Daily Security Feed - 2026-09-15

Security Feed Digest (2026-09-15)

Hacker News: Best

• iOS 27, iPadOS 27, and macOS 27 — Mon, 14 Sep 2026 17:50:29 +0000
• Steam Frame starts at $1059 — Mon, 14 Sep 2026 17:27:55 +0000
• Pion, an agent designed to run any company autonomously — Mon, 14 Sep 2026 17:16:06 +0000
• Distributed Systems Classics (2017) — Mon, 14 Sep 2026 16:02:01 +0000
• Dario, Please — Mon, 14 Sep 2026 14:50:32 +0000
• How to write an effective software design document — Mon, 14 Sep 2026 13:00:46 +0000
• OpenAI bots knew about the RubyGems caching vulnerability — Mon, 14 Sep 2026 12:40:57 +0000
• XCancel suspended “due to a new development in the ongoing legal proceedings” — Mon, 14 Sep 2026 12:05:52 +0000
• XCancel service is suspended until further notice — Mon, 14 Sep 2026 09:51:50 +0000
• Nike exits the S&P 100 after 18 years and a $200B market-cap wipeout — Mon, 14 Sep 2026 02:50:40 +0000
• The case against JPEG XL — Mon, 14 Sep 2026 01:02:37 +0000
• Apple’s Dimensional Drawings — Mon, 14 Sep 2026 00:11:21 +0000
• The contagion of fear — Sun, 13 Sep 2026 22:38:18 +0000
• Registration without a phone number on Signal will use zero-knowledge proofs — Sun, 13 Sep 2026 21:47:04 +0000
• Mullenweg has returned as CEO after attempted board ouster — Sun, 13 Sep 2026 20:19:06 +0000
• Ask HN: What are you working on? (September 2026) — Sun, 13 Sep 2026 17:31:38 +0000

BleepingComputer

• Microsoft releases emergency Windows updates to fix RDS failures — Mon, 14 Sep 2026 16:52:18 -0400
• Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records — Mon, 14 Sep 2026 16:36:02 -0400
• Homebrew 7.0.0 gets built-in GUI, better security controls — Mon, 14 Sep 2026 15:51:04 -0400
• Twitch extension with 30K installs exposes users’ OAuth tokens — Mon, 14 Sep 2026 15:03:51 -0400
• Hackers hijack HBO Max Reddit account to push malware in ClickFix ads — Mon, 14 Sep 2026 14:34:16 -0400
• Hackers target exposed Vite dev servers to steal AWS, Azure secrets — Mon, 14 Sep 2026 12:15:58 -0400
• Why Patch Automation Needs Brakes, Not Just an Accelerator — Mon, 14 Sep 2026 10:01:11 -0400
• Webinar: How malicious OAuth apps can lead to Google Workspace breaches — Mon, 14 Sep 2026 08:15:23 -0400
• Microsoft: September updates cause RDS failures on Windows Server — Mon, 14 Sep 2026 05:50:25 -0400
• Revolut discloses data breach exposing financial info, passports — Mon, 14 Sep 2026 04:48:24 -0400
• Microsoft: September updates break audio on some Windows PCs — Mon, 14 Sep 2026 04:08:16 -0400
• CISA: Hackers now exploit max severity GitLab flaw in attacks — Mon, 14 Sep 2026 03:06:27 -0400

Darkreading

• ‘Sandworm’ Chains Cisco Vulnerabilities to Deploy Cyclops Blink — Mon, 14 Sep 2026 21:37:28 GMT
• Maximum Severity GitLab Flaw Puts Supply Chains at Risk — Mon, 14 Sep 2026 20:19:22 GMT
• Anthropic CEO: Time to Shift From Improving to Controlling AI — Mon, 14 Sep 2026 16:41:10 GMT
• SpiderSilk Hunts External Threats With AI-Based Scanner — Fri, 11 Sep 2026 18:27:28 GMT

The Hacker News

• New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing — Mon, 14 Sep 2026 23:32:13 +0530
• 3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials — Mon, 14 Sep 2026 23:31:49 +0530
• Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports — Mon, 14 Sep 2026 23:28:16 +0530
• Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries — Mon, 14 Sep 2026 22:26:30 +0530
• WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution — Mon, 14 Sep 2026 21:30:04 +0530
• ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits — Mon, 14 Sep 2026 20:10:34 +0530
• AI Changed the Exposure Problem. Validation Needs to Change With It. — Mon, 14 Sep 2026 17:28:00 +0530
• Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users — Mon, 14 Sep 2026 12:54:39 +0530

데일리시큐 - 최근인기기사

• [이혁중 CISO 칼럼]  IoT/OT 이게 뭐길래? — 2026-09-14 08:48:41
• 중국 연계 해커, ‘Sogou 입력기’ 취약점 실제 악용…클릭 한 번에 백도어 설치 — 2026-09-14 08:24:39
• 에스투더블유, 정부 주도 보안 특화 AI 개발 사업 참여 — 2026-09-14 14:58:59
• 데일리시큐, 9월 17일 ‘EDR이 보지 못하는 브라우저 위협’ 라이브 웨비나 개최 — 2026-09-14 15:13:23
• 스텔스모어, 공공기관 보안 담당자 대상 ‘OSINT 마스터 클래스’ 개최 — 2026-09-14 16:28:18
• 카스퍼스키, 여행객 겨냥한 사이버 위협 경고…피싱·악성코드 주의보 — 2026-09-14 14:34:30
• 미소정보기술, 과기정통부 에이전틱 AI 국가 R&D 사업 선정 — 2026-09-14 17:50:33
• 엘세븐시큐리티, 이미지 속 개인정보까지 잡는다…AI OCR 기반 차단·마스킹 기술 공개 — 2026-09-15 00:21:11
• 한컴, 3D 업무 공간 구현한 AI 워크포스 플랫폼 ‘노마디안’ 공개 — 2026-09-14 15:12:27
• 이로운앤컴퍼니, KCSCON 2026서 AI 거버넌스 플랫폼 ‘세이프엑스’ 공개…생성형 AI 통제 공백 해소 — 2026-09-15 00:28:27