https://www.zeroday.news/article/security-affairs-newsletter-round-595-pierluigi zeroday.news en 2026-09-20T00:08:59.000Z Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION https://www.zeroday.news/article/claude-opus-5-helped-researchers-take-openai zeroday.news en 2026-09-19T18:36:53.000Z Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws https://www.zeroday.news/article/malicious-extensions-hijack-ai-browser-agents zeroday.news en 2026-09-19T14:56:31.000Z Malicious Extensions Hijack AI Browser Agents via Prompt Forcing https://www.zeroday.news/article/tigerbyte-cyber-emerges-stealth-3-million-funding zeroday.news en 2026-09-19T14:30:00.000Z TigerByte Cyber Emerges From Stealth With $3 Million in Funding https://www.zeroday.news/article/google-gemini-ai-escapes-test-environment-accesses zeroday.news en 2026-09-19T14:09:34.000Z Google Gemini AI Escapes Test Environment, Accesses Real Companies https://www.zeroday.news/article/north-korean-waterplum-hackers-infected-30-000 zeroday.news en 2026-09-19T14:05:15.000Z North Korean WaterPlum hackers infected 30,000 devices worldwide https://www.zeroday.news/article/shinyhunters-hacks-clop-leak-site-threatens-extort zeroday.news en 2026-09-19T13:48:32.000Z ShinyHunters hacks Clop leak site, threatens to extort ransomware gang https://www.zeroday.news/article/ai-helps-hackers-hijack-openai-staff-accounts zeroday.news en 2026-09-19T13:01:08.000Z AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum https://www.zeroday.news/article/calling-viral-ai-actress-tilly-norwood-agree zeroday.news en 2026-09-19T11:38:20.000Z Calling viral AI actress Tilly Norwood? Agree to a face scan first https://www.zeroday.news/article/forget-ai-slowdown-vulnerability-explosion-already zeroday.news en 2026-09-19T11:00:00.000Z Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening https://www.zeroday.news/article/critical-pre-auth-rce-orkes-conductor-workflow zeroday.news en 2026-09-19T08:18:54.000Z Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild https://www.zeroday.news/article/google-gemini-broke-real-company-systems-security zeroday.news en 2026-09-19T07:51:34.000Z Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up https://www.zeroday.news/article/crowdsec-says-tanstack-npm-attack-led-copy-170 zeroday.news en 2026-09-19T07:14:54.000Z CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories https://www.zeroday.news/article/cisa-flags-three-linux-kernel-vulnerabilities zeroday.news en 2026-09-19T06:24:10.000Z CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild https://www.zeroday.news/article/flock-offers-employees-buyouts-customers-flee zeroday.news en 2026-09-19T02:22:54.000Z Flock Offers Employees Buyouts as Customers Flee https://www.zeroday.news/article/brevo-supply-chain-attack-infected-100-000-websites zeroday.news en 2026-09-18T21:38:15.000Z Brevo Supply-Chain Attack Infected Over 100,000 Websites https://www.zeroday.news/article/friday-squid-blogging-squid-egg-sacs zeroday.news en 2026-09-18T21:06:00.000Z Friday Squid Blogging: On Squid Egg Sacs https://www.zeroday.news/article/vectra-ai-launches-ascent-help-address-new-era zeroday.news en 2026-09-18T20:24:51.000Z Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks https://www.zeroday.news/article/early-scattered-spider-member-pleads-guilty-cybercrime zeroday.news en 2026-09-18T20:24:15.000Z Early Scattered Spider member pleads guilty to cybercrime spree https://www.zeroday.news/article/cisco-zero-day-highlights-api-endpoint-authentication zeroday.news en 2026-09-18T19:26:47.000Z Cisco Zero-Day Highlights API Endpoint Authentication Issues https://www.zeroday.news/article/ey-survey-finds-autonomous-ai-implementation zeroday.news en 2026-09-18T19:23:48.000Z EY Survey Finds Autonomous AI Implementation Outpaces Oversight https://www.zeroday.news/article/mfa-ineffective-against-oauth-consent-abuse-without zeroday.news en 2026-09-18T18:15:20.000Z MFA Ineffective Against OAuth Consent Abuse Without Governance https://www.zeroday.news/article/public-exploits-released-linux-kernel-root-privilege zeroday.news en 2026-09-18T18:02:24.000Z Public Exploits Released for Linux Kernel Root Privilege Flaws https://www.zeroday.news/article/saving-another-100tb-ram-math-rust zeroday.news en 2026-09-18T17:23:58.000Z Saving another 100TB of RAM with math (and Rust) https://www.zeroday.news/article/researchers-use-ai-find-widespread-software-decoder zeroday.news en 2026-09-18T17:19:49.000Z Researchers use AI to find widespread software decoder flaw https://www.zeroday.news/article/researchers-used-claude-hack-openai-employees zeroday.news en 2026-09-18T17:16:00.000Z Researchers used Claude to hack OpenAI employees' ChatGPT accounts https://www.zeroday.news/article/gyazo-data-breach-exposes-23-million-user-records zeroday.news en 2026-09-18T17:10:37.000Z Gyazo Data Breach Exposes 23 Million User Records https://www.zeroday.news/article/don-t-call-us-we-ll-call-your-apis-tradertraitor zeroday.news en 2026-09-18T17:00:16.000Z Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Ties https://www.zeroday.news/article/new-wordpress-click2shell-flaw-forces-theme-installs zeroday.news en 2026-09-18T16:56:19.000Z New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution https://www.zeroday.news/article/nations-take-action-north-korean-workers-un-report zeroday.news en 2026-09-18T14:29:00.000Z Nations take action on North Korean IT workers after UN report https://www.zeroday.news/article/other-news-ransomware-developer-sentenced-plugin4shell zeroday.news en 2026-09-18T14:25:00.000Z In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw https://www.zeroday.news/article/did-ai-really-try-break-free-human-control zeroday.news en 2026-09-18T14:18:20.000Z Did an AI really try to break free from human control? https://www.zeroday.news/article/ais-still-struggling-captchas zeroday.news en 2026-09-18T11:05:52.000Z Are AIs Still Struggling with CAPTCHAs? https://www.zeroday.news/article/microsoft-patches-18-vulnerabilities-ai-cloud zeroday.news en 2026-09-18T10:57:03.000Z Microsoft Patches 18 Vulnerabilities in AI, Cloud Products https://www.zeroday.news/article/weaselbiscuit-stealer-spreads-13-npm-packages zeroday.news en 2026-09-18T10:40:06.000Z WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage