Check Point directed affected customers to Live Patch or the latest Jumbo Hotfix for its VPN certificate flaws, with rollout beginning on September 9. The guidance matters because some deployments could not patch immediately and had to rely on mitigation steps instead.

WordPress released version 7.1.2 to fix CVE-2026-87902, a critical unauthenticated path traversal flaw that can lead to remote code execution under specific conditions. The patch was backported to branches down to 4.7, leaving releases before 4.6 without a fix. Administrators should treat the update as urgent because the flaw is already being actively exploited against vulnerable sites.

Attackers are actively exploiting CVE-2026-87902 in WordPress, turning an unauthenticated path traversal flaw into payload delivery and potential remote code execution on vulnerable sites. Patchstack saw the first malicious requests at 17:44 UTC on September 22, less than five hours after WordPress 7.1.2 shipped. The activity escalated from reconnaissance to file writes under /tmp and /var/tmp, including names such as wp-pear-rce-flag.php and poc87902.php.

GitLab's incoming email token lets a holder act as the account owner, creating unauthorized commit and CI/CD execution risk across projects the user can access. The feature accepts mail from any sender and can turn a message into an issue or a merge request, so a leaked address becomes a reusable credential. Aikido Security showed that the abuse can land code on writable branches, including main, and bypass IP restrictions and 2FA.

A financially motivated threat actor is running an AI-agent-driven skimming campaign against online retailers, stealing payment card data at scale. The operation has been active since at least July and was still ongoing on September 22. In a five-day span it compromised at least 27 companies and launched 105 attack waves.

Skimmer malware has been injected across at least 119 websites, creating a large-scale payment-data theft operation. The payload captured card details from retailer checkout flows and was tied to the theft of more than 600,000 valid card records. The malware was repeatedly restored after removal, increasing the chance of continued loss and making cleanup harder.

A confirmed theft of more than 600,000 valid card details from two companies has expanded a payment-data exposure tied to a retail skimming operation. The records were taken during an attack campaign active since at least July and still ongoing on September 22. The same operation used open-source AI agent frameworks and skimmer malware, increasing the risk of fraud and downstream card abuse.

GitHub App private keys leaked in public code remained valid for GitHub's API, leaving some exposed credentials able to reach private repositories and organization controls. The research found that 474 leaked keys still authenticated as 440 distinct Apps, and some grants included organization administration and workflow control. Because these keys do not expire until manually deleted, the exposure created an ongoing access risk rather than a one-time leak.

The CLOSEDQUORUM malware now uses votes from up to four AI models to choose steal, inject, persist, or move actions, replacing a normal attacker C2 flow on Windows systems. The design can support credential theft, saved browser-password theft, and crypto wallet theft, while sending stolen data to Discord. The public sample is incomplete, but the behavior shows an early malware design that pushes command selection into commercial AI services. That shift raises the risk of more autonomous theft and persistence decisions once the code is fully operational.

Cisco Talos released CAIRN, an open-source tool that hunts malware that uses AI services, adding a new detection capability for implants that route decisions through commercial AI platforms. The release matters because it gives defenders a dedicated way to spot a growing malware technique that can blend into normal cloud and AI traffic.

Google Kubernetes Config Connector (KCC) has a confused deputy authorization flaw that can let users with only Kubernetes namespace access trigger Google Cloud IAM changes through KCC's service account. In vulnerable deployments, that can turn limited cluster permissions into organization-level Google Cloud control without any Google Cloud credentials. The issue sits at the boundary between Kubernetes RBAC and Google Cloud IAM, where KCC fails to verify that the requesting user should be allowed to use its authority.

The previously undocumented x47.c Windows botnet now appears in a seller offering 18 attack methods, including an AI API drain command that can burn paid credits at providers such as OpenAI and xAI. The same package also includes credential theft, SOCKS5 proxying, and AI-assisted persistence for infected hosts. The result is a modular botnet kit that can both extract value from AI accounts and expand control over compromised systems.

The sckit implant is being delivered through compromised MemTensor packages on npm and PyPI, turning routine installs into cross-platform credential theft from developer and CI environments. The malicious npm builds execute when the agent gateway starts or when a memory-recall event fires, while the PyPI package launches a Go binary on module import. The payload harvests secrets from cloud services, source-code platforms, package registries, and developer tools, then exfiltrates them to skyleen[.]fr. The same implant can also self-propagate through GitHub and direct package publishing, widening the blast radius.

Arista released fixed VeloCloud Orchestrator (VCO) builds for the 5.2 and 6.4 trains, reducing exposure for deployments tied to CVE-2026-93952. The patch set covers on-premises and Hosted/Dedicated VCO versions, while 6.1 and 7.0 were still awaiting fixes as of September 22. The release matters because VCO manages Edge devices in VeloCloud SD-WAN and compromise can extend beyond the orchestrator itself.

cPanel's fix for CVE-2026-87899 closes a CalDAV and CardDAV flaw that let a logged-in hosting account run code as root, putting affected servers at risk of full control. The issue affected cPanel & WHM and WP Squared, and cPanel released patched builds for the supported release lines. No temporary workaround was offered, so exposed systems need an update to remove the risk.

The WP Toolkit flaw CVE-2026-87900 lets a logged-in cPanel user change databases in other accounts, creating cross-account data-integrity risk on shared hosting systems. cPanel fixed the issue in WP Toolkit 6.11.3 or later while 6.11.2-10794 and older remain affected.

cPanel fixed CVE-2026-68490, a CalDAV and CardDAV flaw that lets a local user read other accounts' calendar events and contacts on affected hosting systems. The bug is confined to confidentiality, but it still exposes private scheduling and relationship data across accounts. cPanel & WHM and WP Squared received fixed builds, and the vendor said the update also repairs related permissions.

XRanges for AI has launched as a managed cloud and self-hosted platform for evaluating autonomous security agents against realistic targets. Built by CTF.ae, it instruments each service, records what an agent actually does, and scores every run live on four independent signals. That gives teams a more reproducible way to benchmark agent behavior across pentesting and bug-bounty workflows.

Microsoft's September 2026 Windows 11 security updates are disrupting Always On VPN connections, leaving some enterprise users stuck in "Connecting" or seeing "The specified port is already in use" errors. The issue affects devices that use automatic protocol selection for VPN tunneling and can block access back to the corporate network. Microsoft has posted a temporary workaround that forces SSTP only or IKEv2 only until a permanent fix is available.

Exploit code for CVE-2026-80521 exposed Ubuntu 26.04, 24.04, and 22.04 LTS systems to container-escape risk through a Linux kernel AF_UNIX socket use-after-free. The flaw can let an attacker break out of a container and reach root on the host, and DepthFirst said it targeted Ubuntu 26.04. The bug was fixed upstream on August 6, but Ubuntu had not shipped the patch for the affected releases.

Google released Chrome 154 to the stable channel, patching 108 vulnerabilities including 11 critical-severity bugs across desktop builds. The update matters because the fixes cover high-risk memory corruption issues in components such as ANGLE, WebGL, GPU, and browser features that can affect everyday browsing security.

ShinyHunters claims it breached the FBI using a new Oracle PeopleSoft zero-day and stole data tied to current and former FBI employees and job applicants. The group says the exposure included Criminal Justice (CJ), HR, Medlink, and other FBI systems, and it shared sample records plus a defaced FBI Jobs page. A separate account says ShinyHunters first used remote code execution in Oracle PeopleSoft and then moved into FBI-managed AWS GovCloud infrastructure. The FBI says it is investigating the unauthorized-activity claims affecting FBIjobs.gov; the access and leak claims remain unverified.

BlueMoon is a shared exploit kit used in espionage campaigns that chain Google Chrome and Microsoft Windows flaws into code execution, browser sandbox escape, and Windows local privilege escalation. Proofpoint said it observed the kit in use since August 28, 2026, and Volexity later tied related activity to UTA0560, JungleBamboo / APT31, and UTA0565. The reported chains use CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880, with follow-on delivery that included loaders, DLL sideloading, a Chrome extension or backdoor payload, and CLEANGULP. The activity targeted NGOs, U.S. aerospace companies, a Vietnamese manufacturing entity, and organizations in Indonesia and Singapore, and CISA added CVE-2026-85046 to its Known Exploited Vulnerabilities catalog on September 4.

A critical zero-day in F5 BIG-IP APM tracked as CVE-2026-94127 is being actively exploited for remote code execution on deployments configured as an OAuth Authorization Server. F5 released security updates and said systems using APM strictly as an OAuth Client / Resource Server are not affected. Administrators who cannot patch immediately can apply an iRule mitigation and should watch for multiple OAuth authentication failures, suspicious commands, and a TMM SIGABRT.

CVE-2026-94545 affects Next.js ImageResponse on the Node.js runtime, where attacker-controlled SVG input can lead to server-side code execution. The flaw impacts Next.js 16.2.0 through 16.3.5 and was fixed in 16.3.6. Next.js 15 and the Edge version of ImageResponse are not affected. No public attack reports or public exploit code were known as of September 23.

CISA added Check Point's exploited zero-day and CVE-2026-85102 to the KEV catalog, triggering a three-day federal patch clock under BOD 26-04. The action forces federal agencies to rapidly remediate the listed Check Point vulnerabilities. It raises immediate urgency for government networks running the affected products.

Check Point issued urgent fixes for CVE-2026-93616, a critical zero-day in Management Server products that is being exploited in the wild. The flaw is a directory traversal and file upload issue that can let unauthenticated attackers upload and execute arbitrary scripts on affected servers. Impacted products include Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent. Check Point said it is aware of a handful of customers who have been attacked.

Check Point released R82.20 Security Hotfix (TAR) and updated Jumbo Hotfix Accumulator packages to fix CVE-2026-93616, a Management Server zero-day exploited in the wild. The fixes cover R82.10, R82, R81.20, and R81.10, extending remediation across multiple product branches. Check Point said customers should install the patches immediately and restrict management access behind a firewall or security gateway. The company also warned that LivePatch does not resolve the flaw.

Researchers demonstrated TrustSink, a post-compromise technique that abuses Microsoft Entra external MFA providers to capture passwords during legitimate sign-ins, creating credential-theft risk for organizations that rely on external authentication. The attack can keep working across password resets until the rogue provider and related tenant objects are removed.

A Western government organization suffered a data leak after attackers reached an internal SQL server and stole 18,566 records, exposing accounts, plaintext passwords, and PII. The stolen data was tied to government and law-enforcement agencies, making the theft operationally sensitive. The breach sat inside a broader wp2shell exploitation wave against WordPress Core that hit multiple organizations across 29 countries.