📰 DAILY THREAT BRIEFING
Saturday, September 19, 2026
12 News Items
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of September 19, 2026.

  1. Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
    — Dark Reading

    The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand f…
  2. Cisco Zero-Day Highlights API Endpoint Authentication Issues
    — Dark Reading

    The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
  3. EY Survey Finds Autonomous AI Implementation Outpaces Oversight
    — Dark Reading

    A new survey of senior AI execs shows that while organizations are rapidly deploying AI and autonomous systems, their process and controls a…
  4. Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
    — The Hacker News

    A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level …
  5. New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
    — The Hacker News

    WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, open…
  6. Gyazo server flaw exploited to steal 23.6 million user records
    — Bleeping Computer

    The Gyazo image-sharing platform has confirmed it suffered a data breach after hackers exploited a server vulnerability that allowed them to…
  7. Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
    — The Hacker News

    The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber a…
  8. Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
    — Bleeping Computer

     An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumen…
  9. Secure enterprise sharing with access reviews for Microsoft 365
    — Bleeping Computer

    Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little v…
  10. A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
    — Unit 42

    Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure yo…
  11. HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
    — SANS ISC

    In June 2026 the IETF published RFC 10008[1], defining a new HTTP method: "QUERY". The HTTP protocol faced already by changes (HTTP/2, HTTP/…
  12. ISC Stormcast For Friday, September 18th, 2026 https://isc.sans.edu/podcastdetail/10100, (Fri, Sep 18th)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

🪲 NVD — Last 20 Scored Vulnerabilities

Latest scored CVEs from the National Vulnerability Database (14604 in last 30 days).
Critical: 4 · High: 6 · Medium: 7 · Low: 3. View full dashboard →

  1. CVE-2026-93923
    — CVSS 8.8 (HIGH)

    SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing stored cross-site scripting. Attackers can supply crafted notebooks or call administrative endpoints t…
  2. CVE-2026-93922
    — CVSS 8.8 (HIGH)

    SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads i…
  3. CVE-2026-93921
    — CVSS 4.3 (MEDIUM)

    SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only token holders to access document metadata. Attackers can call the endpoint with type=8 and crafted c…
  4. CVE-2026-93740
    — CVSS 10.0 (CRITICAL)

    A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is …
  5. CVE-2026-93739
    — CVSS 9.9 (CRITICAL)

    A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The …
  6. CVE-2026-75885
    — CVSS 9.3 (CRITICAL)

    A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Reque…
  7. CVE-2026-93738
    — CVSS 9.9 (CRITICAL)

    A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipulation of the argument webpage results in buffer overflow. The …
  8. CVE-2026-93574
    — CVSS 6.5 (MEDIUM)

    A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect pa…
  9. CVE-2026-93562
    — CVSS 6.5 (MEDIUM)

    A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker…
  10. CVE-2026-88097
    — CVSS 8.1 (HIGH)

    Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
  11. CVE-2026-85272
    — CVSS 4.3 (MEDIUM)

    Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extract_archive.py uses _is_bad_path to validate safe_extractall targets by c…
  12. CVE-2026-85271
    — CVSS 6.1 (MEDIUM)

    Open edX Platform enables the authoring and delivery of online learning at any scale. From Redwood until Ulmo and Verawood.1, the add_additional_attributes_to_notifications function in openedx/core/djangoapps/notificatio…
  13. CVE-2026-71855
    — CVSS 5.9 (MEDIUM)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, src/flow-hash.c can treat an IPv4 and IPv6 flow as equal without comparing …
  14. CVE-2026-71418
    — CVSS 7.5 (HIGH)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously proce…
  15. CVE-2026-68928
    — CVSS 8.6 (HIGH)

    Acode is a powerful text and code editor for Android. From 1.11.6 until 1.12.7, com.foxdebug.acode.rk.exec.terminal.TerminalService is declared as an exported service in src/plugins/terminal/plugin.xml without a binding …
  16. CVE-2026-63452
    — CVSS 7.5 (HIGH)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit…
  17. CVE-2026-63451
    — CVSS 3.3 (LOW)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule that combines frame inspection without conte…
  18. CVE-2026-63450
    — CVSS 3.7 (LOW)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT o…
  19. CVE-2026-63449
    — CVSS 3.7 (LOW)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body leng…
  20. CVE-2026-63448
    — CVSS 5.9 (MEDIUM)

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suric…

Source: NVD CVE API 2.0

Generated by CryptXNet.ai Threat Intelligence Platform · September 19, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com