Cybersecurity briefing, 2026-09-14

Attackers have found a clever hiding place: your own AI's safety filter.

• Red Heron turned Gitea access into control-plane breach
• HBO Max Reddit Ads were turned into malware
• Vite exploitation is now harvesting cloud secrets
• JeetBot turns Twitch extensions into token theft
• UNC3569 used Sogou links for user-context access
• Check Point VPN flaws move into exploitation window
• RubyGems campaign expanded into scraping and RCE
• Marimo terminal flaw reached a bastion in seconds
• Revolut data leak came through trusted email
• Midnight Blizzard used Claude to chase detection
• EU CRA starts the 24-hour reporting clock
• Telus account breach enabled service hijacks
• Huntress traces a Google Doc malware split
• Homebrew 7.0.0 closes a cask sandbox escape
• ENISA starts the CRA reporting pipeline