TLDR INFORMATION SECURITY 2026-09-16

A PERIPHERAL PATH TO SYSTEM - EXPLOITING LOGI OPTIONS+ FOR SYSTEM SHELLS

Logi Options+, Logitech's widely used app for configuring its mice and keyboards, allowed any standard Windows user to reach SYSTEM because its privileged updater trusted only pipe connections from an agent process the user could inject. Researchers at AmberWolf used that access to override the {depot} path via the reinstall IPC endpoint, which directed a SYSTEM msiexec call to an unsigned MSI that skipped signature checks because the manifest set isSystem to true. The bug is tracked as CVE-2026-12518 and was patched on August 19, so admins should confirm that fleets run a newer build and alert on msiexec spawned by logioptionsplus_updater.exe from user-writable paths.

CLICKFIX ATTACKS ARE TRICKING MAC AND WINDOWS USERS INTO HACKING THEMSELVES

Attackers hijacked HBO Max's Reddit advertising account and posted malicious ads. The ads led to fake HBO Max pages with CAPTCHA-style ClickFix prompts that made the victims copy commands into Windows Command Prompt, PowerShell, or macOS Terminal. The commands installed infostealers that targeted passwords, active sessions, and crypto wallets. Reddit paused the ads three days after a user flagged them, though how the account was taken over remains unknown.

MASS-SCANNING CAMPAIGN EXPLOITS VITE FLAW TO EXTRACT CLOUD CREDENTIALS FROM EXPOSED DEV SERVERS

Attackers scanned exposed Vite development servers in August and exploited CVE-2026-39364. Crafted query parameters bypassed server.fs.deny and returned protected files through /@fs/. Observed targets included .env files, AWS credentials, Azure profiles, Terraform state, database passwords, and /proc data with requests spoofing crawler user agents and forged forwarding headers.

FULCRUMSEC - A LOOK AT THEIR TRADECRAFT

FulcrumSec, a financially motivated data extortion gang behind breaches at Manchester Airports Group, Arup, and Novo Nordisk, told Lab539 it runs up to 250 servers scanning client-side JavaScript and fresh bugs like React2Shell, then bulk-tests harvested credentials before picking victims. From there, it chains pivots through GitHub repos, AWS, Azure, and Secrets Manager without touching an endpoint, with a single Arup PAT reportedly opening about 10,000 private repositories. Defenders should baseline normal identity behavior and flag tokens that suddenly clone thousands of repos or enumerate unrelated secrets from unfamiliar infrastructure, since this activity relies on valid credentials rather than malware.

BELTDOWN2: ESCAPING THE CURSOR CLI SANDBOX

A malicious workspace can place a core.fsmonitor hook in .git/config. Cursor CLI ran internal Git commands outside its macOS Seatbelt sandbox. A read-only prompt triggered git ls-files, which executed the hook. The proof payload wrote to $HOME, while sandboxed shell commands could not. Anysphere acknowledged the report and shipped Cursor CLI 2026.08.04-aaa8809, and the fix injects GIT_CONFIG environment settings into every Git spawn, disabling core.fsmonitor, custom hooks, and repository attributes.

UNMASKING CLOUD IDENTITIES: FROM BEHAVIORAL CLUSTERING TO AUTOMATED DETECTION

Unit 42 clustered the CloudTrail activity of over 40,000 identities across 125 AWS environments and found they fall into consistent functional roles like console admins, CI/CD runners, backup agents, and security tools, regardless of naming or assigned IAM policies. That behavioral baseline matters because attackers masquerade behind benign labels and existing permission profiles, so a backup service suddenly running admin actions stands out even when its permissions allow it. The approach distills into a lightweight classifier that runs as standard SQL, letting teams tag identity roles at scale without a full ML pipeline.

running Go-based SSH. Integrity matters. Read more →

OPENHUNTERAI

OpenHunterAI is a local AI red-team workspace that runs attacker-style assessments against web apps, APIs, and LLM applications you own, combining browser inspection, recon, ZAP, and a Nuclei adapter under one scan plan. Its differentiator is scope control, with domain verification, deterministic plans, and human approval gates before any sensitive validation runs. It also ships as a skill for Claude Code, Codex, and Gemini CLI, so coding agents can prepare scoped assessments that wait for human reviewers to sign off.

RF-SWIFT

A powerful multi-platform RF toolbox that deploys specialized radio, hardware, and other security tools in seconds on Linux, Windows, and macOS - supporting x86_64, ARM64 (Raspberry Pi and Apple Silicon), and RISC-V architectures without disrupting your primary OS.

AIUC (PRODUCT LAUNCH)

AIUC audits and certifies deployed agents against its AIUC-1 standard. Its service runs roughly 5,000 tests covering jailbreaks, hallucinations, and data leaks. Customers receive a 100-page report, with humans validating final audit results.

TWO DGX SPARKS, 33 LOCAL MODELS, ONE QUESTION: CAN LOCAL AI ACTUALLY RED TEAM?

Roei Sherman evaluated 33 local models on a two-node DGX Spark cluster for red teaming capabilities. The evaluation consisted of a security capability that tested whether the models can reason by testing them with a three-phase red team scenario, a red team benchmark to test the willingness and accuracy of model responses, and a coding benchmark consisting of Aider Polyglot plus two custom suites. Sherman found that MoE models consistently performed above their model class across all three benchmarks, with Qwen3.6-35B-A3B (FP8) winning the security capability benchmark, Qwen3-Coder-Next (FP8) winning the coding benchmark, and more mixed results on the red team benchmark.

MYTHIC C2 ACTIVITY AT INTERNET SCALE

Mythic, an open-source C2 framework that lets operators mix agents, transport profiles, and a shared web UI, is popular with red teams but has also turned up in real intrusions, according to new Censys research. Censys tracked 131 internet-exposed Mythic hosts, and 115 of them still carried the default O="Mythic" or O="Mythic C2" certificate. One cluster Censys flagged paired Mythic with custom Rust implants, Discord-based C2, and a domain disguised as Windows telemetry traffic.

controls fail and how to close the gap.

MACOS 27 GOLDEN GATE, MACOS TAHOE 26.7, AND MACOS SEQUOIA 15.8 FIX 200+ VULNERABILITIES

Apple patched more than 200 macOS vulnerabilities across Golden Gate 27, Tahoe 26.7, and Sequoia 15.8, including kernel code execution bugs in AVEVideoEncoder and UDF, as well as remote code execution paths via Bluetooth, CUPS, and WebDAV.

240,000 HIT BY DATA BREACH AT JAPAN'S DIGITAL AGENCY

Japan's Digital Agency found that attackers exploited a publicly disclosed VPN flaw.

AUTOMATED SECURITY REVIEW FOR PLUGIN RELEASES

WordPress.org scans each plugin release during a six-hour cooldown before update distribution.