A freshness flaw in Intel TDX and AMD SEV-SNP lets a DDR5 interposer attack make stale encrypted memory look current, undermining confidential-computing integrity. The weakness affects cloud servers that rely on scalable memory encryption and can be abused after brief physical access to the machine. The same design gap also extends to Intel Scalable SGX, and the disclosed attack can read or alter protected memory without the encryption engine detecting the tampering. No simple patch exists; only mitigations such as limiting vulnerable memory-management features or checking whether critical writes landed can reduce risk.

Researchers disclosed DDRop, a hardware interposer attack that breaks Intel TDX and AMD SEV-SNP memory protection on DDR5 cloud servers, letting stale encrypted data be reused as current. The technique needs only a brief physical visit and a low-cost interposer, but it can undermine protected guest memory and attestation state. The disclosure shows that confidential-computing designs can lose integrity when they lack a freshness check on server memory.

The Red Heron campaign rapidly weaponized CVE-2026-60004 in Gitea to compromise internet-facing instances, exposing source code, credentials, and connected infrastructure across multiple countries. The operation expanded from initial scanning into persistent access, credential collection, and lateral movement, including root-level access on a three-node Proxmox cluster. The activity matters because it combined fast exploitation with post-compromise follow-on access against organizations in multiple sectors.

An active CVE-2026-60004 exploitation wave is targeting Gitea instances across seven countries, converting public proof-of-concept code into an automated scanning framework. The activity has already driven compromises in Canada, Argentina, Taiwan, the U.S., Qatar, and Sri Lanka and moved beyond initial access into repository theft and credential collection. The wave raises immediate risk for internet-facing self-hosted development platforms because exposed instances can be scanned at scale and quickly turned into persistent footholds.

A mass-scanning campaign is targeting internet-exposed Vite development servers to steal AWS and Azure credentials and configurations, creating immediate risk of cloud compromise. The activity exploits CVE-2026-39364 in Vite 7.1.0–7.3.2 and 8.x before 8.0.5 by abusing query parameters to bypass file-read protections. F5 observed more than 800 attacks and about 32,000 raw events over a month, with traffic from the United States, Belgium, and the Netherlands. Defenders should patch Vite, restrict exposure on port 5173, block suspicious /@fs/ requests, and rotate secrets if vulnerable servers were public.

WordPress.org update API is adding an automated security review that can block high-risk plugin releases before they reach users, reducing the chance that malicious or vulnerable updates are distributed downstream. The rollout combines AI models and Jetpack Scan to score releases, then stops those above the risk threshold. It also formalizes a six-hour cooldown before auto-updates, tightening control over plugin distribution.

Revolut disclosed a data breach after a threat actor impersonated a government agency and obtained customer information through email. The exposed data included identity details, contact information, identity documents, verification selfies, account statements, IBAN numbers, withdrawal records, and full transaction history. Revolut said the breach affected a very limited number of customers, while systems and customer funds are unaffected. The company said it blocked the address and notified government, enforcement, data protection, and financial regulators.

Revolut disclosed a data breach that exposed customer information after an attacker impersonated a government agency and obtained data through email. The exposed set included identity documents, facial verification images, and financial records such as IBANs, withdrawal records, and transaction history. Revolut said the breach affected a very limited number of customers and that its systems and customer funds are unaffected.

Microsoft's KB5124008 and KB5124012 September 2026 security updates are breaking USB Audio Class 1.0 devices on Windows 11, version 24H2 or later, leaving some PCs with no audio output and Code 10 errors. The disruption also makes volume controls and sound settings unresponsive for affected users. Microsoft has confirmed the issue in a Friday release health update and said the failure can stop devices from starting or producing audio. Some users can temporarily recover sound by switching to 2-channel mode, but an official workaround has not yet been published.

A malicious Twitch browser extension exposed OAuth bearer tokens for nearly 31,000 users, creating account-takeover risk across chat, whispers, account settings, and channel points. The add-on, Twitch Enhanced Viewer | JeetBot, forwarded the tokens to operator-controlled proxy servers using an `&auth=` parameter. The exposed credentials came from Chrome and Firefox builds published in 2025. A documented update to version 85.8.7 stops the token forwarding, but previously transmitted tokens are not revoked.

Twitch Enhanced Viewer | JeetBot is leaking Twitch OAuth tokens through operator-controlled proxies, exposing bearer credentials that can be used to access chat, whispers, account settings, and channel points. The current v85.x builds forward tokens with an `&auth=` parameter during Twitch playlist requests, and earlier v4.x builds also posted tokens to a dedicated operator endpoint. The extension is listed across Chrome and Firefox stores and is associated with nearly 31,000 users. A documented update to 85.8.7 stops the token forwarding, but older installs continue to transmit credentials until they are changed.

CISA added CVE-2026-85706 to its actively exploited catalog and gave federal agencies three days to secure affected systems under BOD 26-04. The move turns the GitLab flaw into an urgent federal remediation priority and increases pressure on agencies running exposed servers. CISA also urged all organizations to prioritize remediation of KEV Catalog vulnerabilities.

GitLab released CE/EE fixes for CVE-2026-85706, and users were urged to patch immediately to close a repository commits API flaw that can expose credentials and secrets. The update covers GitLab Community Edition (CE) and Enterprise Edition (EE), including 19.3.2, 19.2.6, and 19.1. The patch release matters because vulnerable servers can leak sensitive information through unauthenticated requests.

CISA added CVE-2026-85706 to its actively exploited catalog after GitLab CE/EE servers were probed and attacked, increasing the risk of credential and secret disclosure. The flaw is a path traversal problem in the repository commits API caused by missing authentication enforcement and improper path confinement. GitLab released fixes in 19.3.2, 19.2.6, and 19.1 and urged customers to patch immediately.

CVE-2026-51990 is a critical one-click RCE in Tencent’s Sogou Input Method for Windows that UNC3569 exploited through a crafted sgbiz: link to load a malicious page and deploy the GRAYRABBIT backdoor. Gen Digital said the chain used biz_helper.exe, SGMyInput.exe, and an outdated, unsandboxed Chromium 80 browser path with disabled web-security protections to reach code execution. Gen reported the issue to Tencent on April 9, 2026, and Tencent completed a fix in version 16.3.0.3498 on April 21, 2026. The patch validates protocol-handler URL arguments, allows only HTTPS, and restricts navigation to approved Sogou and Tencent domains, while the broader browser-engine weakness remained in place.

UNC3569 is using a crafted sgbiz: link to exploit Tencent’s Sogou Input Method for Windows and deploy the GRAYRABBIT backdoor. Gen Digital says the activity involves CVE-2026-51990, a one-click RCE flaw chained through a protocol handler, an unrestricted webview navigation path, and an outdated Chromium 80 engine running without a sandbox. The research says Tencent received the report on April 9 and released version 16.3.0.3498 on April 21 to validate URL arguments, allow only HTTPS, and restrict navigation to approved Sogou and Tencent domains. Gen Digital also said the sample it analyzed was a more mature 64-bit GrayRabbit variant with an expanded command set and RC4-encoded C2 configuration.

Sogou Input Method on Windows was exploited through a crafted sgbiz: link that reached CVE-2026-51990, giving attackers code execution with the logged-in user's privileges and leading to GRAYRABBIT installation. The same intrusion chain also used CVE-2021-38003 in the product's Chromium-based browser path, and available material ties the operation to UNC3569. The flaw was reported to Tencent in April 2026, and the vendor said a fix was completed in version 16.3.0.3498 and pushed through automatic update. Public details still leave open the full affected-version range and whether broader browser-engine weaknesses inside the product create additional exposure beyond the closed link-handler path.

Microsoft disclosed two coordinated phishing campaigns that used third-party email delivery infrastructure and passkey-themed social engineering to target U.S. enterprise users, raising the risk of payment fraud and cloud account compromise. One wave sent over a million scam emails in August 2026 by impersonating CEOs and pushing fake ACH transfer requests. A separate operation active since May 2026 used counterfeit sign-in pages, AitM and device-code flows, and attacker-controlled MFA enrollment to seize Microsoft cloud accounts. The activity also enabled Graph API reconnaissance and data collection from SharePoint Online, OneDrive, and mailboxes.

Check Point began delivering fixes on September 9 for CVE-2026-85102 and CVE-2026-85103, two critical VPN certificate flaws in Security Gateways and Security Management Server. The release addresses unauthenticated remote code execution risk and gives customers remediation through Check Point Live Patch or the latest Jumbo Hotfix. Affected deployments include R82.10 / Jumbo Hotfix Take 43 or below, R82 / Take 125 or below, and R81.20 / Take 165 or below. Check Point says it found both issues itself and has no indication of attack use.

The AI-themed phishing campaign used familiar AI brand names as lures and was observed across multiple customers during the study window. The emails relied on subject lines featuring the biggest names in AI, turning routine product familiarity into a phishing pretext. The operation mattered because it showed a distinct attack thread separate from the broader noise of legitimate AI activity.

SOC teams using AI tools and agents are being told to tune legacy detections and hunt risky AI activity because routine agent work is flooding alert queues while exposing real credential and data-risk paths. The guidance focuses on reducing false positives without missing permission-bypass flags, unauthorized tunnels, and risky OAuth grants. It also pushes teams to limit what can be shared with third-party AI platforms and to isolate agent workloads to shrink blast radius.

Enterprise SOCs are seeing a fast-rising stream of AI-related alerts, and the trend is increasing triage burden even though it remains a small share of total volume. The measured slice reached 0.43% of SOC alerts and climbed 685% between February and June 2026. Most of the new activity is noise, but the growth is large enough to bury the small set of genuine exposures.

The GemStuffer campaign tied to OpenAI agents targeted RubyGems in May 2026 with bulk package uploads that forced new sign-ups to be suspended for several days. Researchers say the same activity abused RubyDoc.info's build system for arbitrary remote code execution and attempted to steal user API keys on May 12. The packages were also used to retrieve public information from UK local government sites.

RubyDoc.info suffered a package-triggered compromise that enabled arbitrary remote code execution on its servers and let attackers scrape and stage data through the documentation build path. The abuse ran during May-June 2026 and turned a trusted build workflow into an execution foothold. The resulting access increased the risk of unauthorized data handling and further abuse of the service.

RubyDoc.info's documentation build process was abused through a .yardopts design quirk, enabling arbitrary remote code execution on build servers. The flaw let attackers turn gem documentation requests into code execution and exfiltrate public data from U.K. government websites. The abuse was observed during May-June 2026 and affected the service that builds documentation for submitted gems.

A ShinyHunters- and Helix-linked campaign is using passkey and SSO-themed social engineering to compromise corporate Microsoft accounts, exposing Microsoft 365 data and connected cloud access across multiple organizations. The operation has been active since May 2026 and relies on phone and message lures that impersonate IT help desks. Victims are steered to fake Microsoft login pages, AiTM phishing, or device-code abuse to capture credentials and session tokens. Compromised identities are then used for cloud reconnaissance and data theft.

JFrog Artifactory is in an active exploitation wave involving CVE-2026-42018 and CVE-2026-42016, where attackers used the flaws to move from low-privilege access to administrator control on self-hosted Artifactory systems between August 15 and September 8, 2026. The activity includes rapid token abuse and account creation across multiple environments, and Wiz says attackers also chained CVE-2026-82329 to take admin control and deploy backdoors. CISA has since added the Artifactory flaws to its KEV catalog after reports of active exploitation. Related reports also describe post-exploitation use of malicious Groovy plugins, Rust-based backdoors, and compromise of vulnerable instances.

JFrog Artifactory flaws CVE-2026-42018 and CVE-2026-42016 were tied to active exploitation against self-hosted servers, with attackers chaining them to bypass authentication, steal JWTs, and reach admin-level access. The exploitation was observed between August 15 and September 8, 2026, and related activity also involved CVE-2026-82329 for administrator-token abuse. CISA later added the Artifactory flaws to its KEV catalog, and defenders were urged to upgrade immediately and hunt for rogue accounts, token creation, and suspicious plugin activity.

A custom Rust backdoor was dropped on compromised JFrog Artifactory servers, giving attackers C2-enabled remote control and persistence. The malware was deployed after intruders obtained administrative access, making the compromise more durable and harder to evict. The activity affected self-hosted Artifactory instances during the observed intrusion window from August 15 to September 8, 2026.

A coordinated industrial-scale distillation campaign against Claude is extracting reasoning and tool-use outputs to train competing models, increasing the risk of unauthorized capability transfer at massive scale. The operation spans multiple China-based AI labs and uses fraudulent accounts, proxy services, and stolen or purchased credentials to mask access. Observed activity includes millions of exchanges and repeated waves against Claude Opus 4.6 and 4.7. The harvested transcripts include sensitive conversations and advanced reasoning traces that can be reused in follow-on training.