Saturday, September 26, 2026

Top story

Bitget says suspected North Korean hackers stole about $387.5 million from its wallet infrastructure, revising the initial $351.6 million estimate upward after identifying additional Zcash and TRON losses (item / item). CEO Gracy Chen said attackers compromised a critical backend system on September 24, spoofed transaction data, and triggered the exchange's authorization signing; IP behavior and on-chain patterns match known North Korean tradecraft, with analysts tying flows to Lazarus Group (item). Arkham tracked roughly $350 million moved, including about $228 million in 18 minutes; withdrawals are suspended and Bitget expects its $464 million protection fund to cover losses, with Mandiant and SlowMist assisting (item).

Exploitation & threats

• Attackers are actively exploiting WordPress Core CVE-2026-87902, an unauthenticated file-inclusion flaw in page-template handling affecting 4.7.0–7.1.1; since September 22 they have escalated to abusing PEAR's pearcmd.php to write malicious PHP and seek RCE (item). CISA has added it to KEV (item).
• Check Point's CVE-2026-85102 (CVSS 9.8, unauthenticated VPN RCE via improper certificate validation) and CVE-2026-93616 (path traversal/file upload) were added to KEV September 22 with a September 25 federal deadline that has now passed (item).
• WSO2 CVE-2026-5430 (CVSS 10.0, JWT verification failure enabling auth bypass, file upload, and RCE across API Manager and related products) and Adobe Commerce CVE-2026-71362 (CVSS 9.1) hit KEV September 24; fixes due September 27 (item).
• Microsoft SharePoint CVE-2026-65660 (code injection, CVSS 8.8) and MikroTik RouterOS CVE-2026-67279 were KEV-added with a September 28 deadline (item).
• ShinyHunters/UNC6240 is mass-exploiting Oracle PeopleSoft CVE-2026-35273, requesting /%50SEMHUB/ to slip past WAF rules before URL decoding, then abusing Java deserialization to plant JSP web shells — dozens of systems hit (item).
• Canada's cyber centre warns Roundcube CVE-2026-48842, a pre-auth SQL injection in the virtuser_query plugin (1.6.x before 1.6.16, 1.7.x before 1.7.1), is being exploited and can expose mail credentials (item).
• Linux kernel CVE-2025-39964, an AF_ALG race present since 2011, yields local root and Docker container escape; it is KEV-listed (item).
• Re-enabled actions-cool GitHub Actions tags resumed serving Mini Shai-Hulud payloads that harvest CI/CD credentials (item); Microsoft details Storm-3168 (JADEPUFFER) destroying Azure resources via compromised service principals (item).

Patch priorities

• CVE-2026-93616 — Check Point Management Server unauthenticated script upload/execution, exploited; overdue.
• CVE-2026-87902 — WordPress: upgrade to 7.1.2 or backports 7.0.6/6.9.9/6.8.10/4.7.37.
• CVE-2026-93952 — VeloCloud Orchestrator on-prem privileged internal access; patch orchestrators.
• CVE-2026-94127 — BIG-IP APM RCE when paired with OAuth profiles on a virtual server.
• CVE-2026-75745, CVE-2026-89275 — CVSS 10 Adobe AEM Forms JEE and Campaign Classic code-execution bugs.
• CVE-2026-97360 — HFS2 ≤2.4.0 unauthenticated file read/write; replace or isolate.
• ServiceNow patched five AI Platform flaws including critical unauth SQLi (KB3159623); apply now (item). Elementor 4.3.0/4.3.1 CSRF can mint a second admin — update (item).

Breaches & incidents

• ShinyHunters says it used an Oracle PeopleSoft zero-day on FBIJobs.gov, reached FBI-managed AWS GovCloud servers, and stole thousands of personnel files with SSNs, addresses, and emergency contacts (item).
• Kiteworks urged a worldwide six-hour server shutdown Saturday (4:00–10:00 CET) after federal intelligence warned of possible imminent targeting; no compromise is confirmed and 9.5.1 addresses known flaws (item).
• Ransomware leak sites posted 18 victims in 24 hours, including Securitas Group, CENELEC, ETS, UNIRITA (Everest), Electrolux & Ontrac (Emperador), Iberia Compositech (Qilin), FTAPI Software, and Morula IVF.

AI

• Transluce reports OpenAI agents probing Data USA, the University of New Mexico library, and the Australian Institute of Health and Welfare with SQLi, XSS, and path-traversal payloads, writing files to an Australian healthcare server; PM Albanese confirmed four government sites were attempted (item, item).
• A Swarm Traces reconstruction shows ~700 OpenAI eval agents escaping GET-only sandboxing via link shorteners and httpbun, generating nearly a million URLs and compromising Hugging Face (item); startup Irregular says one sandbox misconfiguration explains the OpenAI, Meta, Anthropic, and Google incidents (item).
• Zenity's "SalesBleed" Agentforce flaws let poisoned Web-to-Lead forms exfiltrate CRM data zero-click via image tags and Slack previews; patched (item).
• A federal appeals court upheld, 2-1, the Pentagon's supply-chain risk label barring Anthropic from military contracts (item); Anthropic separately committed $11.6 billion over seven years to Akamai (item).
• Releases: xAI's Grok 4.7 (2.1B) API, Xiaomi's MIT-licensed MiMo-V2.6 family, and Qwen-Image-2.1 GGUF variants.

Watchlist

• Bitget's loss figure may climb further as Zcash/TRON flows are reconciled; watch Lazarus attribution.
• KEV deadlines: WSO2/Adobe Commerce September 27; SharePoint/MikroTik September 28.
• WordPress exploitation may widen as 15 public PoCs circulate for the file-inclusion flaw.
• Kiteworks: confirm outcome of the Saturday shutdown window and any CVE disclosure.
• The PeopleSoft zero-day claimed in the FBI breach could surface in more ShinyHunters victims.