Daily Security Feed - 2026-09-23

Security Feed Digest (2026-09-23)

Hacker News: Best

• Pentagon says overreliance on AI contributed to missile strike on Iran school — Tue, 22 Sep 2026 19:03:38 +0000
• GPT-6 Sol and Luna — Tue, 22 Sep 2026 18:00:34 +0000
• ‘We hacked the FBI:’ Hackers say they have data on all FBI employees — Tue, 22 Sep 2026 17:46:02 +0000
• Claude Opus 5.5 — Tue, 22 Sep 2026 16:29:05 +0000
• Claude Opus 5.5 — Tue, 22 Sep 2026 16:27:30 +0000
• I asked Meta’s Muse for its filesystem and it sent me 6.8GB — Tue, 22 Sep 2026 15:25:12 +0000
• Apple has added persistent ‘ads’ to iOS, and it’s driving users crazy — Tue, 22 Sep 2026 14:30:12 +0000
• OpenAI GPT–6 Astra breaks Enigma message that has resisted solution since 2005 — Tue, 22 Sep 2026 13:52:15 +0000
• AI Has No Wisdom and Neither Will You — Tue, 22 Sep 2026 12:11:09 +0000
• I said no and Apple said yes — Tue, 22 Sep 2026 08:04:55 +0000
• Can gzip be a language model? — Tue, 22 Sep 2026 06:08:39 +0000
• Spymarks, not Watermarks — Mon, 21 Sep 2026 23:03:49 +0000
• I don’t want to read what you didn’t write — Mon, 21 Sep 2026 22:30:41 +0000
• MiMo v2.6 — Mon, 21 Sep 2026 20:12:12 +0000
• Transformers Explained Visually — Mon, 21 Sep 2026 19:43:49 +0000
• AI coding has made CI a bottleneck, so we reworked ours to keep up — Mon, 21 Sep 2026 19:23:33 +0000
• Python Workers are now generally available — Mon, 21 Sep 2026 13:38:19 +0000

BleepingComputer

• Rogue external MFA providers can steal passwords during logins — Tue, 22 Sep 2026 17:45:45 -0400
• Sweden fines Miljödata $183,000 over breach affecting 2.2 million — Tue, 22 Sep 2026 17:40:37 -0400
• Chinese hackers exploit WordPress, Zyxel flaws to steal govt data — Tue, 22 Sep 2026 16:35:24 -0400
• ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach — Tue, 22 Sep 2026 15:13:29 -0400
• New ClosedQuorum Windows malware uses AI for attack decisions — Tue, 22 Sep 2026 14:04:39 -0400
• Reducing shadow IT visibility gaps with Wazuh — Tue, 22 Sep 2026 13:17:41 -0400
• Check Point warns of Management Server zero-day exploited in attacks — Tue, 22 Sep 2026 12:32:47 -0400
• EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts — Tue, 22 Sep 2026 11:00:00 -0400
• Webinar tomorrow: Inside real-world Google Workspace breaches — Tue, 22 Sep 2026 08:57:07 -0400
• D-Link warns of max severity zero-day bug in DIR-822A routers — Tue, 22 Sep 2026 08:48:06 -0400
• New Windows Defender zero-day blocks Microsoft antivirus updates — Tue, 22 Sep 2026 05:55:11 -0400
• CISA orders feds to patch Zyxel flaw exploited for data theft — Tue, 22 Sep 2026 04:53:09 -0400

Darkreading

• Relays Are Masking Chinese Access to Frontier AI Models in the US — Tue, 22 Sep 2026 21:12:37 GMT
• Microsoft Disrupts EvilTokens Device Code Phishing Service — Tue, 22 Sep 2026 20:02:02 GMT
• Shai-Hulud Attack Nips Cyber-Firm CrowdSec’s GitHub Data — Tue, 22 Sep 2026 17:32:49 GMT
• Amid Ongoing Rogue Incidents, Debate Over AI Safety Gets Real — Tue, 22 Sep 2026 17:12:26 GMT
• More Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study Finds — Tue, 22 Sep 2026 12:00:00 GMT
• ShinyHunters Hacked Cl0p. Now What About Cl0p’s Victims? — Mon, 21 Sep 2026 20:07:56 GMT

The Hacker News

• Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks — Tue, 22 Sep 2026 23:59:39 +0530
• WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers — Tue, 22 Sep 2026 23:33:10 +0530
• Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials — Tue, 22 Sep 2026 23:28:15 +0530
• Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises — Tue, 22 Sep 2026 22:33:31 +0530
• Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials — Tue, 22 Sep 2026 22:11:12 +0530
• Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates — Tue, 22 Sep 2026 21:44:04 +0530
• AI Agents Are Rewriting the Rules of Lateral Movement — Tue, 22 Sep 2026 18:00:00 +0530
• New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups — Tue, 22 Sep 2026 17:59:00 +0530
• DORA Year Two: Can Your SOC Actually See the Attack? — Tue, 22 Sep 2026 17:15:00 +0530
• New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory — Tue, 22 Sep 2026 17:08:40 +0530
• SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE — Tue, 22 Sep 2026 16:47:41 +0530
• Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal — Tue, 22 Sep 2026 15:08:18 +0530
• SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing — Tue, 22 Sep 2026 13:22:03 +0530
• One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor — Tue, 22 Sep 2026 12:03:57 +0530
• WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session — Tue, 22 Sep 2026 11:33:14 +0530
• Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access — Tue, 22 Sep 2026 11:01:59 +0530

데일리시큐 - 최근인기기사

• [단독] 룩핀 개인정보 유출 데이터, 다크웹서 판매 정황…해커 “270만 고객·1100만 주문정보 확보” …룩핀 “해킹 인정” — 2026-09-22 19:44:38
• [단독] 울산 산업제어시스템 접근권한 다크웹서 판매 정황…해커 “PLC 태그 인증 없이 Read/Write 가능” 주장 — 2026-09-22 19:24:37
• AI가 찾은 취약점 225개 중 실제 악용은 1건…‘발견’과 ‘공격 위험’은 달랐다 — 2026-09-22 17:40:48
• GA 11개사 금융보안원 신규 가입…GA 사원사 25개사로 확대 — 2026-09-22 18:04:59
• 워드프레스 ‘Click2Shell’ 취약점 공개, 7.1.1 즉시 업데이트 권고 — 2026-09-22 22:14:27
• SDT, 아이온큐와 아태지역 전략적 파트너십…‘슈페리온 256’ 국내 첫 도입 — 2026-09-22 18:19:22
• 쿼리파이, NIPA GPU 지원사업 통해 다국어 DLP 모델 공개 — 2026-09-22 18:23:08
• 디링크 DIR-822A 공유기 ‘CVSS 10.0’ 제로데이…패치 없이 PoC 공개 — 2026-09-22 22:07:42
• 아카마이 “AI 확산, 코어부터 엣지까지 인프라·보안 전략 재설계 필요” — 2026-09-22 17:53:21
• 추석 연휴 ‘AI 사기 주의보’…얼굴·목소리도 못 믿는다 — 2026-09-22 18:12:20