Daily Security Feed - 2026-09-17

Security Feed Digest (2026-09-17)

Hacker News: Best

• Training a 4B model to produce 81% faster query plans than Postgres — Wed, 16 Sep 2026 18:50:00 +0000
• Small programming tricks — Wed, 16 Sep 2026 15:56:47 +0000
• PS5 Linux lead quits: “a bunch of noobs using LLMs” that “they don’t understand” — Wed, 16 Sep 2026 14:30:36 +0000
• Hackers Got Inside a Flock Camera — Wed, 16 Sep 2026 13:18:47 +0000
• The Google Play app review process now regularly takes longer than a week — Wed, 16 Sep 2026 11:19:11 +0000
• Salesforce Global Outage — Wed, 16 Sep 2026 10:37:08 +0000
• EU chief opens door for Canada to become ‘associate member’ — Wed, 16 Sep 2026 09:54:05 +0000
• Mistral X Mozilla: Private, Multilingual AI Browsing — Wed, 16 Sep 2026 08:08:57 +0000
• Apple Reference Image: A New Approach for Verified Photography — Wed, 16 Sep 2026 02:07:31 +0000
• German Rheinmetall open-sources its Battlesuite connected weapon system protcol — Tue, 15 Sep 2026 21:07:47 +0000
• Building a Linux GPU Driver for the M4 Mac Mini in One Month — Tue, 15 Sep 2026 19:30:03 +0000
• We got admin access to Baseten’s production GitHub — Tue, 15 Sep 2026 18:11:24 +0000
• An update on Wayback Machine access — Tue, 15 Sep 2026 17:52:18 +0000
• Why I’m still bearish on LLMs after Navier-Stokes — Tue, 15 Sep 2026 17:37:12 +0000
• Israeli Minister Threatens Filmmakers’ Citizenship over Gaza Documentary — Tue, 15 Sep 2026 14:52:14 +0000
• Tell the speakers that you liked their talks — Tue, 15 Sep 2026 11:28:19 +0000
• Alternatives to MinIO for single-node local S3 — Tue, 15 Sep 2026 08:21:27 +0000
• CSS-Tricks in Limbo — Tue, 15 Sep 2026 07:27:46 +0000

Krebs on Security

• Data Broker Radaris Loses Domains in Privacy Fight — Wed, 16 Sep 2026 18:14:22 +0000

BleepingComputer

• Anthropic wants Claude to analyze your bank account and financial data — Wed, 16 Sep 2026 20:35:48 -0400
• Windows 11 KB5124008 update breaks domain trust for some users — Wed, 16 Sep 2026 16:39:29 -0400
• Iranian hackers use CHOSEN BRICK Windows malware to spy on targets — Wed, 16 Sep 2026 16:24:55 -0400
• Malware bypasses browser checks to force install Chrome, Edge extensions — Wed, 16 Sep 2026 14:50:53 -0400
• Spain’s data agency gets first report of AI-powered data breach — Wed, 16 Sep 2026 13:26:41 -0400
• The true cost of a ransomware attack, with and without BCDR — Wed, 16 Sep 2026 10:00:10 -0400
• Microsoft says Copilot buttons still missing in classic Outlook — Wed, 16 Sep 2026 08:16:32 -0400
• Webinar: What happens in the first hours of a Google Workspace breach — Wed, 16 Sep 2026 08:11:19 -0400
• Critical ScreenConnect flaw now actively exploited in attacks — Wed, 16 Sep 2026 07:14:28 -0400
• Windows Server 2022 reaches end of mainstream support next month — Wed, 16 Sep 2026 05:10:20 -0400
• Google fixes actively exploited Android zero-day on Pixel devices — Wed, 16 Sep 2026 03:00:19 -0400

Darkreading

• AI Security Spending Jumps as Fear Outpaces Proof of Value — Wed, 16 Sep 2026 21:26:55 GMT
• Fighting Your Dragons Through Tough Tech Times — Wed, 16 Sep 2026 18:00:54 GMT
• BragJack Attack Can Turn a Browser’s Agentic AI Against It — Wed, 16 Sep 2026 16:43:37 GMT

• [Black Hat USA 2026

  OpenAI’s Deep Dive Into Hugging Face Incident](https://www.darkreading.com/vulnerabilities-threats/bhusa26huggingfacetalk) — Tue, 15 Sep 2026 19:27:19 GMT

The Hacker News

• Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution — Wed, 16 Sep 2026 21:20:59 +0530
• Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers — Wed, 16 Sep 2026 20:57:49 +0530
• One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude — Wed, 16 Sep 2026 20:06:44 +0530
• Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories — Wed, 16 Sep 2026 19:07:07 +0530
• Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can’t Install Fix — Wed, 16 Sep 2026 18:44:05 +0530
• N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security — Wed, 16 Sep 2026 17:28:00 +0530
• Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation — Wed, 16 Sep 2026 16:45:58 +0530
• Threat Intelligence Alone Won’t Close the Exploitation Gap — Wed, 16 Sep 2026 16:45:48 +0530
• Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks — Wed, 16 Sep 2026 16:38:54 +0530
• Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells — Wed, 16 Sep 2026 11:18:28 +0530
• Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens — Wed, 16 Sep 2026 10:48:06 +0530

데일리시큐 - 최근인기기사

• [김승주 교수 칼럼] 우리는 왜 모든 소스코드를 비밀로 만들었나 — 2026-09-16 12:41:40
• [황석훈 보안칼럼] “소스코드 정적분석을 AI로 할 수 없나요” - CISO의 질문에 답하다 — 2026-09-16 13:15:31
• 메가존클라우드-데이터독, 은행 서비스 장애 대응 ‘게임데이’ 개최 — 2026-09-16 09:31:28
• 지니언스, AI 기반 ‘K-보안 통합 플랫폼’ 개발…중동 시장 공략 강화 — 2026-09-16 08:58:55
• 수산아이앤티, ‘eWalker DLP’ N2SF 대응 강화…데이터 등급 기반 유출 통제 — 2026-09-16 08:53:41
• 팔로알토 네트웍스, 10월 14일 ‘이그나이트 온 투어 서울’ 개최…AI 시대 보안 전략 제시 — 2026-09-16 09:22:03
• 스틸리언, 인도네시아 최대 통신사 텔콤셀에 ‘앱수트’ 공급 — 2026-09-16 08:55:55
• [부고] 김태일 코어시큐리티 대표 부친상 — 2026-09-16 14:52:21
• 안랩, ‘안랩 AI 플러스’ 공개…AI-네이티브 보안 플랫폼 전환 선언 — 2026-09-16 13:59:48
• 브이엠웨어 vCenter 치명적 RCE 실제 악용…ESXi 랜섬웨어 공격까지 확인 — 2026-09-16 22:31:16