Cybernoz https://validator.w3.org/feed/docs/rss2.html Intigriti Bug Bytes #240 – September 2026 Rogue OpenAI agent targeted Australian government site Supreme Court permits states to use SAVE database for citizenship checks AI tools help hacker break in for $25 per target Ridge Security warns of high-severity TDengine vulnerability that can disrupt industrial telemetry and monitoring CISA launches CVE Quality Era framework to improve vulnerability data quality, infrastructure, program governance Frost and Sullivan Recognizes Wiz as a Leading CNAPP Agent Running in the Age of AI Elementor WordPress flaw lets attackers create admin accounts OnePlus 15 Flaws Let Zero-Permission Apps Gain Root Access Through OxygenOS Services Salmon Introduces Execution Verification Infrastructure (EVI) for Securing AI Agents and Autonomous Systems OPSWAT: AI-Powered Cybersecurity Protects the World’s Critical Infrastructure MacSync info-stealing malware hides malicious commands in an iCloud calendar LinkedIn adds new checks for fake profiles and work histories Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware How Meta plans to deliver petabit connectivity between US and France In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer Businesses expand AI’s cybersecurity uses as comfort with technology grows Optigo Networks launches AI Assistant to address building automation network expertise gap Cloud Range introduces AI Readiness Framework to validate AI agents before operational deployment Agents can now set up your website’s security with Turnstile Spin Rogue RMM Abuse: How Attackers Exploit Remote Access Tools Microsoft plans to deprecate Windows Deployment Services Sauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection Attackers build “silent” cryptominer on victim’s machine and give themselves away 14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated Threat detection dashboards are masking security coverage gaps That shipping rebate offer may come with a monthly charge Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise Met Police finally get full funding for national Post Office investigation Abandoned QR code subdomains open to hijacking, researcher says Windows, Linux, Android File Notification Systems Leak User Activity AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway Ryuk ransomware operator sentenced to 2 years in prison Been told to pay at a Bitcoin ATM? Read this first Fixing Flock: The controls needed now that misuse patterns are clear Celebrating Cloud Defenders at Fastest Growing Organizations The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint Hackers steal $351.6 million in Bitget crypto exchange hack Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection The Hidden Security Risks of Devices You Forgot Were Connected Abnormal AI brings governance, cloud security, and threat investigation into one suite Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data GCC organisations must ‘fight AI with AI’ to stay ahead of cyber threats Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership Roundcube Webmail Vulnerability in Attackers’ Crosshairs CVE-2026-87902: how close is your WordPress to remote code execution?