🔒 Security News Digest - 2026-09-18 📊 18 updates from 6 sources: 🔹 The Hacker News: Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html 🔹 SecurityWeek: Brevo Supply Chain Attack Injects Malware Into 100,000 Websites https://www.securityweek.com/brevo-supply-chain-attack-injects-malware-into-100000-websites/ 🔹 Unit 42: A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity https://unit42.paloaltonetworks.com/securing-aws-agentcore-harness-credentials/ 🔹 SecurityWeek: NightmareStresser DDoS Service Disrupted in International Operation https://www.securityweek.com/nightmarestresser-ddos-service-disrupted-in-international-operation/ 🔹 The Hacker News: WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage https://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.html 🔹 SecurityWeek: Microsoft Patches 18 Vulnerabilities in AI, Cloud Products https://www.securityweek.com/microsoft-patches-18-vulnerabilities-in-ai-cloud-products/ 🔹 The Hacker News: Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents https://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.html 🔹 The Hacker News: An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. https://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.html 🔹 SecurityWeek: 23 Million User Records Compromised in Gyazo Data Breach https://www.securityweek.com/23-million-user-records-compromised-in-gyazo-data-breach/ 🔹 SecurityWeek: AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code https://www.securityweek.com/ai-built-exploit-and-sign-in-flaw-opened-path-to-internal-openai-code/ 🔹 The Hacker News: Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html 🔹 The Record from Recorded Future News: Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia https://therecord.media/hacking-group-nighteagle-expands-russia-china 🔹 Security News | TechCrunch: Researchers used Anthropic’s Claude to hack into OpenAI https://techcrunch.com/2026/09/18/researchers-used-anthropics-claude-to-hack-into-openai/ 🦠 Malwarebytes: Did an AI really try to break free from human control? https://www.malwarebytes.com/blog/ai/2026/09/did-an-ai-really-try-to-break-free-from-human-control 🔹 SecurityWeek: In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw https://www.securityweek.com/in-other-news-ransomware-developer-sentenced-plugin4shell-ai-attack-critical-sap-flaw/ 🔹 The Record from Recorded Future News: Nations take action on North Korean IT workers after UN report https://therecord.media/nations-take-action-on-north-korean-it-worker-schemes 🦠 Malwarebytes: New Android malware uses AI to steal bank logins and PINs https://www.malwarebytes.com/blog/news/2026/09/new-android-malware-uses-ai-to-steal-bank-logins-and-pins 🔹 Security News | TechCrunch: FBI, Coast Guard boarded hacked oil tankers heading towards US coast https://techcrunch.com/2026/09/18/fbi-coast-guard-boarded-hacked-oil-tankers-heading-towards-us-coast/ #InfoSec #SecurityNews