Cybersecurity briefing, 2026-09-16

Vite dev servers leaked cloud credentials through exposed deployments, and attackers are already scanning for them.

• Vite Exploitation Is Now Harvesting Cloud Secrets
• CenterPoint Breach Exposes Fraud-Ready Customer Data
• Marimo Terminal Flaw Reached a Bastion in Seconds
• KREMLIN Puts Chrome and Edge Sessions at Risk
• Red Heron Turned Gitea Access into Control-Plane Breach
• CISA Flags Digital Watchdog Recorders for Full Control
• GTIG Sees AI Theft Turning Into Operations
• HBO Max Reddit Ads Were Turned Into Malware
• WooCommerce Plugin Exploits Plant WordPress Backdoors
• MOIS Hides Spyware in Telegram Chats
• Acronis Plugin Flaw Is Now Being Exploited
• Black Axe Leaders Face U.S. Fraud Charges
• Digital Agency Breach Exposes Government Identity Data
• Hunt.io Found a Tailored 3BB Intrusion Kit

Recent editions

• Tuesday, September 15, 2026: Vite Exploitation Is Now Harvesting Cloud Secrets · 17 stories
• Monday, September 14, 2026: Red Heron Turned Gitea Access into Control-Plane Breach · 15 stories
• Sunday, September 13, 2026: Check Point VPN Flaws Move Into Exploitation Window · 4 stories
• Saturday, September 12, 2026: UNC3569 Used Sogou Links for User-Context Access · 13 stories
• Friday, September 11, 2026: Check Point VPN Flaws Move Into Exploitation Window · 14 stories
• Thursday, September 10, 2026: BlueMoon Spreads Beyond Violet Typhoon · 16 stories
• Wednesday, September 9, 2026: UAC-0099 Tries to Blind AI Malware Review · 15 stories