Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-19 08:00 PDT
- BragJack attacks hijack AI browser agents through malicious extensions
BleepingComputer • 2026-09-19 07:56 • www.bleepingcomputer.com
BragJack, a proof-of-concept attack from Forever Security’s Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. […]
https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/ - North Korean WaterPlum hackers infected 30,000 devices worldwide
BleepingComputer • 2026-09-19 07:05 • www.bleepingcomputer.com
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. […]
https://www.bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide/ - ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
BleepingComputer • 2026-09-19 06:48 • www.bleepingcomputer.com
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. […]
https://www.bleepingcomputer.com/news/security/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang/ - Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
The Hacker News • 2026-09-19 06:28 • thehackernews.com
A new CVE drops. Your scanner finds it. The severity score looks ugly.But that still does not answer the question that matters: Can it actually be exploited in your environment?
Mythos-class AI is compressing the time between disclosure and working exploitation, while many security programs still validate risk on weekly or quarterly cycles. The dangerous gap is no longer just technical. It is
https://thehackernews.com/2026/09/can-you-prove-new-cve-is-exploitable.html - Identity Visibility in 2026: The Foundation of Identity Security
The Hacker News • 2026-09-19 06:28 • thehackernews.com
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon’s annual Data Breach Investigations Report. This article explains what identity visibility means in IAM, why cloud and multicloud environments complicate it, which capabilities matter in
https://thehackernews.com/2026/09/identity-visibility-in-2026-foundation.html - Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
The Hacker News • 2026-09-19 06:28 • thehackernews.com
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.The chain began with a bug in the software that runs OpenAI’s public help forum and moved through a weakness in OpenAI’s own login system.
This was security research,
https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html - Calling viral AI actress Tilly Norwood? Agree to a face scan first
BleepingComputer • 2026-09-19 04:38 • www.bleepingcomputer.com
AI actress Tilly Norwood went viral after glitching into Chinese on Piers Morgan Uncensored last night. Her “Talking Tilly” video call service face-scans every caller for an 18+ age check, senses callers’ moods during calls, and shuts down permanently on September 27. We tried it and read the fine print. […]
https://www.bleepingcomputer.com/news/security/calling-viral-ai-actress-tilly-norwood-agree-to-a-face-scan-first/ - SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
The Hacker News • 2026-09-19 02:31 • thehackernews.com
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior.
“SolarWinds
https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
