofed domains, synthetic media, and voice impersonation have made a candidate’s digital identity part of the attack surface.

Josh Bartolomie, Doppel VP and Global Head of Threat Intelligence, says detection, takedowns, and proof of authentic content now belong alongside traditional campaign security.

What election security looks like in 2026 → https://thehackernews.com/expert-insights/2026/09/why-deepfake-legislation-wont-save-2026.html

Stolen session cookies let attackers access employee accounts — no login, 2FA prompt, or warning.

NordLayer Intelligence by NordStellar detects leaked session cookies on the dark web and alerts you in real time.

Session cookies keep users logged in. If stolen, often through infostealer malware, attackers can hijack active sessions without credentials or MFA.

The result: account takeover, data theft, financial loss, and reputational damage.

How NordStellar helps:

• 24/7 dark web monitoring — scans dark web sources and malware logs for stolen cookies tied to employees and customers

• Real-time alerts — flags exposed cookies with source, device, and affected data details

• Actionable intelligence — identifies compromised sessions and devices so teams can revoke access before attackers strike

Check if your organization’s data is exposed online for FREE ➡️ https://thn.news/playbook-response

TASK#STOMP steals business documents, Wi-Fi passwords, and clipboard data.

The PowerShell backdoor also watches for newly modified files, takes screenshots, runs remote commands, and keeps two C2 channels alive with mutual watchdogs.

How it stays persistent: https://thehackernews.com/2026/09/taskstomp-powershell-backdoor-steals.html