The indexed-btree npm malware campaign expanded to nine additional packages linked to the same operation, widening exposure across the npm ecosystem. The packages impersonated sorted-btree and used runtime execution to bypass npm v12 install-script defenses, putting developers at risk of hidden code execution. The malware could collect host details, exfiltrate them through Slack and Telegram, and use a Sepolia smart contract for command and control.

The indexed-btree npm package is an ongoing malware activity that hides a loader in normal runtime code to evade supply-chain defenses and reach developer environments at execution time. The package impersonates sorted-btree, has about 2 million weekly downloads, and can collect host details before exfiltrating them through Slack and Telegram. It also polls a Sepolia smart contract for C2 data and can stage a second payload.

OpenAI fixed Heapjack in Codex Desktop and Overpatch in Codex CLI, closing sandbox escapes that could let untrusted agent activity reach a developer's host. The flaws broke command-execution boundaries in OpenAI Codex, including a path to unsandboxed command execution from read-only mode. Researchers reported both issues on August 12, and OpenAI patched them within eight days. Users should upgrade to Codex Desktop build 26.818.21641 or Codex CLI 0.149.0 or later.

TigerByte Cyber emerged from stealth with $3 million in seed funding led by Hale Capital Partners and backed by Tenon VC, expanding a cybersecurity business focused on AI and edge devices. The company says its Cyber Protection Suite (CPS) hardens legacy systems with hardware-enforced controls such as data validation, deep packet inspection, network segmentation, and post-quantum encryption. The new capital will support scaling into military and commercial aircraft, drones, satellites, and vehicles and expanding US manufacturing.

The Clop (aka Cl0p) data leak site was breached and defaced, with attackers claiming server data and onion-service keys were stolen, putting the gang's Tor presence at risk. The intrusion was attributed to ShinyHunters and began on Friday night. The compromised site remained reachable after the defacement, and the attackers said they were still reviewing the allegedly stolen data. The event adds a direct operational disruption to an already active feud between the groups.

SolarWinds released security updates for Access Rights Manager (ARM) to fix CVE-2026-28326, a high-severity flaw that could enable unauthenticated remote code execution. The issue affects all versions of ARM 2026.2 and prior and is rated CVSS 8.8. SolarWinds patched the bug in ARM 2026.2.1 after the flaw was reported by Armadin researcher Kai Huang. SolarWinds said it has no evidence of in-the-wild exploitation.

CVE-2026-58138 is an unauthenticated remote code execution flaw in Orkes Conductor 3.21.21 before 3.30.2 that is being actively exploited. Attackers can submit crafted workflow definitions with JavaScript or Python expressions to the workflow API before authentication and trigger arbitrary OS command execution. Organizations running affected versions face immediate takeover risk on exposed Conductor instances until they upgrade or isolate the API.

Three Linux kernel vulnerabilities—CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964—were added to CISA KEV after evidence of active exploitation. The flaws expose affected systems to memory disclosure, denial-of-service, local privilege escalation, and data integrity problems. Red Hat updated advisories on September 19, 2026, and FCEB agencies were told to apply fixes by September 21, 2026.

Red Hat updated its Linux kernel advisories on September 19, 2026 to flag active exploitation of CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964, pushing operators to treat the flaws as high priority. The guidance says there are known public exploits for at least one of the CVEs, increasing the urgency for remediation. FCEB agencies were told to apply the necessary fixes by September 21, 2026 under BOD 26-04.

CISA added three Linux kernel flaws to its KEV catalog after evidence of active exploitation, forcing federal remediation prioritization. Under BOD 26-04, FCEB agencies are recommended to apply fixes by September 21, 2026. Red Hat updated its advisories on September 19, 2026, and the flaws can enable memory disclosure, denial-of-service, and local privilege escalation.

Linux kernel local-privilege-escalation flaws across DirtyAH6, TUNderflow, PPPoEject, and DiagSpill now have public exploit code, leaving older systems exposed to local root risk until they are updated. Kernel maintainers have already fixed the issues, and up-to-date kernels are not affected. No real-world abuse has been reported yet, but public code increases the danger on shared systems.

WordPress 7.1.1 shipped a security release that patches new WordPress core vulnerabilities and covers supported branches back to 4.7. The update closes a flaw that could let a logged-in administrator trigger a theme install from WordPress.org by opening a crafted link. WordPress told site owners to update right away, and the release is already available for affected branches. WordPress said there is no sign of real-world abuse.

WordPress core now has a fixed Click2Shell flaw that can make a logged-in administrator install an attacker-chosen theme from WordPress.org, creating a path to server compromise when chained with a second bug. WordPress shipped the fix in 7.1.1 on September 17, 2026, and says there is no sign of real-world abuse. The flaw affects the core link-handling flow and can trigger theme installation without an explicit Install click. Researchers showed that the forced install can be combined with a separate theme weakness to reach code execution.

Gyazo suffered a security breach that exposed 23.62 million user records and 490 million image metadata records, creating risk of unauthorized image access and credential abuse. The compromise came through a vulnerability in Gyazo's image upload server, and the attacker used that foothold to run arbitrary commands on Helpfeel's systems. Exposed records included email addresses, password hashes, session-related data, and image-link IDs that could let outsiders view captures without permission. Helpfeel disabled viewing for some images, told users to change passwords, and said the flaw was fixed after suspicious activity was noticed on September 11.

The Transparent Tribe operation Operation RapidRust is sustaining active cyber attacks against government and defense organizations in India and Afghanistan, raising the risk of follow-on intrusion and credential theft. The group is using newly identified tools RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH to support command-and-control, exfiltration, and USB propagation. It is also abusing private GitHub repositories and typosquatted domains impersonating The Print and India Today to host malicious content. Much of the observed activity fell between August 20 and September 1, 2026, with command activity limited to weekday mornings UTC.

An ongoing SEO-optimized GitHub lure campaign is impersonating software firms to push Rapuncel, expanding malware exposure across people searching for popular downloads. The operation uses fake repos that mimic LastPass and at least 39 other companies, turning routine software searches into a malware delivery path. Victims are redirected through download buttons and ZIP archives before the installer sideloads payloads and disables security tools. The chain matters because it combines brand impersonation, search manipulation, and an EDR-killing driver to improve successful infections and data theft.

Rapuncel is being distributed through an ongoing malware campaign that uses SEO-optimized fake GitHub repositories to lure people searching for well-known software, increasing the risk of credential theft and wallet theft on infected Windows devices. The payload chain combines a sideloading installer, a Microsoft-signed kernel driver, and a persistence mechanism that helps the malware keep running after reboots. Once security tools are disabled, the infostealer can collect browser credentials, session tokens, screenshots, and system information before exfiltrating the data.

Microsoft Teams is expanding Weaponizable File Protection admin controls so organizations can customize which file types are blocked, reducing exposure to risky attachments in chat and channel messages. The update is slated to begin rolling out in November 2026 and gives security teams the option to keep the Microsoft-recommended default list or apply their own policy. The change broadens policy flexibility across Android, desktop, iOS, macOS, and web deployments.

The Settra ransomware operation has been linked to repeated attacks across retail and manufacturing victims, indicating a coordinated campaign rather than isolated incidents. The activity spans June through September and pairs MeshAgent RMM, BYOVD, and recovery-disabling steps to maintain access and complicate recovery. The pattern increases the risk of renewed encryption and double-extortion pressure for similar organizations.

The Settra ransomware variant is being deployed against retail and manufacturing victims, encrypting files and hindering recovery. It first appeared in June and was later used in incidents in July and September, showing repeated operational use. Attackers used MeshAgent RMM for persistent access and added BYOVD and other recovery-disruption steps to make restoration harder. The activity also overlaps with double-extortion tactics, raising pressure on affected organizations beyond encryption alone.

OpenAI suffered an employee account takeover that led to internal repository access and limited reads of private-repository metadata and commits. The access path ran through an OpenAI employee’s account linked by Codex integration to OpenAI’s GitHub organization. The incident mattered because the intruder was able to open a pull request inside an internal repository before testing stopped.

Discourse HEIC/HEIF upload processing is tied to CVE-2026-32882, a flaw that Discourse rates as remote code execution with an 8.8/10 severity score. The issue sits in the libheif path used after uploads are handed to ImageMagick, and the affected OpenAI forum path was described as community.openai.com. Hacktron says it chained the bug with OpenAI's login flow to reach ChatGPT and Codex accounts for several OpenAI employees and access an internal code repository, but OpenAI says the work was a controlled report, fixed the issue in about 14 hours, and paid a $6,500 bounty.

Discourse released a fix for the image-processing flaw affecting HEIC/HEIF uploads and added sandboxing to reduce exposure from malicious files. The remediation came within two days and was paired with a security advisory. The patch narrowed the risky path that routed unsupported uploads into ImageMagick/libheif decoding.

CISA hosted Cyber Storm X, a four-day national cybersecurity exercise that tested response readiness for critical infrastructure across the public and private sectors. The exercise drew 2,000 participants and marked the tenth Cyber Storm in the program’s 20-year history. It centered on a nation-state adversary scenario involving rail, ports, water, and wastewater systems. CISA plans to publish a public after-action report with lessons learned.

Plugin pinning bypass in four AI coding agents lets a repository owner swap a supposedly reviewed plugin for malicious code, turning a trusted add-on into a code-execution path. The swapped plugin can reach files, saved credentials, and the systems the user can log in to. Anthropic patched Claude Code 2.1.179 and OpenAI patched Codex 0.146.0, while GitHub Copilot has no fix and Gemini CLI will not be patched.

The WeaselBiscuit stealer was found in 13 npm packages, expanding supply-chain risk to developer environments and extension data theft. The malware is triggered by an npm import, pulls its payload from an Npoint dead drop, and executes in memory after resolving command-and-control configuration. It harvests Chrome extension storage across Windows, macOS, and Linux, and on Windows it can also log clipboard contents and keystrokes.

FBI seized nightmare-stresser[.]com and nightmarestresser[.]org, disrupting NightmareStresser, a long-running DDoS-for-hire service. The U.S. Department of Justice said the domain seizure was part of Operation PowerOFF and involved a coordinated law-enforcement action. Authorities said the service had been active since at least 2022 and was used to launch hundreds of thousands of DDoS attacks against victims worldwide. Prior reporting also tied the platform to 566,000+ registered users and 52 servers.

CISA moved its vulnerability reporting and coordination workflow to VINCE-NT, adding more automation and built-in tools that improve disclosure handling for reporters, suppliers, and case managers. The shift matters because the platform now supports faster triage, smoother advisory publication, and tighter coordination across active cases. Stakeholders must update reporting procedures to submit through VINCE-NT.

Check Point Security Management Server and Log Server deployments are affected by CVE-2026-91843, a critical stack-based buffer overflow in the login process that can let an unauthenticated attacker achieve root remote code execution. Check Point says the flaw is not flagged as actively exploited, has released a LivePatch fix, and advises restricting Trusted Clients to known hosts or trusted IP addresses/subnets. The latest scope update says R82.20, standalone deployments, Log Servers, and Multi-Domain servers are also vulnerable, and out-of-support customers should open a ticket with Check Point support.

Manufacturing organizations remained the most targeted ransomware cohort, accounting for 22% of victims and seeing disclosed incidents rise 40% year-over-year. The pattern stayed elevated across 2025-2026, making manufacturing the top ransomware sector for the fifth consecutive year. The regional shift toward Europe adds pressure for manufacturers with exposed operational environments and downtime-sensitive production.