ICYMI: F5' Post-Mythos Security Summit is live!🛡️🎬

Join security experts and industry analysts for a deep dive into the practical strategies needed to protect your architecture in today's evolving threat landscape. The best part? It's virtual, free, and on-demand.

Browse the sessions now: https://thn.news/post-mythos-security

AI agents escaped their expected environment in a Hugging Face security test.

They harvested credentials, escalated privileges, and crossed cloud, Kubernetes, internal network, and source-control boundaries over ~17,600 actions.

How the chain formed: https://thehackernews.com/2026/09/ai-agents-are-rewriting-rules-of.html

🚨 New unpatched "BigDiskBuster" zero-day PoC can block Microsoft Defender updates by filling the system drive.

Defender keeps running, but failed platform and signature updates can leave detection content stale. No patch, CVE, or Microsoft advisory exists.

How it works: https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html

🚨 A single unauthenticated POST can make Bifrost run attacker-supplied commands with management auth disabled, the default setting.

CVE-2026-90898 affects versions before 2.1.0, and command execution can expose stored LLM provider API keys.

Read: https://thehackernews.com/2026/09/critical-bifrost-ai-gateway-flaw-lets.html

⚡ Microsoft took down EvilTokens, tied to 12,000+ compromised inboxes across 10,000+ organizations.

The service abused Microsoft’s legitimate device-code sign-in flow and used AI to identify trusted contacts and draft impersonation emails.

Learn how it worked: https://thehackernews.com/2026/09/microsoft-takes-down-eviltokens-device.html

‼️ URGENT - WordPress issues patch a new critical flaw (CVE-2026-87902) that requires no account and can lead to code execution on some servers.

Versions 4.7.0 through 7.1.1 are affected.

Here's how the flaw works: https://thehackernews.com/2026/09/wordpress-issues-patch-for-critical.html

‼️ Check Point is warning customers about a newly disclosed Security Management Server zero-day exploited in targeted attacks in July.

CVE-2026-93616 lets an attacker who can reach the web service upload and run scripts without logging in. A fix landed Sept. 22.

Here's what admins should hunt for: https://thehackernews.com/2026/09/check-point-warns-of-management-server.html

🛑 ShinyHunters says it breached the FBI and stole data on agents and job applicants.


The FBI says it is investigating claims of unauthorized activity affecting FBIjobs[.]gov.

ShinyHunters also claims a PeopleSoft zero-day was used, but no public technical details of the flaw are available.

Read: https://thehackernews.com/2026/09/shinyhunters-claims-fbi-breach-says-it.html

‼️ Next.js patched a critical ImageResponse flaw that can lead to server code execution.

"CVE-2026-94545" affects 16.2.0 through 16.3.5 on Node.js when attacker-controlled values reach generated SVG. The fix is 16.3.6.

Inside the bug: https://thehackernews.com/2026/09/critical-nextjs-imageresponse-flaw-can.html

⚠️ A $320/month phishing kit can steal Microsoft 365 sessions after MFA succeeds.

NovaCookies relays the login in real time and captures the authenticated session, while the sign-in itself can look ordinary.

BeyondTrust's Len Noe explains why detection has to move past the login.

How the attack works: https://thehackernews.com/expert-insights/2026/09/the-login-worked-that-was-attack.html

‼️ WARNING - F5’s BIG-IP APM 0-day is being exploited for unauthenticated RCE.

CVE-2026-94127 affects systems where APM acts as an OAuth authorization server. F5 has released hotfixes, and CISA added the flaw to KEV.

What to patch and check: https://thehackernews.com/2026/09/f5-patches-critical-big-ip-apm-zero-day.html

🚨 Three Chrome-Windows 0-days were exploited in one chain to escape Chrome’s sandbox and achieve remote code execution.

Chinese threat actor UTA0565 used fake sites in the attacks, with the chain ultimately deploying CLEANGULP malware.

Here's how the chain worked: https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html

🚨 A public exploit now targets an unpatched Ubuntu 26.04 kernel flaw that can escape containers and gain root on the host.

The AF_UNIX bug is reachable through syscalls allowed by default Docker and Kubernetes seccomp profiles. No attacks are confirmed.

How it works: https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html

⚡ Anthropic’s Opus 5.5 tried to escape or tamper with a sandbox in 1.5% of safeguard-free test runs.

⚡ OpenAI’s GPT-6 Luna worked around access-denied restrictions in 42% of runs, down from 77% for its predecessor.

Read where the safeguards still failed → https://thehackernews.com/2026/09/anthropic-and-openai-models-still.html

‼️ ALERT: A new cPanel flaw, CVE-2026-87899, in CalDAV/CardDAV lets any logged-in cPanel account run code as root and take full control of the server.

A second flaw, CVE-2026-87900 in WP Toolkit, lets authenticated users modify databases belonging to other accounts.

🔗 Learn more → https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html

Quantify Cyber Risk & Earn CPEs at CRX’26

Black Kite and Optro are joining forces for an exclusive workshop at CRX’26!

The two-hour workshop “Quantifying cyber risk in terms that drive decision-making" is on October 14th at 2:00 PT, and will feature Black Kite’s Strategic Advisor and founder of the FAIR model Jack Jones, Black Kite’s CSO Bob Maley, alongside Optro’s CISO Richard Marcus, to discuss best practices in cyber risk quantification and present practical strategies for framing risk and driving decision-making.

Register Now → https://thn.news/risk-experience-2026

⚠️ Compromised MemTensor packages are pushing the sckit credential stealer through npm and PyPI.

The Go-based malware targets developer and cloud secrets, launching on memory recall in the npm plugin or as soon as the PyPI module is imported.

Read more about this supply-chain compromise - https://thehackernews.com/2026/09/compromised-memtensor-packages-deliver.html

🛑 This Windows malware takes no orders from an attacker's server.

It lets up to four AI models, including DeepSeek and Gemini, vote on its next move: steal credentials and wallet data, inject code, or stay installed.

Read about CLOSEDQUORUM → https://thehackernews.com/2026/09/windows-malware-is-built-to-let-up-to.html

‼️ Two chained SSH flaws gave attackers full admin on MikroTik routers — one of them using -2 as a username.

No password. No SSH key. No authentication at all.

CERT Polska says it was exploited before patches shipped.

Learn how it works ↓ https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html

‼️ You can commit code to a GitLab repo by emailing it.

Every GitLab user gets a private address for filing issues. Hidden inside is a non-expiring account token. If that address leaks, someone can send a patch that GitLab commits as you and, with your permissions, target main or trigger CI/CD.

Incoming email also bypasses 2FA and IP restrictions.

Read: https://thehackernews.com/2026/09/a-leaked-gitlab-issue-email-address.html