Cybersecurity briefing, 2026-09-27

PeopleSoft exploitation is back, and the bypass is simple.

• AI agents leak screenshots, prompt data escapes again
• Lunex uses AMD driver to blind EDR
• WraithTools sells botnet to drain AI credits
• Kiteworks warns of a six-hour attack window
• Elementor CSRF lets attackers mint WordPress admins

Recent editions

• Saturday, September 26, 2026: GitLab flaw hits KEV under active exploitation · 15 stories
• Friday, September 25, 2026: Roundcube SQL injection hits before login · 18 stories
• Thursday, September 24, 2026: CISA flags TeamCity as a ransomware entry point · 18 stories
• Wednesday, September 23, 2026: Dutch arrest splits ShinyHunters leadership story · 17 stories
• Tuesday, September 22, 2026: GitLab flaw hits KEV under active exploitation · 19 stories
• Monday, September 21, 2026: Zyxel switch exploit kept the door open · 20 stories
• Sunday, September 20, 2026: Orkes Conductor bug turns workflows into shell access · 5 stories