Researcher Drops FalconFlank, a Zero-Day Privilege-Escalation PoC for CrowdStrike Falcon

Chaotic Eclipse dropped FalconFlank, a proof-of-concept for a zero-day privilege-escalation flaw in CrowdStrike Falcon Sensor that abuses the product's malicious-macro remediation. No CVE, no CVSS, and no CrowdStrike advisory yet, and the disclosure looks uncoordinated.

CISA Adds Seven Exploited Flaws to KEV Catalog, SonicWall SMA 1000 CVSS 10.0 Leads

CISA added seven actively exploited flaws to its Known Exploited Vulnerabilities catalog on September 2. A CVSS 10.0 SonicWall SMA 1000 SSRF leads the list, and defenders are already seeing reverse shells and cryptocurrency miners dropped through the other bugs.

Softaculous BGP Hijack Served Malicious Virtualizor Update, Planting Persistent Root Access

Softaculous has reconstructed the 33-hour BGP hijack that rerouted its traffic in late August. Attackers used a valid TLS certificate for Softaculous domains to serve a malicious Virtualizor update, establishing persistent root access on the hosts that installed it during the window.

DOJ and CrowdStrike Disrupt Sality, the 23-Year-Old P2P Botnet, by Poisoning Its Own Peer List

Authorities turned Sality's peer-to-peer design against itself, injecting sinkholes into the botnet's own peer lists to cut more than 15,000 infected machines off from their operator. The disruption stops new payloads, but already-infected Windows hosts still need cleanup.

Malicious .git Configs Can Make Claude Code, Codex, and Cursor Run Attacker Code

Manifold Security disclosed eight flaws across seven command-line AI coding agents, including Claude Code, Codex, and Cursor, where a repository's own .git config names a command the agent runs automatically on the developer's machine. Four were still unpatched at publication.

SonicWall SMA 1000 Zero-Day Chain Under Active Attack: CVE-2026-83548 and CVE-2026-83549

SonicWall shipped emergency hotfixes for two actively exploited SMA 1000 zero-days. CVE-2026-83548 (CVSS 10.0) and CVE-2026-83549 chain into unauthenticated remote code execution on internet-facing VPN gateways, and one national SOC rates further attacks almost certain.

FSB Warns Frontier AI Cyber Risk Is the 'Most Immediate Concern' to the Global Financial System

The Financial Stability Board told G20 finance chiefs that frontier AI has made cyber risk the financial system's most immediate concern, and urged banks and their technology providers to plan for simultaneous disruption across multiple firms and shared dependencies.

JFrog Artifactory CVE-2026-82329 Exploited Days After Disclosure to Mint Admin Tokens

watchTowr has confirmed attackers are exploiting CVE-2026-82329, a critical (CVSS 9.8) authentication bypass in self-hosted JFrog Artifactory, to mint their own administrator tokens. JFrog patched the flaw on August 28, but internet-exposed servers should be treated as already compromised.

OpenAI Flags Astra as Its First Model With 'Critical' Cyber Capabilities

OpenAI says its upcoming Astra model is the first to meet the 'critical' cybersecurity tier in its Preparedness Framework, capable of finding and exploiting unknown flaws without human guidance. Select partners get early access first, so defenders can shore up defenses before a wider release.

METR API Key Theft: Attacker Burned $600K in AI Model Credits Undetected for Weeks

METR, the nonprofit that stress-tests frontier AI models, says an attacker stole an API key and spent about $600,000 in model credits over three weeks. The provider had donated the credits, so no bill ever flagged the theft.

ESET Names GuardBreaker: UAC-0099 Buried a Prompt to Stall AI Malware Analysis

ESET disclosed GuardBreaker, a technique where Russia-aligned UAC-0099 buried a refusal-triggering prompt inside a malicious script so AI-assisted analysis would balk. The defender lesson: any sample fed to a language model is prompt-injection input, not just code to be scanned.

Fire Ant Expands From VMware Hypervisors to Cisco IOS XR Routers and TACACS Servers

Sygnia says the China-nexus espionage actor Fire Ant has pushed past VMware hypervisors into the network authentication and logging plane, compromising Cisco IOS XR routers, TACACS servers, and Linux management hosts to harvest credentials and suppress the telemetry defenders rely on.