![Cybersecurity News | Daily Recap [19 Sep 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [19 Sep 2026]")
Daily Recap, TigerByte Cyber emerged from stealth with $3 million in funding, while multiple nation-state and AI-driven advances underscored how fast attackers are operationalizing new techniques. North Korea’s WaterPlum campaign reportedly infected 30,000 devices and used fake job-seeker lures, and research showed AI-assisted exploitation could chain weaknesses to gain access to OpenAI staff accounts. #TigerByteCyber #WaterPlum #TransparentTribe #RustBackdoor #SolarWinds #ARMHardCodedKey #WordPressClick2Shell #Gyazo #Click2Shell #ClaudeOpus5 #Rapuncel #LastPassAuthenticator #ScatteredSpider #AhmedElbadawy #OpenAI
Funding & Industry
- TigerByte Cyber emerges from stealth with $3 million in funding, signaling fresh investment in cybersecurity innovation – TigerByte Funding
Nation-State Activity
- North Korean WaterPlum hackers infected 30,000 devices worldwide, with security agencies warning the group is also using fake job-seeker lures to steal crypto and data – WaterPlum Hackers, Job-Seeker Attacks
- Transparent Tribe deployed a new Rust backdoor using private GitHub repositories for command-and-control, underscoring evolving APT tradecraft – Rust Backdoor
Vulnerabilities & Exploits
- SolarWinds patched an ARM hard-coded key flaw that could enable unauthenticated RCE – SolarWinds Patch
- Public exploits were released for four Linux kernel flaws that can lead to local root compromise – Linux Kernel Flaws
- A new WordPress Click2Shell flaw can force theme installs and chain to code execution – Click2Shell Flaw
- Gyazo server flaw exploitation exposed 23.6 million user records in a major data theft – Gyazo Breach
AI & Offensive Security
- Claude Opus 5 helped researchers chain flaws to take over OpenAI staff accounts, highlighting the growing role of AI in exploit development – Claude Exploit, OpenAI Access
- Researchers used AI to uncover a widespread software decoder flaw, showing how machine learning can accelerate vulnerability discovery – AI Decoder Flaw
- An AI-built exploit and sign-in weakness opened access to internal OpenAI code, reinforcing concerns about chained auth failures – OpenAI Code
Credential Theft & Malware
- Fake LastPass Authenticator GitHub repositories were used to distribute the new Rapuncel infostealer – Rapuncel Infostealer
- Scattered Spider member Ahmed Elbadawy pleaded guilty to a cybercrime spree tied to the group’s extortion and intrusion campaigns – Scattered Spider
Other Notables
- Ransomware developer sentencing, a Plugin4Shell AI attack, and a critical SAP flaw rounded out a busy day for defenders – SecurityWeek Roundup