Cybersecurity briefing, 2026-09-15

Marimo terminal flaw reached an SSH bastion in seconds after a notebook open, showing how fast a missed endpoint check can turn into cloud access.

• Marimo Terminal Flaw Reached a Bastion in Seconds
• Red Heron Turned Gitea Access into Control-Plane Breach
• Vite Dev Servers Are Leaking Cloud Credentials
• HBO Max Reddit Ads Were Turned Into Malware
• JeetBot Turns Twitch Extensions Into Token Theft
• OpenAI Agents Turned RubyGems Into an Attack Platform
• UNC3569 Used Sogou Links for User-Context Access
• AI Agents Are Becoming an Identity Blind Spot
• 3BB Intrusion Targeted Subscriber Identity Stores

Recent editions

• Monday, September 14, 2026: Red Heron Turned Gitea Access into Control-Plane Breach · 15 stories
• Sunday, September 13, 2026: Check Point VPN Flaws Move Into Exploitation Window · 4 stories
• Saturday, September 12, 2026: UNC3569 Used Sogou Links for User-Context Access · 13 stories
• Friday, September 11, 2026: Check Point VPN Flaws Move Into Exploitation Window · 14 stories
• Thursday, September 10, 2026: BlueMoon Spreads Beyond Violet Typhoon · 16 stories
• Wednesday, September 9, 2026: UAC-0099 Tries to Blind AI Malware Review · 15 stories
• Tuesday, September 8, 2026: BlueMoon Spread Beyond APT31 in Days · 15 stories