Cybersecurity briefing, 2026-09-25

Your access controls were built to stop a person who gives up when they hit a wall.

• Roundcube Flaw Turns Mail Logins Into Server Control
• CISA Flags TeamCity as a Ransomware Entry Point
• OpenAI Agents Kept Probing After Blocks Failed
• Proofpoint Finds TeamFiltration on Forgotten Microsoft 365 Accounts
• Salesforce Agentforce Flaws Turn Leads Into Attackers
• DOJ Says Oxygen Forensics Hid Russian Control
• WordPress Exploits Move From PoC to Takeover
• Gemini Test Escaped Into Real Company Systems
• RemControl Uses Fake TVTap to Disarm Android Safety Checks
• Carbonato Turns Exposed Docker Daemons into Botnet Hosts
• Storm-2570 Repeats Its Trail Across Ransomware Brands
• n0n Threatens the Backups Ransomware Depends On
• MacSync Swaps Scripts for Native macOS Binaries
• TU Graz Finds Cross-OS File-Event Side Channel
• Warner and Cruz Revive Telecom Security Push
• CISA and FBI Warn on ICS Integrator Access
• Kyiv Strikes Took Down Shared ISP Redundancy

Recent editions

• Thursday, September 24, 2026: Roundcube Flaw Turns Mail Logins Into Server Control · 18 stories
• Wednesday, September 23, 2026: ShinyHunters Claim FBIjobs Records Theft via PeopleSoft · 17 stories
• Tuesday, September 22, 2026: GitLab Flaw Hits KEV Under Active Exploitation · 19 stories
• Monday, September 21, 2026: Zyxel Switch Exploit Kept the Door Open · 19 stories
• Sunday, September 20, 2026: Orkes Conductor Bug Turns Workflows Into Shell Access · 5 stories
• Saturday, September 19, 2026: Orkes Conductor Bug Turns Workflows Into Shell Access · 16 stories
• Friday, September 18, 2026: Redis TLS Bug Is Already Being Exploited · 17 stories