Daily Security Feed - 2026-09-16

Security Feed Digest (2026-09-16)

Hacker News: Best

• Introducing System One Models and Jev — Tue, 15 Sep 2026 19:25:03 +0000
• An Update on Wayback Machine Access — Tue, 15 Sep 2026 17:52:18 +0000
• Gemini 3.8 Live and 3.8 Live Extended Thinking — Tue, 15 Sep 2026 17:38:18 +0000
• America’s Driver’s License Breach Is a National Security Disaster — Tue, 15 Sep 2026 15:58:48 +0000
• Show HN: Capsule – Single-file web apps that save their data into SQLite — Tue, 15 Sep 2026 13:31:40 +0000
• Java 27 — Tue, 15 Sep 2026 13:13:43 +0000
• Show HN: An e-ink frame that hears birds and draws them as 1800s illustrations — Tue, 15 Sep 2026 12:31:10 +0000
• 25 years of mass surveillance is enough — Tue, 15 Sep 2026 11:26:48 +0000
• Suspected sabotage causes major Netherlands rail disruption — Tue, 15 Sep 2026 10:22:46 +0000
• Let’s make quality the norm again — Tue, 15 Sep 2026 10:00:16 +0000
• I can’t stop thinking about Papua New Guinea — Tue, 15 Sep 2026 06:16:24 +0000
• Linux from Scratch — Tue, 15 Sep 2026 04:15:23 +0000
• US confirms for first time it has deployed space weapons — Tue, 15 Sep 2026 03:47:56 +0000
• Charts built for Chat — Mon, 14 Sep 2026 21:22:54 +0000
• A single firm is behind OpenAI, Anthropic, and Meta hacking scandals — Mon, 14 Sep 2026 21:15:01 +0000
• Microsoft patches Windows and Excel – breaks audio, remote access, and paste — Mon, 14 Sep 2026 16:09:45 +0000
• A beginning for mathematics — Mon, 14 Sep 2026 15:33:07 +0000
• Ubuntu 26.10 completes transition to Rust-based coreutils — Mon, 14 Sep 2026 13:38:58 +0000

BleepingComputer

• Acronis warns of actively exploited flaw in its cPanel backup plugin — Tue, 15 Sep 2026 17:37:35 -0400
• Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites — Tue, 15 Sep 2026 16:34:15 -0400
• CenterPoint Energy confirms customer data stolen in cyberattack — Tue, 15 Sep 2026 12:40:14 -0400
• BambooToken malware controls Windows and Linux systems via MQTT — Tue, 15 Sep 2026 11:00:00 -0400
• Hackers target WordPress sites via third-party WooCommerce plugin — Tue, 15 Sep 2026 10:45:10 -0400
• What Zero-Day Response Should Be in the Post-Mythos Era — Tue, 15 Sep 2026 09:45:54 -0400
• CISA: Critical VMware RCE flaw now exploited by ransomware gangs — Tue, 15 Sep 2026 08:16:32 -0400
• Suspected Black Axe gang leaders face cybercrime charges in the US — Tue, 15 Sep 2026 05:50:25 -0400
• Microsoft confirms KB5002914 Excel update breaks copy and paste — Tue, 15 Sep 2026 04:40:20 -0400
• Cisco patches Secure Email Gateway zero-day exploited in attacks — Tue, 15 Sep 2026 03:31:09 -0400

Darkreading

• Cyber Op Targets South Korean Media & Automotive Sectors — Wed, 16 Sep 2026 01:00:00 GMT
• Microsoft Issues Emergency Fixes After Massive Patch Tuesday — Tue, 15 Sep 2026 20:16:00 GMT

• [Black Hat USA 2026

  The ‘Breaking’ News: The OpenAI–Hugging Face Incident](https://www.darkreading.com/vulnerabilities-threats/bhusa26huggingfacetalk) — Tue, 15 Sep 2026 19:27:19 GMT

• VectraRAT Can Hack Windows Enterprises for $250 per Month — Tue, 15 Sep 2026 16:45:37 GMT

The Hacker News

• KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens — Wed, 16 Sep 2026 00:24:14 +0530
• Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists — Tue, 15 Sep 2026 21:59:51 +0530
• BambooToken Malware Uses MQTT to Control Windows and Linux Systems — Tue, 15 Sep 2026 20:53:19 +0530
• Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds — Tue, 15 Sep 2026 17:22:28 +0530
• Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point — Tue, 15 Sep 2026 16:56:36 +0530
• Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers — Tue, 15 Sep 2026 16:42:32 +0530
• LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server — Tue, 15 Sep 2026 12:22:16 +0530
• Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution — Tue, 15 Sep 2026 11:41:11 +0530
• China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE — Tue, 15 Sep 2026 11:01:05 +0530

데일리시큐 - 최근인기기사

• 297만명 정보유출 롯데카드, 1.5개월 업무정지 15일 종료…보안체계 개선이 다음 시험대 — 2026-09-15 13:59:05
• 78리서치랩, KCSCON 2026서 AI 기반 BAS 공개…최신 취약점·악성코드 공격 시나리오 자동 생성 — 2026-09-15 01:57:50
• 파이오링크, KCSCON 2026서 ‘티프론트 ZT’ 선보여…AI로 제로트러스트 정책 운영 간소화 — 2026-09-15 01:07:01
• 한매에스티, KCSCON 2026서 체인가드 공개…오픈소스 취약점 사전 차단 전략 강조 — 2026-09-15 01:26:31
• 펜타린크, KCSCON 2026서 AI 기반 적응형 시스템 접근보안 ‘아크라포인트’ 선보여 — 2026-09-15 01:12:05
• 티사이언티픽, AI로 문맥 속 개인정보까지 찾는다…‘P3R-Privacy Finder AI’ 공개 — 2026-09-15 00:54:04
• 패스틀리, KCSCON 2026서 AI 트래픽 시대 보안 전략 제시…“AI 봇 급증…웹·API 보안 전략 바꿔야” — 2026-09-15 02:09:36
• 파수 AI, KCSCON 2026서 ‘엘름·마인드셋·랩소디’ 공개…안전한 AX 전략 제시 — 2026-09-15 00:59:18