Daily Security Feed - 2026-09-24

Security Feed Digest (2026-09-24)

Hacker News: Best

• DoorDash Spent $1.4M Trying to Stop Mamdani from Becoming Mayor. Now We Know Why — Wed, 23 Sep 2026 19:55:14 +0000
• Claude discovers a novel enzyme system with CRISPR-like repeats — Wed, 23 Sep 2026 18:06:47 +0000
• Italian parliament votes for return to nuclear energy — Wed, 23 Sep 2026 17:06:16 +0000
• Fixing the Portobello Police Station Clock — Wed, 23 Sep 2026 15:18:53 +0000
• GPT-6 Astra has gained the ability to drive a car — Wed, 23 Sep 2026 15:14:22 +0000
• Seattle City Council votes to ban surveillance pricing in sale of groceries — Wed, 23 Sep 2026 14:04:34 +0000
• I don’t want the details — Wed, 23 Sep 2026 13:04:44 +0000
• Claude Code reads AGENTS.md only when telemetry is on [fixed] — Wed, 23 Sep 2026 12:15:33 +0000
• The darker side of being a doctor — Wed, 23 Sep 2026 10:54:55 +0000
• Jev in 25 Lines of Python — Wed, 23 Sep 2026 07:26:23 +0000
• Grammarly will send unhinged messages to all your users if you try to cancel — Wed, 23 Sep 2026 04:00:43 +0000
• Transit rewards — Wed, 23 Sep 2026 02:52:29 +0000
• Microsoft killed FoxPro in 2007. Anyway, here’s FoxPro revived — Tue, 22 Sep 2026 21:00:30 +0000
• SAML: A fractal of bad design — Tue, 22 Sep 2026 18:57:17 +0000
• There’s a high chance of devices being sold with GrapheneOS preinstalled in 2027 — Tue, 22 Sep 2026 17:12:51 +0000
• Claude Opus 5.5 Intelligence, Performance and Price Analysis (Max) — Tue, 22 Sep 2026 16:51:31 +0000
• OpenAI is well positioned to fast-follow Jev — Tue, 22 Sep 2026 14:42:59 +0000
• AMD’s random number generator can’t generate a 0? — Tue, 22 Sep 2026 08:39:43 +0000
• What California is learning from solar panels built over irrigation canals — Tue, 22 Sep 2026 03:10:05 +0000

BleepingComputer

• Placeholder domain used in dev docs now serves ClickFix attacks — Wed, 23 Sep 2026 18:46:01 -0400
• New RemControl Android banking malware targets users in Europe and Canada — Wed, 23 Sep 2026 17:25:13 -0400
• Check Point warns of hackers exploiting Security Gateway VPN RCE flaw — Wed, 23 Sep 2026 15:53:54 -0400
• Hackers start exploiting critical WordPress flaw for code execution — Wed, 23 Sep 2026 14:31:22 -0400
• Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers — Wed, 23 Sep 2026 12:20:54 -0400
• InfraTrust report warns network management systems under attack — Wed, 23 Sep 2026 10:35:26 -0400
• How One Kubernetes YAML Can Hand Over a GCP Organization — Wed, 23 Sep 2026 10:01:11 -0400
• Arista patches actively exploited VeloCloud Orchestrator zero-day — Wed, 23 Sep 2026 08:29:53 -0400
• Microsoft: September Windows updates break Always On VPN connections — Wed, 23 Sep 2026 07:18:13 -0400
• Ryuk ransomware member sentenced to 24 months in prison — Wed, 23 Sep 2026 04:20:05 -0400
• F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks — Wed, 23 Sep 2026 03:17:23 -0400

Darkreading

• EDR Evasion Stack Helps Process Injection Slip Past Defenses — Wed, 23 Sep 2026 21:03:01 GMT
• GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks — Wed, 23 Sep 2026 20:53:38 GMT
• UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks — Wed, 23 Sep 2026 16:01:00 GMT
• Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign — Wed, 23 Sep 2026 14:47:09 GMT
• How the CISO-CMO Alliance Builds Trust Before Crisis Strikes — Tue, 22 Sep 2026 20:55:53 GMT
• Deception by Design: CISA’s Guide to Tricking Cybercriminals — Tue, 22 Sep 2026 19:59:24 GMT

The Hacker News

• Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry — Wed, 23 Sep 2026 23:36:30 +0530
• A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You — Wed, 23 Sep 2026 22:23:10 +0530
• MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key — Wed, 23 Sep 2026 21:36:41 +0530
• This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move — Wed, 23 Sep 2026 19:47:58 +0530
• Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI — Wed, 23 Sep 2026 19:22:46 +0530
• New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control — Wed, 23 Sep 2026 17:46:00 +0530
• 545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent — Wed, 23 Sep 2026 17:17:19 +0530
• Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests — Wed, 23 Sep 2026 17:17:13 +0530
• Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape — Wed, 23 Sep 2026 16:42:18 +0530
• F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers — Wed, 23 Sep 2026 13:59:48 +0530
• Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware — Wed, 23 Sep 2026 13:59:24 +0530
• Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input — Wed, 23 Sep 2026 12:34:40 +0530
• ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants — Wed, 23 Sep 2026 11:00:09 +0530

데일리시큐 - 최근인기기사

• [단독] 9월 다크웹에 국내 금융·중고차 금융 데이터 판매 잇따라…해커, 고객정보 2만8000건·300GB·1TB 주장 — 2026-09-23 13:55:59
• 스텔스몰·지란지교에스앤씨, ‘제22회 OSINT 인텔리전스 전문가 과정’ 개최 — 2026-09-23 11:48:48
• 가비아, 외부 공격으로 고객 2,998명 개인정보 유출…KISA·개인정보위 신고 — 2026-09-23 19:39:40
• 해킹조직 샤이니헌터스 “FBI 해킹해 2~3TB 탈취”…FBI “관련 주장 조사 중” — 2026-09-23 19:52:50
• [김승주 교수 칼럼] 국가 사이버복원력, 어디서부터 시작해야 하나 — 2026-09-24 07:40:00
• [정보보안 연재소설-로그아웃되지 않는 밤] 제42화 ‘사라지는 검’ — 2026-09-24 07:41:22
• F5 BIG-IP APM 제로데이 실제 공격…인증 없이 원격코드 실행 — 2026-09-24 08:14:25