📰 DAILY THREAT BRIEFING
Monday, September 21, 2026
12 News Items
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of September 21, 2026.

  1. Malicious npm packages evade install-script defenses at runtime
    — Bleeping Computer

    An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicio…
  2. Researchers escape OpenAI Codex sandbox to run commands on host
    — Bleeping Computer

    Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI ha…
  3. Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
    — The Hacker News

    Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex acco…
  4. BragJack attacks hijack AI browser agents through malicious extensions
    — Bleeping Computer

    BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity C…
  5. Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
    — The Hacker News

    A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actu…
  6. Identity Visibility in 2026: The Foundation of Identity Security
    — The Hacker News

    Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently r…
  7. HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
    — SANS ISC

    In June 2026 the IETF published RFC 10008[1], defining a new HTTP method: "QUERY". The HTTP protocol faced already by changes (HTTP/2, HTTP/…
  8. Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
    — Dark Reading

    The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand f…
  9. Cisco Zero-Day Highlights API Endpoint Authentication Issues
    — Dark Reading

    The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
  10. EY Survey Finds Autonomous AI Implementation Outpaces Oversight
    — Dark Reading

    A new survey of senior AI execs shows that while organizations are rapidly deploying AI and autonomous systems, their process and controls a…
  11. A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
    — Unit 42

    Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure yo…
  12. ISC Stormcast For Friday, September 18th, 2026 https://isc.sans.edu/podcastdetail/10100, (Fri, Sep 18th)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

🪲 NVD — Last 20 Scored Vulnerabilities

Latest scored CVEs from the National Vulnerability Database (14039 in last 30 days).
Critical: 4 · High: 1 · Medium: 14 · Low: 1. View full dashboard →

  1. CVE-2026-94097
    — CVSS 10.0 (CRITICAL)

    A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic Endpoint. This manipulation of the argument param/…
  2. CVE-2026-94096
    — CVSS 9.9 (CRITICAL)

    A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component LAN IP Configuration Handler. The manipulation of …
  3. CVE-2026-94095
    — CVSS 9.9 (CRITICAL)

    A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component Traceroute Diagnostic Feature. The mani…
  4. CVE-2026-94094
    — CVSS 4.3 (MEDIUM)

    A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Route. Executing a manipulation can lead to…
  5. CVE-2026-94093
    — CVSS 6.3 (MEDIUM)

    A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file save_util.py. Such manipulation leads to deserializa…
  6. CVE-2026-94092
    — CVSS 5.5 (MEDIUM)

    A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can b…
  7. CVE-2026-94091
    — CVSS 5.5 (MEDIUM)

    A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserial…
  8. CVE-2026-94090
    — CVSS 6.3 (MEDIUM)

    A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length …
  9. CVE-2026-94089
    — CVSS 10.0 (CRITICAL)

    A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id…
  10. CVE-2026-94051
    — CVSS 6.3 (MEDIUM)

    A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the file local_servers/pdf-tools-mcp/pdf_tools_mcp/serve…
  11. CVE-2026-94050
    — CVSS 4.3 (MEDIUM)

    A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSON-RPC interface. Such manipulation leads to inform…
  12. CVE-2026-94049
    — CVSS 4.3 (MEDIUM)

    A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is po…
  13. CVE-2026-94048
    — CVSS 6.6 (MEDIUM)

    A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument role_id results in impro…
  14. CVE-2026-94047
    — CVSS 6.3 (MEDIUM)

    A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The…
  15. CVE-2026-94046
    — CVSS 4.3 (MEDIUM)

    A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argume…
  16. CVE-2026-94045
    — CVSS 3.5 (LOW)

    A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the component Goods Save Endpoint. Performing a manipulati…
  17. CVE-2026-94044
    — CVSS 7.3 (HIGH)

    A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route.ts. Such manipulation of the argument file…
  18. CVE-2026-94043
    — CVSS 5.3 (MEDIUM)

    A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go of the component Gmm Handler. This manipulation causes r…
  19. CVE-2026-94042
    — CVSS 6.3 (MEDIUM)

    A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/add_table.php. The manipulation of the arg…
  20. CVE-2026-94041
    — CVSS 6.3 (MEDIUM)

    A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown functionality of the file admin/add_menu.php. The manip…

Source: NVD CVE API 2.0

Generated by CryptXNet.ai Threat Intelligence Platform · September 21, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com