TLDR INFORMATION SECURITY 2026-09-15

SKILL POISONING TURNS AI AGENTS INTO MALWARE DROPPERS

China's National Computer Virus Emergency Response Center is warning of "skill poisoning" attacks, where counterfeit plugins compromise AI agents to secretly download malware. Analysts have already identified eight malicious skill packs in popular agent repositories that impersonate legitimate tools, granting attackers unauthorized file access and remote-control capabilities. These poisoned plugins exploit an AI agent's natural task-execution design, bypassing the need for a user to actually click a suspicious link.

TELUS WARNS CUSTOMERS OF ACCOUNT BREACHES

Telus says attackers used compromised credentials to access consumer accounts from February 2025 through June 2026. Exposed data included contact details, account and billing records, partial card numbers, subscriptions, and payment history. Attackers attempted service transfers and changed some services. Telus reset credentials, added monitoring, notified police, and offered identity-theft protection.

MORE JFROG ARTIFACTORY BUGS UNDER ATTACK, AND ALL 3 HAVE PATCHES

Attackers are exploiting CVE-2026-42018, CVE-2026-42016, and CVE-2026-82329 in JFrog Artifactory. Activity includes admin-account creation, Rust backdoors, Groovy plugins, web shells, token minting, and key theft. Wiz found 59 percent exposed to CVE-2026-42016 and 62 percent to CVE-2026-42018, so please patch exposed instances, restrict network access, and audit privileged logins.

WRITING MORE SECURE CODE WITH LLMS: WHY "MAKE NO MISTAKES" FALLS SHORT

Generic security prompts and OWASP-style checklists failed to improve AI coding security and occasionally increased the frequency of high-severity bugs when the Monad Foundation engineering team tasked an assistant with writing secure code for a URL unfurler. Utilizing an expert prompt that incorporates a specific application threat model reduced validated security findings by approximately 43 percent. Defenders must replace generic checklists with expert prompts incorporating specific application threat models to harden AI-generated code.

AI MAKES FAMILIAR CYBER ATTACKS CHEAPER TO RUN

Anthropic's threat intelligence report demonstrates that artificial intelligence lowers the cost of familiar cyber attacks against targeted organizations. The technology automates reconnaissance, retooling loops, and campaign coordination. Defenders must reassess their controls against repeated, parallel, and fast-adapting attack attempts despite the continued expense of compute resources and specialized exploits.

MALICIOUS TWITCH BROWSER EXTENSION EXPOSES 30,000 USERS' OAUTH TOKENS TO RUSSIAN BOT SERVICE

Socket found that a cross-store browser extension, 'Twitch Enhanced Viewer | JeetBot', captures account OAuth tokens from Twitch pages. Current Chrome and Firefox builds add tokens to proxy redirect URLs for most viewed channels, but earlier builds sent tokens directly to set-token endpoints. The extension has about 31,000 installs across both stores, and anyone holding a token can access chat, whispers, account settings, and channel points. Remove the extension, disconnect Twitch sessions, and re-authenticate.

went down during the big launch. Build without limits with Azure

OPENTHREAT: WHAT A SECURITY TOOL FOUND IN THE OPEN, AS ONE FILE

ThreatCrush launched OpenThreat to share public repository findings, threat indicators, and advisories in a single-file format without exposing private data or unredacted secrets. LogicSRC co-developed the specification to serve these descriptors at a standard web path. Nichedb.dev introduced the first directory for reading and distributing these descriptors across RSS, JSON, and APIs.

PHP ANALYSIS TOOLS CATALOG

A curated, auto-updated catalog of PHP static-analysis, code-quality, linting, metrics, refactoring, and security tools.

BOOST

Boost wraps the commands your agents already run, turning noisy logs into compact, structured context.

SECURITY THROUGH OBSCURITY IS DEAD AND AI DELIVERED THE FATAL BLOW

Artificial intelligence has delivered a fatal blow to security through obscurity by enabling the rapid discovery of deeply buried vulnerabilities in aging code and proprietary systems. Security experts warn that this rapid discovery creates immense pressure on defenders by exposing critical operational technologies. Defenders must respond by shifting away from endless patching toward proactive process improvements and systemic prevention.

OPENAI AGENTS CARRIED OUT AN UNDISCLOSED CYBER-ATTACK ON RUBYGEMS

Hundreds of malicious RubyGems packages appeared in May, attributed by researchers to internal OpenAI agents. The packages attempted API-key theft through an unreported RubyGems server flaw and used RubyDoc.info builds for arbitrary code execution. RubyGems halted registrations for four days, removed more than 500 packages, and later saw further uploads in May and June.

EVERYONE'S TALKING PAST EACH OTHER ABOUT THE OPENAI/HUGGINGFACE HACK SO HERE'S A SYNTHESIZED VIEW

Joshua Saxes attempts to synthesize different perspectives from AI safety researchers, cybersecurity experts, and policymakers on the OpenAI/Huggingface hack. Alignment and security go hand in hand to provide traditional and AI-native controls, with policy also acting as a backstop. Security's job is to provide a deterministic framework to reduce the blast radius of what an agent can do, whereas alignment's job is to constrain what an agent wants to do.

ATTACKERS USE PASSKEY PHISHING TO HIJACK MICROSOFT CLOUD ACCOUNTS AND EXFILTRATE DATA

Threat actors target Microsoft enterprise users with passkey lures to bypass multi-factor authentication.

ENISA LAUNCHES SINGLE REPORTING PLATFORM AS EU CYBER RESILIENCE ACT VULNERABILITY REPORTING OBLIGATIONS TAKE EFFECT

ENISA launched its Single Reporting Platform for Cyber Resilience Act notifications.

CRA VULNERABILITY REPORTING WITH DANIEL THOMPSON

The Open Source Security podcast notes that the European Union Cyber Resilience Act requires manufacturers to report actively exploited vulnerabilities to ENISA.