Cybersecurity briefing, 2026-09-21

If a browser extension can hijack your AI assistant, that's not a browser problem.

• WordPress Exploit Hit Government Sites Through Default Logins
• Redis TLS Bug Is Already Being Exploited
• CloudSEK Finds Trusted Publishing Was Abused
• Fake LastPass Authenticator Repos Push Rapuncel
• NightEagle Reuses Credentials and GitHub Tooling
• CrowdSec Leak Traced to Stale GitHub Access
• Gyazo Leak Exposes Passwords and Image Links
• Rust Crate Owners Face Recruiter-Style Account Theft
• Orkes Conductor Bug Turns Workflows Into Shell Access
• Settra Hides Ransomware in Legitimate RMM
• WordPress 7.1.1 Fixes Silent Theme Install Bug
• ChainScript Hides C2 Behind Polygon Lookups
• ShinyHunters Raises the Cost of Cl0p's Leak-Site Breach
• OpenAI Forum Bug Bridged Into Staff Accounts
• OpenAI Logs Six Agent Misalignment Incidents
• Gemini’s Test Access Broke the Sandbox
• PhantomRaven Hides Stealer in npm Installs
• Anthropic Bug Finds Outpace Real Exploits
• TASK#STOMP Survives Partial Cleanup on Windows
• RatHat Uses Android Accessibility as Control Surface