Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-14 13:00 PDT
- Homebrew 7.0.0 gets built-in GUI, better security controls
BleepingComputer • 2026-09-14 12:51 • www.bleepingcomputer.com
Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface. […]
https://www.bleepingcomputer.com/news/security/homebrew-700-gets-built-in-gui-better-security-controls/ - Twitch extension with 30K installs exposes users’ OAuth tokens
BleepingComputer • 2026-09-14 12:03 • www.bleepingcomputer.com
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users’ Twitch OAuth session tokens to a commercial bot service. […]
https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/ - Upcoming Speaking Engagements
Schneier on Security • 2026-09-14 12:02 • www.schneier.comThis is a current list of where and when I am scheduled to speak:
- I’m speaking online (via Zoom) at a League of Women Voters event on Tuesday, September 22, 2026 at 5 PM ET.
- I’m speaking at CanSecWest 2026 in Vancouver, Canada. The conference runs September 30–October 1, 2026; the time of my talk is TBD.
- I’m giving a talk on “Free Speech and the Pr…
https://www.schneier.com/blog/archives/2026/09/upcoming-speaking-engagements-60.html - Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
BleepingComputer • 2026-09-14 11:34 • www.bleepingcomputer.com
Hackers compromised HBO Max’s official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware. […]
https://www.bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads/ - Apple Updates Everything, (Mon, Sep 14th)
SANS ISC Diary (full) • 2026-09-14 11:33 • isc.sans.eduToday, Apple released its annual update across all its operating systems. With that, Apple not only released new features but also patched 261 different vulnerabilities. This is the most vulnerabilities Apple has ever patched, but the increase is not as significant as other vendors' “post-AI” patch releases.
- New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
The Hacker News • 2026-09-14 11:02 • thehackernews.com
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server’s memory, so the processor keeps reading old encrypted data as if it were current.The attack requires an attacker who already controls the server’s software and can briefly access the machine to insert a small circuit
https://thehackernews.com/2026/09/new-ddrop-attack-breaks-intel-tdx-and.html - 3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
The Hacker News • 2026-09-14 11:01 • thehackernews.com
An attacker was operating inside the network of 3BB, one of Thailand’s largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said.The company uncovered the intrusion by examining a server the attacker had left open on the internet, which held the attacker’s own tools and a list of
https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html - Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
The Hacker News • 2026-09-14 10:58 • thehackernews.com
A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12.In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to
https://thehackernews.com/2026/09/telegram-desktop-flaw-lets-hidden.html - Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
The Hacker News • 2026-09-14 09:56 • thehackernews.com
A suspected Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign.“Red Heron scanned 1,386 Gitea instances across seven countries and maintained a separate dataset of 477 Taiwan-based systems,” Acronis Threat Research Unit (TRU)
https://thehackernews.com/2026/09/red-heron-exploits-gitea-rce-to.html - Hackers target exposed Vite dev servers to steal AWS, Azure secrets
BleepingComputer • 2026-09-14 09:15 • www.bleepingcomputer.com
A mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. […]
https://www.bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets/ - Using AI for Weapons Development
Schneier on Security • 2026-09-14 09:07 • www.schneier.comLast week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag this:
We identified a cell of threat actors based in northern Yemen running three weapons development programs: a guided rocket that used a commodity phone-class flight computer with final-phase homing guidance; a multi-stage ballistic missile with a stated range goal above 2,000 km; …
https://www.schneier.com/blog/archives/2026/09/using-ai-for-weapons-development.html - WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
The Hacker News • 2026-09-14 09:00 • thehackernews.com
WordPress has announced it’s launching an automated security review for every release of a plugin before it’s distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved.“New plugins are reviewed before they enter the directory, but updates ship continuously after that,” David Perez, WordPress Official Plugin
https://thehackernews.com/2026/09/wordpress-adds-automated-plugin-reviews.html - ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
The Hacker News • 2026-09-14 07:40 • thehackernews.com
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination.The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few of
https://thehackernews.com/2026/09/weekly-recap-rogue-ai-agents-wechat.html - Why Patch Automation Needs Brakes, Not Just an Accelerator
BleepingComputer • 2026-09-14 07:01 • www.bleepingcomputer.com
Patch automation can help IT teams keep pace with growing update volumes, but deploying faster also means bad updates can spread faster. Action1 explains how update rings, predefined success criteria, and human oversight can make automated patching faster without sacrificing control. […]
https://www.bleepingcomputer.com/news/security/why-patch-automation-needs-brakes-not-just-an-accelerator/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
