SecurityWeek (Eduard Kovacs, 25 September 2026) and project site inoti.fyi summarise Graz University of Technology research (“File Notification Attacks”) showing that OS file-change notification APIs — Linux inotify, Windows ReadDirectoryChangesW, macOS FSEvents, Android FileObserver — can be abused by an unprivileged local account (or a no-permission Android app) to reconstruct other users’ activity from event names and timing without reading file contents. Demonstrated: Linux inter-keystroke timing (93.1–100% F1), Firefox website fingerprinting (87.9% top-100), KDE Plasma 6 Wayland fake-password-prompt overlay; Windows full-path leakage under drive-root watches including other users’ homes (Firefox top-1000 97.8%); Android WhatsApp media send/receive/delete metadata; macOS least leakage but still app launch / settings / connectivity signals. Linux partially mitigated Dec 2025 (no access/modify events on special/device files) as CVE-2025-68788 in kernels 5.10.248 / 5.15.198 / 6.1.160 / 6.6.120 / 6.12.65 / 6.18+. Microsoft optional registry EnforceDirectoryChangeNotificationPermissionCheck; researchers list no Android/macOS patches. PoC on GitHub (isec-tugraz/file-notification-attacks). No known in-the-wild exploitation per researchers. Primary: inoti.fyi + paper PDF; wire: SecurityWeek 25 Sep.
Zenity Labs (SecurityWeek 25 September 2026) disclosed three Salesforce Agentforce flaws dubbed SalesBleed, exploitable via poisoned Web-to-Lead submissions that stay dormant until an employee asks an Agentforce agent to handle the lead. Two bugs abused Trusted URLs weaknesses (including TLD/URL-parsing gaps) so HTML image tags could zero-click exfiltrate leads/accounts CRM data to attacker infrastructure while the UI still reported content blocked; the third abused Agentforce–Slack integration so the trusted agent identity could post phishing messages to internal channels (Slack link-preview requests likewise carried CRM data). Zenity reported 1 June 2026; Salesforce confirmed all three addressed by 19 August 2026. No CVE IDs or CVSS published in the wire write-up — do not invent scores. Primary wire: SecurityWeek; research: Zenity (primary research URL degraded/500 during this pass).
SOCRadar Threat Research Unit (STRU; published 24 September 2026; Cybersecurity News amplified 28 Sep) documents Operation Master (April–mid-September 2026): a multi-tier intrusion and monetization pipeline that exploited Palo Alto Networks PAN-OS GlobalProtect authentication bypass CVE-2026-0257 to establish unauthorized VPN sessions on seven gateways in four countries, combined with web-app/SQL attacks (incl. xp_cmdshell), AdaptixC2 on at least two Windows servers, DNS tunneling / rclone exfil, and an automated invoice-fraud panel. Fraud telemetry cited: 2,468,335 emails and 1,487,294 SMS by 16 Sep; 622,666 personalized links; targeting skewed to Brazilian payment/PIX workflows; energy-sector data also sold under forum persona “masterblack”. Recon: ~277.5M address scans → 81 high-value orgs; 9+ databases stolen. Vendor PSIRT CVE-2026-0257 (published 13 May 2026, updated 3 Jun): auth bypass on GlobalProtect portal/gateway when authentication-override cookies are enabled with a specific certificate configuration; Panorama and Cloud NGFW not impacted; Exploit Maturity ATTACKED; limited exploit attempts on unpatched devices without mitigations. Primary: Palo Alto PSIRT; campaign: SOCRadar; wire: CSN. UPDATE (11 Oct): ReliaQuest says several ransomware groups, including Qilin and Settra, are now using CVE-2026-0257 to open unauthorised GlobalProtect VPN sessions and walk into internal networks through the victim's own remote-access service, where the traffic looks like normal remote work. It also saw follow-on use of Cobalt Strike, BloodHound and SharpHound, and assesses that exploitation is highly likely to continue over the next three months as ransomware crews and access brokers chase unpatched gateways. Arctic Wolf had already tied June 2026 intrusions that ended in Qilin ransomware to this flaw (report of 20 July), with VPN sessions coming from machines named "kali". Settra is the newly named group. What to do: patch every internal and external GlobalProtect portal and gateway that issues or accepts authentication-override cookies (hybrid Prisma Access sites must also upgrade their on-premises firewalls), then end all active GlobalProtect sessions, because patching does not remove access an attacker already has. Review unexpected VPN connections, including hostnames such as "kali" (a lead to check, not proof on its own), and rotate credentials, including the Active Directory KRBTGT account, if anything suspicious turns up. Wire: Cyber Security News (11 Oct, citing ReliaQuest); earlier: Arctic Wolf Labs. UPDATE (Unit 42 threat brief updated 19 Oct, 4:00 pm PT, 20 Oct 07:00 Perth): Palo Alto Networks' Unit 42 says it continues to see attempted exploitation of CVE-2026-0257 by ransomware operators including Spikey Scorpius (Qilin) and Tarnished Scorpius (INC), and notes public reporting tying Settra ransomware operators to it. Its investigations, running since early June 2026, span education, financial services, healthcare, high technology, hospitality, manufacturing, professional and legal services, government, transportation and logistics, utilities and energy, and retail. After opening a VPN session that sidesteps MFA, the attackers typically run reconnaissance with dual-use remote monitoring and management (RMM) tools, move laterally over RDP and SMB, and stage tools for credential theft, data theft and ransomware. Unit 42 calls the direct pivot to the virtualisation layer the most significant change: in one case the attackers went from the VPN gateway to the vCenter management appliance, turned off the execInstalledOnly protection on ESXi hosts, and used a custom tool to dump credentials offline from a domain controller's virtual disk (VMDK), which bypasses endpoint detection inside the guest. It has also seen the access chained with exploits for Veeam Backup & Replication CVE-2023-27532. Unit 42 lists IP addresses, host IDs and device names (such as aa:bb:cc:dd:ee:ff, DESKTOP-GP01 and GP-CLIENT) to search for in GlobalProtect logs. Wire: The Hacker News (20 Oct).
PaperCut Security Bulletin (24 September 2026 AEST; vulnerability log updated same day) discloses four issues fixed in current maintenance trains. PaperCut NG/MF: CVE-2026-14780 (CVSS 4.0 7.5 HIGH) — authenticated administrator RCE via optional Print/Device Scripting (disabled by default since 22.1.1; fixed earlier in 26.0.2 / 25.0.12); CVE-2026-82077 (CVSS 4.0 7.3 HIGH, watchTowr) — authenticated admin path-traversal/command injection in Scan-to-Fax; CVE-2026-87739 (CVSS 4.0 6.9 MEDIUM, internal) — unauthenticated remote attacker can trigger report generation and obtain sensitive report data (CWE-639). PaperCut Hive Embedded Application for Ricoh: CVE-2026-11744 (CVSS 4.0 3.8 LOW) — local NFC-card XSS into the embedded webview sandbox. Vendor note: sites already on NG/MF 26.0.5 or 25.0.13 already have the NG/MF fixes; Hive Ricoh app → 2.3.0. Distinct from desk papercut-ng-mf-20260827 (Aug active-exploitation EPR / CVE-2026-82078/81578 wave) though patch floors overlap. Primary: PaperCut bulletin. UPDATE (12 Oct): watchTowr Labs published its full write-up on 9 October 2026 (US time; early 10 October Perth) showing that CVE-2026-82077, the Scan to Fax path traversal PaperCut rates as an authenticated-administrator flaw, completed an unauthenticated remote code execution chain against PaperCut NG 26.0.4-PO build 76508 when paired with WT-2026-0143, a further authentication bypass (no CVE assigned) that reaches the Setup Wizard forms through the Apache Tapestry service parameter and lets an attacker reset the admin password. watchTowr describes it as the second round of bypasses after the August in-the-wild chain (CVE-2026-81578 plus CVE-2026-82078): WT-2026-0141 and WT-2026-0142 defeated the first 26.0.4 fix and were closed in 26.0.4-PO build 76508; WT-2026-0143 was closed in 26.0.4-PO build 76530, and CVE-2026-82077 in 26.0.5. watchTowr also released a Detection Artefact Generator that checks exposure to the authentication bypasses. Any server still on a 26.0.4 emergency or PO build should be treated as reachable without a password and moved to a full maintenance release. PaperCut's vulnerability log still shows its last update as 24 September.
Huntress (24 September 2026) reports an early-September 2026 intrusion that began with exploitation of Samsung MagicINFO 9 Server CVE-2025-4632 (path traversal / arbitrary file write as SYSTEM; incomplete fix lineage from CVE-2024-7399). After access via the Tomcat-hosted MagicINFO service, the actor repeatedly tried to install AnyDesk (source IP 194.87.89.30), created a local admin, disabled Microsoft Defender, then compiled a Silent XMR Miner–based Monero miner on the endpoint (noisy csc/gcc/tcc/donut telemetry) and pointed it at auto.c3pool.org:19999. NVD / Samsung PSIRT: CVSS 3.1 9.8 CRITICAL (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H); affected MagicINFO 9 Server before 21.1052; fixed May 2025. CISA KEV entry (added 2025-05-22; catalog still lists). Primary: Huntress; CVE metadata: NVD; vendor notes via KEV → security.samsungtv.com SVP-MAY-2025.
Huntress — The Not So Silent Miner (MagicINFO → on-host Monero build) (24 Sep 2026)
GitLab’s critical patch release (docs: 19.4.1, 19.3.3, 19.2.7) remediates two CVSS 9.9 flaws that let an authenticated user achieve arbitrary code execution on the GitLab server via specially crafted regular expressions in CI/CD configuration. CVE-2026-89078 is a double-free in the regular-expression parser (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L); CVE-2026-93577 is an integer overflow in the regex compiler (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Both affect GitLab CE/EE from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1. GitLab.com is already on the fixed build; GitLab Dedicated customers need no action; self-managed admins must upgrade immediately. Reported via HackerOne by joaxcar. Distinct from desk gitlab-email-push-aikido-20260923 (issue-email push path). Primary: GitLab critical patch release notes; wire: Cyber Security News 25 Sep.
Cloudflare Blog (published 24 September 2026 15:00 UTC; joint write-up with Accomplish) and Accomplish (24 Sep) document a cross-tenant data-exposure flaw in Cloudflare Containers (also affecting Sandboxes / Browser Run that share the disk stack). Oren Yomtov (Accomplish) reported via HackerOne on 4 September 2026. Root cause: Linux device-mapper thin provisioning (dm-thin) pools used skip_block_zeroing; when a container’s writable /dev/vdc thin disk was deleted, 64 KiB physical blocks returned to a multi-tenant pool uncleared. A Workers Paid tenant could force allocation of a recycled block with a 4 KiB write into free ext4 space then raw-read residual bytes (directory structures, DB pages, SQLite) left by prior tenants on the same host — opportunistic (no victim/host targeting; placement automatic). PoC saw residual material on 18/24 placements across four continents. No CVE / no vendor CVSS in the posts. Cloudflare removed skip_block_zeroing fleet-wide, retired running container disks and pre-mitigation OCI image snapshot caches, drained/restarted hosts, and built disk-I/O detection for the 4 KiB-write / large-read pattern; retained telemetry showed only researcher and authorized validation activity — no evidence of malicious exploitation. No customer-side config change required. Primary: Cloudflare Blog; researcher: Accomplish.
Cloudflare Blog — cross-tenant data exposure in Containers (24 Sep 2026)
Datadog Security Labs (published 24 September 2026; GHSA published 24 Sep 2026 13:36 UTC) documents GHSA-632h-h47v-g4x4 in Anomaly OpenCode, an open-source AI coding agent (≥200k GitHub stars / ~16M monthly users per vendor site). A content-type confusion on the /global/upgrade HTTP API made an underlying code-injection path reachable cross-origin: a malicious webpage can submit a top-level HTML form POST that installs an attacker-controlled npm/pnpm/Bun package tarball (lifecycle scripts → RCE) when the victim is running opencode serve (or opencode web) with an npm-managed install. Default serve has no auth; HTTP Basic helps only until the browser caches credentials. Browser CORS / Local Network Access prompts do not block top-level navigations. Affected: OpenCode ≥1.14.30 through 1.18.21 (npm/pnpm/Bun installs). Not this path: curl/Homebrew/Chocolatey/Scoop installs; users not running the HTTP server. Fixed in 1.18.22 (Anomaly patched 24 Aug 2026; publication delayed ~1 month). Anomaly declined a CVE. GHSA CVSS 3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H (High; score 7.5). Primary: Datadog Security Labs; vendor: GitHub GHSA.
CISA added CVE-2026-71362 to the Known Exploited Vulnerabilities catalog on 24 September 2026 (FCEB due 27 Sep) as an incorrect-authorization flaw in Adobe Commerce and Magento Open Source that can elevate access to sensitive resources without user interaction. Sansec (11 August 2026) reviewed Adobe APSB26-92 isolated patches and confirmed the bug lets an unauthenticated attacker switch a customer session to another customer account (account takeover / private customer data). APSB26-92 is a multi-CVE isolated-patch package (seven flaws; five Critical including this CVSS 9.1 item) — not a full Composer security release; merchants must be on the latest -p line for their release before applying the isolated patch. Previdian sensors observed exploitation attempts from an Australia-geolocated IP against honeypots on 10 September 2026 (honeypot telemetry, not a named AU victim). Adobe had not updated APSB26-92 to state “exploited in the wild” as of the 25 Sep THN write-up. Affected (Previdian/vendor framing): Adobe Commerce through 2.4.9-2026-jul / 2.4.8–2.4.4-2026-aug lines; Magento Open Source through corresponding -jul lines; Adobe Commerce B2B through listed -jul lines — patched in the matching 2026-aug isolated/security levels per APSB26-92. Distinct from desk StyleSmuggler CVE-2026-75650 (APSB26-146). Primary: CISA 24 Sep KEV alert; vendor: Adobe APSB26-92; research: Sansec.
CISA — Adds Two Known Exploited Vulnerabilities to Catalog (24 Sep 2026)
Independent researcher Rasmus Moorats (blog.nns.ee, published 24 September 2026; The Hacker News amplify same day) chains two OxygenOS local flaws into untrusted_app → uid 0 with full Linux capabilities from a normal sideloaded APK that needs no dangerous permissions. (1) AtlasService (root binder, no caller permission check) setEvent accepts attacker-controlled values that reach audioDumpInfo’s system("chmod 777 …") path via oplus.audio.dumpinfo.type (92-byte property limit; command injection). (2) vendor.oplus.hardware.olc2 HAL doShell / doShellBlocking run arbitrary /vendor/bin/sh -c for calling uid 0, landing into vendor_qti_init_shell with an unrestricted capability bound set. PoC confirmed on OnePlus 15 (CPH2747, OxygenOS 16) after development on OnePlus 12 Pro (CPH2581). OnePlus acknowledged impact across many OnePlus and OPPO products/versions but has not published a full affected list or a fix at disclosure; disclosure timeline Apr–Sep 2026 includes a May 2026 legal-threat email from OnePlus (published by the researcher). CVE IDs were being coordinated; none assigned in the write-up. No vendor CVSS. Primary: nns.ee; wire: The Hacker News 24 Sep 2026.
nns.ee — Getting root on OnePlus 15 from an untrusted app (24 Sep 2026)
SolarWinds Trust Center advisory CVE-2026-28325 documents an unauthenticated remote code execution vulnerability in Observability Self-Hosted stemming from deserialization of untrusted data when the application is configured to use a specific communication mode. CVSS 3.1 8.8 HIGH (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H — adjacent network). Affected: Observability Self-Hosted 2026.2.2 and below. Fixed: 2026.2.3. Credit: Kai Huang (Armadin). No in-the-wild exploitation stated by vendor. Sibling CVE-2026-28324 (CVSS 9.8 integrity-check RCE) is a separate desk card on the same fix train. Primary: SolarWinds Trust Center; wire: SecurityWeek 24 Sep 2026.
SolarWinds Trust Center — CVE-2026-28325 Observability Self-Hosted
