Cybersecurity News | Daily Recap [24 Sep 2026]

hendryadrian.com

hendryadrian.com

Exploited Flaws

• Attackers are actively exploiting a critical Roundcube code-injection flaw, TeamCity is being targeted by ransomware gangs, and new exploitation waves are hitting Check Point VPN and WordPress bugs. – Roundcube flaw, TeamCity flaw, VPN flaw, WordPress flaw
• SolarWinds patched critical RCE issues in Observability Self-Hosted, while Adobe fixed serious flaws in Connect and AEM Forms. – SolarWinds RCE, Adobe patches

Malware & Fraud

• The RemControl Android banking trojan is stealing PINs and resisting removal, with victims now reported across Europe and Canada. – RemControl, RemControl targets
• Threat actors are abusing a placeholder domain for ClickFix attacks, using malicious Terraform providers to deliver Go malware, and chaining MikroTik router compromises without passwords or SSH keys. – ClickFix abuse, Malicious Terraform, MikroTik takeover
• AI agents were linked to a campaign that stole 600K credit cards and infected more than 100 sites with skimmers. – AI skimmer campaign

Government & Policy

• CISA outlined improvements for the CVE program, while a watchdog said nearly 9 out of 10 federal civilian agencies missed SCuBA cloud security deadlines, leaving government systems more exposed. – CVE plan, Cloud security failures
• Bipartisan Senate leaders introduced a bill to strengthen telecom cybersecurity after Salt Typhoon, and separate analysis argues tax incentives could help protect US water systems. – Telecom bill, Water systems
• OpenAI and Ukraine launched the Daybreak program to support defense of power grids and water systems amid ongoing attacks on critical infrastructure. – Daybreak program
• Australia faced OpenAI-linked hacking activity targeting a government website and Medicare systems, highlighting continued pressure on public-sector targets. – Australia attack, Medicare probe
• The UK regulator is investigating Pornhub’s parent company over alleged age-verification failings, while election agencies reported no evidence of successful foreign meddling in 2024. – UK probe, Election report

Identity & Data Breaches

• Astrana Health disclosed a data breach affecting private and confidential information. – Astrana breach
• A leaked GitLab issue email address could let attackers push code and run CI jobs as the victim. – GitLab leak

Security Operations & Tech

• Windows 11 update KB5124010 delivered 46 changes and fixes, and Microsoft also repaired a bug that broke File History backups. – KB5124010, Backup fix
• Security teams are being urged to focus on agentic remediation, secure AI agent data within 90 days, and improve visibility into OT assets beyond firewalls and elevators. – Agentic remediation, AI data security, OT visibility
• Google is planning a Private AI Compute memory layer that follows users across devices, raising fresh privacy and security questions. – Google memory
• Research on quantum computing spotlights IonQ’s effort to reduce the error-correction bottleneck with a single-CPU decoder. – IonQ decoder
• Pentagon cyber leadership warned that demand far exceeds supply, underscoring persistent workforce shortages. – Pentagon shortage
• Ryuk ransomware operator Karen Vardanyan received a 2-year prison sentence after extorting victims for $1.2 million. – Ryuk sentence, Ryuk DOJ

Cybersecurity News | Daily Recap – hendryadrian.com