Cybersecurity News | Daily Recap [14 Sep 2026]

Daily Recap, Revolut disclosed a breach exposing personal and financial data, including passports, while Telus warned customers about account compromises linked to unauthorized access activity. On the defense side, CISA reported active exploitation of a max-severity GitLab flaw, researchers detailed JFrog Artifactory issues used to deploy a backdoor, and Microsoft noted September updates can break audio on some Windows PCs and cause RDS failures on Windows Server.
#Revolut #Telus #GitLab #JFrogArtifactory #CISA #BigBear2.0 #HVNC #Marimo #GRAYRABBIT #GRIMWEDGE #SUPERSTOMP #LONGTALE #SloppyRAT #ClearFake #WebDAV #Amatera #ZigCryptoStealer #NetSupportManager #Debian13.7 #Microsoft #WindowsServer #GoogleWorkspace #NSA

Revolut disclosed a breach exposing personal and financial data, including passports, with coverage detailing the incident and what is known so far – Revolut Breach, Revolut Details, Breach Update
Telus warned customers about account breaches amid reports of unauthorized access affecting user accounts – Telus Breaches

CISA says attackers are actively exploiting a max-severity GitLab flaw in real-world attacks, underscoring urgent patching needs – GitLab Exploit
Researchers reported three JFrog Artifactory flaws being abused to deploy a backdoor, showing how exposed software supply-chain tools can be weaponized – JFrog Flaws
Threat coverage highlighted rapid exploit chains and credential theft campaigns tied to BigBear 2.0, HVNC, Marimo, GRAYRABBIT, and GRIMWEDGE/SUPERSTOMP/LONGTALE – Threat Weekly
Additional threat reporting tracked SloppyRAT, ClearFake/WebDAV delivery of Amatera, ZigCryptoStealer, and NetSupport Manager, plus ChatGPT clipboard abuse and adversarial AI manipulation attempts – Threat Weekly

Microsoft warned that September updates can break audio on some Windows PCs and cause RDS failures on Windows Server – Audio Bug, RDS Failures
A discussion on patching stressed that automation needs safeguards and validation, not just speed, to avoid outages and bad rollouts – Patch Automation
Debian 13.7 shipped fixes for 92 security advisories and updated 106 packages in a major point release – Debian Update

A webinar explained how malicious OAuth apps can be used to compromise Google Workspace environments through token abuse and persistent access – OAuth Abuse
Security coverage warned that AI agents are creating new governance challenges as CISOs try to control risk without losing their business value – AI Agents

NSA is reorganizing into five mission centers, including dedicated cyber and AI units, as part of a broader structural overhaul – NSA Reorg
Guidance on OT incident response emphasized simple recovery playbooks, including the equivalent of “turning it off and on again,” for critical infrastructure environments – OT Response

SHARE THIS STORY