Breaking News – Cyber Threats – 2026-09-17 13:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-09-17 13:00 PDT

• OpenAI details more cases of AI agents taking unauthorized actions
  BleepingComputer • 2026-09-17 11:55 • www.bleepingcomputer.com
  OpenAI has presented new examples of what they call “AI model misalignment” from the past six months, including unauthorized file uploads, following self-generated instructions, hiding mistakes, and leveraging exposed API keys. […]
  https://www.bleepingcomputer.com/news/security/openai-details-more-cases-of-ai-agents-taking-unauthorized-actions/
• Brevo supply-chain attack injected ClickFix scripts on customer sites
  BleepingComputer • 2026-09-17 10:11 • www.bleepingcomputer.com
  Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. […]
  https://www.bleepingcomputer.com/news/security/brevo-supply-chain-attack-injected-clickfix-scripts-on-customer-sites/
• LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
  SANS ISC Diary (full) • 2026-09-17 08:06 • isc.sans.edu

  At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially remarkable – it asked the recipient to review some attached requirements and provide a price quotation for a fiber optic system and appeared to impersonate an employee of a legitimate company.

  
 

  The receiving gateway quarantined the message because it detected malicious content in the attachment, tho…
  https://isc.sans.edu/diary/rss/33348

• US Coast Guard and FBI board oil tanker to investigate cyber attack
  Graham Cluley • 2026-09-17 07:43 • www.bitdefender.com
  An oil tanker bound for Texas was boarded mid-voyage by the US Coast Guard and FBI last month, after its network may have been compromised by malicious hackers.

  According to the US Coast Guard, the supertanker was boarded after indications that the network “may have been compromised by a foreign actor.”

  Read more in my article on the Hot for Security blog.
  https://www.bitdefender.com/en-us/blog/hotforsecurity/us-coast-guard-fbi-board-oil-tanker-investigate-cyber-attack

• What Recent AI-Powered Attacks Mean for Your Identity Security
  BleepingComputer • 2026-09-17 07:01 • www.bleepingcomputer.com
  AI is making credential theft faster and easier to scale, giving attackers more opportunities to abuse valid identities. Specops explains why identity security must go beyond successful authentication by verifying that both the user and the device requesting access can be trusted. […]
  https://www.bleepingcomputer.com/news/security/what-recent-ai-powered-attacks-mean-for-your-identity-security/

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.