🔴 Lazarus AFD.sys zero-day joins KEV with full Dream Job teardown, 🐳 Docker Sandboxes escape flaws disclosed, ⛓️ Brevo Cloudflare-edge supply chain documented, 🐧 public root PoCs for four Linux kernel flaws, 🎬 MovieReaper runs C2 over Solana, 💸 Revolut extortion hits $3M Monero demand

Lazarus' Windows kernel zero-day is now formally a KEV item: CISA added CVE-2026-68820, the use-after-free in the Ancillary Function Driver for WinSock that Microsoft patched in August after Check Point's responsible disclosure, to the catalog today, and the accompanying research release turns that August patch note into a full campaign map for the Lazarus AFD.sys zero-day. Check Point's teardown of Operation Dream Job shows fake Lockheed Martin job offers delivered through two parallel chains: a signed PDF viewer sideloading MISTPEN, which pulls modules from OneDrive over the Microsoft Graph API, and a trojanized MuPDF viewer, SecurityPDF, that decrypts a new backdoor named Troy from a single-byte XOR payload. Both chains end in an updated FudModule kernel rootkit, now built to exploit the AFD.sys bug on Windows 11 builds 26100 and 26200 for SYSTEM access that evades endpoint detection. Lazarus also weaponized CVE-2025-49113 to plant the RelayShell PHP webshell on Roundcube webmail servers and pivoted through one compromised French organization for follow-on spear-phishing, so defense, aerospace and aviation teams in Europe and India should treat any unsolicited recruiter outreach as hostile.

The Acronis cPanel backup plugin escalation joined CISA's KEV catalog on September 16 with a September 19 federal deadline and confirmed use in targeted attacks, the parallel Plesk integration carries the same insecure-permissions flaw unexploited, and the build trap stands: 1.9.3.998 is still vulnerable, only 1.9.3.1021 or 1.9.4.1022 are fixed.

Docker Sandboxes, the isolation layer teams use to run untrusted workloads and AI coding agents against a shared host workspace, has two filesystem escape flaws in versions 0.28.0 through 0.41.x on macOS: CVE-2026-77179, a critical time-of-check-to-time-of-use race in the virtio-fs host server, and CVE-2026-79994 in the same path-validation logic, both letting a malicious guest swap a directory for a symbolic link mid-check and redirect host-side reads and writes to arbitrary locations. The fix shipped in 0.42.0 on September 7 and the analysis wave landed this week, so anyone treating Sandboxes as a security boundary should verify the version and audit what untrusted workloads ran on older ones.

Sansec has documented the Brevo supply-chain attack that reached more than 100,000 websites: an attacker with a long-lived Cloudflare API key, hardcoded in Brevo's own source and possibly exposed since late August, deployed Workers that rewrote brevo.com, sendinblue.com, sibforms.com and the embedded widget scripts at the CDN edge during a four-hour window on September 14, stripping Content-Security-Policy headers so origin servers and integrity checks stayed clean. Admin-visited sites received a silent WordPress backdoor while regular visitors saw a ClickFix overlay, and the loader domains cdn.sendibt1.com through cdn11.sendibt1.com only stopped resolving on September 15. Sites embedding Brevo scripts should audit September 14 plugin installations and re-export or re-embed from clean sources.

Four Linux kernel privilege escalation flaws were disclosed today with working proof-of-concept exploits already on GitHub in the Linux kernel LPE disclosures: DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) and DiagSpill (CVE-2026-74469), bugs reaching back as far as kernel 2.6.12 and found through AI-assisted analysis of kernel memory state. Three require unprivileged user namespaces, but DiagSpill, a CVSS 8.8 SCTP diag buffer overflow, does not, and the researcher confirmed AppArmor and SELinux did not stop exploitation in testing. Fixed kernels are out in the stable series from 5.10.270 through 7.2.4, and with tuned public PoCs the toolkit wave is a matter of when, not if.

Empirical Security disclosed CVE-2026-58138 today, a CVSS 9.8 unauthenticated remote code execution in Orkes Conductor, the workflow engine behind microservices and AI agent pipelines: default open-source deployments leave the workflow API wide open, and inline JavaScript or Python in a submitted workflow definition evaluates inside a GraalVM context configured with HostAccess.ALL, handing attackers OS commands as the root-privileged Conductor process across the INLINE, LAMBDA, DO_WHILE and SWITCH task types. The researchers confirmed exploitation for at least a month before disclosure and a public PoC, while the fix has been sitting in 3.30.2 since June, so slow adopters are now exposed to working exploit code.

WordPress 7.1.1 is a security release fixing eleven core flaws, led by CVE-2026-93485, a stored cross-site scripting bug in comment handling that affects every version back to 4.7 and lets a poisoned comment run JavaScript in the context of later visitors. Sites with automatic updates are already patched, but self-hosted installs need to verify 7.1.1 landed and review recent comments for evidence of abuse.

Kaspersky's MovieReaper research shows commodity distribution graduating into infrastructure compromise: the operators took over itorrents.org, a public torrent-file repository, and served a loader disguised as odyssey (2026) [1080p] [webrip] [5.1].exe to users grabbing pirated movies, granting 21 remote file-management commands across victims in Russia, Turkey, Japan, Kenya, Uganda, Colombia, Spain, the Netherlands, Belgium and Germany. The framework reads its C2 address from Solana blockchain transaction data, leaving no fixed domain to sinkhole, and monitoring for anomalous Solana queries is the practical detection heuristic.

Researchers detailed a stored cross-site scripting flaw in Telegram Desktop's HTML chat export that survived more than two years: bot button text was injected as raw HTML into exported archives, so opening an exported file in a browser could exfiltrate the entire chat history, and because URL buttons survive message forwarding, a poisoned message could lie dormant in any chat until exported. Telegram patched it in 7.0.1 on July 14, but legacy HTML exports stay weaponized forever, so re-export chats after updating and treat old archives as unsafe to open with JavaScript enabled.

DNS resolver operators got a double prompt this week: CVE-2026-81642 is a critical heap overflow in Unbound's DNSSEC validator, reachable by a malicious DNS zone and capable of remote code execution on the resolver, fixed in 1.26.1, while BIND 9.20.29 closes fourteen flaws including a DNSSEC bypass. Both components sit at the trust root of enterprise resolution, so version checks belong in this week's patch cycle.

GitLab's September 10 release quietly fixed CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in the repository commits API that lets anyone read arbitrary files from self-managed CE/EE servers, including configuration holding database credentials and SSH keys, with Censys counting over 86,000 exposed instances at disclosure. No public PoC or confirmed in-the-wild use has surfaced yet, which makes this the cheap window to patch: 19.3.2, 19.2.6 or 19.1.8.

The Revolut breach extortion escalated into a stand-off: the actor behind the theft of roughly 680 high-profile customers' passports, selfies and Bitcoin transaction histories, obtained by posing as law enforcement through a compromised Italian government email channel, is demanding 6,000 Monero, about 3 million dollars, on a 24-hour clock and has started publishing data, while Revolut says it received no direct contact and has not negotiated. Italy's investigation now runs through the National Anti-Mafia and Anti-Terrorism Directorate because the intrusion touched a government system, and institutions honoring government data requests should treat callback verification against known contacts as mandatory.

Zimperium's RatHat write-up documents a China-linked Android family whose embedded Chinese-language LLM prompts assist operators in navigating stolen devices: arriving via malvertising, SMS phishing and fake APK sites, it abuses Accessibility permissions to switch on Developer Options and Wireless Debugging, giving itself ADB shell access to install a Go-based agent plus an FRP reverse-proxy tunnel, with banking and cryptocurrency credential overlays layered on top. The two agents reinstall each other if removed, and attribution rests on the prompts rather than any software vulnerability.

Watchlist: prove the Cisco ISE and Acronis KEV remediations before the September 19 federal deadline and keep hunting the ISE IOCs, verify Docker Sandboxes 0.42.0, Orkes Conductor 3.30.2, GitLab 19.3.2, Unbound 1.26.1, BIND 9.20.29 and WordPress 7.1.1 across your fleets, confirm ScreenConnect 26.6.5 with TransferFiles disabled and sessions audited, land the Check Point jumbo takes on management servers and VPN gateways, and sweep Linux hosts against the four public kernel privilege-escalation proofs-of-concept.

Generated by zai/glm-5.3-flash. Input tokens: 86,821, output tokens: 28,804, cache read: 1,776,192, cache write: 0.