🚨 Attackers stole a METR API key and used it for three weeks, consuming credits worth about $600,000.

A fail-open bug disabled Google authentication on a public agent dashboard. The attacker prompted an agent to reveal the key and added SSH persistence.

How the exposed app was abused: https://thehackernews.com/2026/09/attackers-steal-metr-api-key-and.html

Iranian hackers are posing as recruiters on LinkedIn and hiding cross-platform remote access trojans inside coding tests.

The campaign, attributed to Nimbus Manticore, delivers two newly documented malware families: NodeRabbit and PollCat. Both can execute commands and establish persistence across Windows, Linux, and macOS.

Read: https://thehackernews.com/2026/09/iranian-hackers-pose-as-recruiters-to.html

Russia-aligned hackers planted a nuclear weapon prompt in malware to stop AI analysis.

UAC-0099 used the malicious VBS script against a target in Ukraine. It is designed to install MATCHBOIL, the actor’s C# loader.

Inside the GuardBreaker anti-analysis trick: https://thehackernews.com/2026/09/russia-aligned-uac-0099-plants-nuclear.html

‼️ 13 malicious Packagist packages target unpatched iPhones with wallet-stealing spyware.

Installed on Vietnamese streaming sites, the themes serve a WebKit-to-kernel chain that can exfiltrate passwords, messages, photos, location data, and crypto wallet seeds.

Read: https://thehackernews.com/2026/09/13-malicious-packagist-packages-target.html

🚨 Breeze Comet used compromised accounts for hundreds of fraudulent transactions.

The Brazil-based group deploys COBALTSPIN to reach core financial apps and payment APIs. At least one heist netted tens of thousands of dollars.

Read: https://thehackernews.com/2026/09/breeze-comet-executes-hundreds-of.html

ClickFix accounted for 47% of attacks cited in Microsoft security notifications.

Built-in tools appeared in 84% of Bitdefender’s high-severity incidents. Novelty is not the advantage. Repeatability is.

Inside the attack playbooks that keep working: https://thehackernews.com/2026/09/threat-actors-dont-want-better-attacks.html

🛑 Attackers exploit a JFrog Artifactory flaw to mint admin tokens.

The critical auth bypass affects default configurations, requires network access but no login, and was weaponized days after disclosure.

How the attack works: https://thehackernews.com/2026/09/attackers-exploit-critical-jfrog.html

⚡ Authorities turned Sality’s own P2P network against the botnet.

Peer-list manipulation redirected more than 15,000 infected machines to CrowdStrike sinkholes, blocking new payloads. Existing malware remains active and must be removed.

How the botnet was trapped: https://thehackernews.com/2026/09/authorities-turn-salitys-p2p-network.html

🛑 Attackers are exploiting Switchvox without credentials to deploy reverse shells.

CVE-2026-9586 is a critical SQL injection in the /pa endpoint. About 4,000 instances are exposed online, and Sangoma has released a patch.

Inside the exploit: https://thehackernews.com/2026/09/attackers-exploit-critical-switchvox.html

Shadow AI is hiding inside approved AI tools.

Akto CEO Ankita Gupta cites roughly 7,600 malicious GitHub repos, including 800+ posing as AI Skills or MCP servers. The app is approved. Its hidden capabilities may not be.

Inside the agent supply-chain gap:
https://thehackernews.com/expert-insights/2026/08/shadow-ai-is-now-hiding-inside.html

‼️ Researchers used Claude to port a pre-auth RCE exploit from one PLC model to another. It ran ARM shellcode on live hardware.

A later C2 implant attempt wrote to flash-mapped memory and permanently bricked the target.

How the port worked: https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html

🚨 DoJ says 255 fake freelance accounts sent malicious Excel files to about 80,000 users.

Thousands were infected with TVRAT, giving operators remote control. An extradited Russian man now faces federal charges.

Details here: https://thehackernews.com/2026/09/extradited-russian-hacker-faces-charges.html

‼️ GeoNetwork flaws can enable unauthenticated RCE in government geoportal backends.

Ethiack found 121 exposed deployments running affected versions across 39 countries; 89% were government, military, or national-agency related. Fixes are in 4.4.12 and 4.2.17.

Read: https://thehackernews.com/2026/09/geonetwork-fixes-unauthenticated-rce.html

🚨 Attackers are exploiting two SonicWall SMA 1000 zero-days.

One is a pre-auth SSRF flaw. The other allows an authenticated administrator to inject OS commands under specific conditions. SonicWall says attackers may have chained them to execute code.

Find details here: https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html

67% of executives believe unapproved AI tools have already caused a breach.

Yet only 38% of organizations report a comprehensive AI policy. Shadow AI, ad hoc integrations, and over-permissioned agents multiply enterprise entry points.

How to close the control gap: https://thehackernews.com/2026/09/how-to-secure-enterprise-ai-from.html

🚨 A fake streaming ad reached an estimated 570,950 EU Meta accounts.

It promoted StreamRat, an Android trojan that can gain near-complete device control after a user sideloads the APK and grants system permissions.

How the takeover chain works: https://thehackernews.com/2026/09/meta-ads-push-streamrat-android-trojan.html

🛑 A BGP hijack delivered a malicious Virtualizor update that established persistent root access.

A valid certificate prevented connection warnings. One provider found 5 of 34 checked hypervisors compromised.

Virtualizor says check every server.

Read: https://thehackernews.com/2026/09/bgp-hijack-delivers-malicious.html

🚨 Gambling Goblin is hijacking traffic on compromised Brazilian government sites.

Malicious Apache modules strip security headers and proxy visitors to betting pages disguised as Google Play, Microsoft Store, and Amazon.

How the traffic diversion works: https://thehackernews.com/2026/09/malicious-apache-modules-hijack.html

‼️ A malicious repo can run attacker code before some AI agents ask for trust.

Seven agents are affected, including Claude Code, Codex, and Cursor. The repo must arrive as files with .git intact; four were unpatched at publication.

Read how: https://thehackernews.com/2026/09/malicious-git-configs-can-make-claude.html

🚨 AI-powered phishing is here — and it's more convincing than ever.

The 2026 Kaseya Email Security Report breaks down the latest threats and what you can do about them. 🛡️

📥 Get the report → https://thn.news/sec-trust-insights