⚠️ Gyazo breach exposed 23.62 million user records and 490 million image metadata records.

The leaked data included IDs used to build Gyazo image links. Helpfeel says those IDs could allow unauthorized viewing of some images.

Read: https://thehackernews.com/2026/09/gyazo-breach-exposes-2362-million-user.html

🚨 A single unauthenticated DoH request can BIND’s named process under a specific connection-close condition.

ISC patched 14 BIND flaws, including crashes, resource exhaustion, and cache-poisoning issues. No active exploits are known.

Details: https://thehackernews.com/2026/09/bind-9-update-fixes-14-flaws-including.html

‼️ An OpenAI model found and used an exposed GitHub API key without authorization.

The key worked, but the requested data remained unavailable. The model then fabricated the data and attributed it to the requested source.

https://thehackernews.com/2026/09/openai-reveals-six-model-incidents.html

It’s one of 6 misalignment incidents OpenAI disclosed.

Attackers weaponize new vulnerabilities in ~5 days. The median org takes 43 days to patch known-exploited flaws.

Peer-reviewed AI agents exploited 87% of one-day vulnerabilities unaided.

The real test: provable coverage, independent validation, and safe-stop controls in production.

https://thehackernews.com/2026/09/cisos-expert-guide-to-agentic.html

🛑 China-aligned FamousSparrow has shifted to a previously unreported backdoor in attacks across Latin America.

SparroWocky can run commands, exfiltrate files, take screenshots, and load in-memory plugins, with government entities among the targets.

Read: https://thehackernews.com/2026/09/china-aligned-famoussparrow-deploys.html

Meet Georgetown's cybersecurity faculty on Sept 22 to learn more about the Cybersecurity Risk Management master's program.

Attend our virtual webinar on Sept 22.

Learn more → https://thn.news/risk-management-event

‼️ Critical Unbound DNSSEC validator flaw (CVE-2026-82717) could allow remote code execution.

An attacker who controls a malicious zone can trigger the heap overflow by querying a vulnerable resolver. 1.26.0 and earlier are affected.

Read details → https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html

⚡ Can you prove a CVE is exploitable without running the exploit?

This webinar shows how to map a vulnerability to the attack techniques it requires, then test whether your existing controls actually stop them.

Can’t join live? Sign up and get the recording: https://thehacker.news/ready-for-mythos-class-attacks

🚨 Iran-linked Handala Hack is tied to a Telegram-controlled backdoor that can steal passwords and messaging data.

HEAVYGRAM also executes commands, captures screenshots, and downloads additional malware.

See how Telegram becomes the control channel: https://thehackernews.com/2026/09/iran-linked-handala-hack-tied-to.html

‼️ ALERT - Critical Docker Sandboxes flaw lets malicious guest code escape the shared workspace and read or modify files across a macOS host.

CVE-2026-77179 crosses the virtio-fs boundary with the host account’s rights.

Read how the escape works → https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html

🔥 25 New CYBER stories in this week’s ThreatsDay Bulletin:

→ Exposed AI systems breached
→ Stealers hunt agent tokens + prompts
→ Agents rewrite their own models
→ Ransomware jumps on a fresh flaw
→ Telnet brute-force still works
→ RF attacks leak audio remotely
→ and more...

Check out the full list of threats here: https://thehackernews.com/2026/09/threatsday-self-rewriting-agents-800.html

‼️ NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.

The 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.

Affected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html

RatHat can keep shell access to an Android device even after the malicious app is uninstalled.

It abuses Accessibility and local ADB pairing to establish persistent operator access, with AI used to help navigate the device.

How it survives removal: https://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.html

🚨 A claimed bug bounty hunter likely used an LLM to build PhantomRaven, an npm stealer that collects developer credentials and CI/CD secrets.

CrowdStrike linked the operator to malicious npm packages and similar activity targeting PyPI.

Read: https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html

⚠️ Importing one of 13 npm packages can load the WeaselBiscuit stealer directly into memory.

It harvests Chrome extension storage on Windows, macOS, and Linux. On Windows, C2 commands can also trigger keylogging and clipboard logging.

How the npm delivery chain works: https://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.html

🚨 Plugin4Shell vulnerability can make four widely used AI coding agents install plugin code that differs from the version they report as pinned.

The attack requires control of the plugin repository.

How it works: https://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.html

⚡ ReportURI browser alerts caught a ClickFix campaign before some reputation services did.

CSP reports from compromised e-commerce sites exposed attacker-controlled domains used in a chain that copied PowerShell commands to victims’ clipboards.

How the attack surfaced: https://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.html

🚨 Azure AI Foundry flaw lets unauthorized attackers elevate privileges over the network.

The CVSS 10.0 issue stems from missing authentication for a critical function. Microsoft says it is fully mitigated, with no evidence of exploitation.

Here's what the flaw could allow: https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html

⚠️ Transparent Tribe is targeting government and defense entities in India and Afghanistan with a new Rust backdoor.

RUSTYSHADE uses private GitHub repos for encrypted C2, while post-compromise activity includes Windows and Linux file stealers.

Read more about Operation RapidRust: https://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.html

‼️ WARNING - New WordPress "Click2Shell" vulnerability can force a silent theme install from a crafted link.

Researchers chained the flaw with a separate theme bug to execute code on the server.

Read details here → https://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.html

🚨 Four Linux kernel flaws now have public working exploits for local root.

DirtyAH6, TUNderflow, and PPPoEject require unprivileged user namespaces for an ordinary user. DiagSpill needs SCTP available but no special privileges.

Read → https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html