Latest / Daily DefSec Brief / Cyber Security News for September 2 2026 - Daily DefSec Brief
Transcript
- Jerry: SonicWall found somebody exploiting its own remote access gateways using two flaws nobody had reported. This is the daily DevSec brief for Wednesday, September 2nd, 2026. One, SonicWall found attackers inside its own SMA 1000 remote access gateways, chaining two flaws it discovered internally. The first is an unauthenticated path straight through the workplace interface, and it hands off to a command injection. in the management console for full remote code execution. The hotfix is out, apply it and treat any SMA 1000 that has been exposed as suspect until you have looked. Two, an unauthenticated attacker on the network can take administrative control of JFrog Artifactory in its default configuration, which is the repository holding your finished builds. JFrog patched it on the 28th of August and watched how I saw it being exploited four days later. Patch it, then go through your build artifacts and deployment pipelines for poison packages and admin accounts that nobody created. Attackers are running code on Langflow servers without logging in, then reading environment variables to lift administrative credentials and cloud keys. Volnchuck's Honeypots logged 50 attempts over the weekend and 360 by Tuesday, mostly from Russia. Patch it, get it off the public internet and rotate every key that instance could see. 4. Nearly 22,000 exchange servers are still exposed to a flaw that lets an attacker relay the server's own machine account credentials. And take over every mailbox. The August updates fix it, but the control it actually defeats is the extended protection for authentication, so turn that on as well. Five. Unit forty two worked an incident where the attackers aimed frontier models and agentic frameworks at an enterprise, and the agents mapped the network, raided source repositories, and took root credentials across more than fifty attack techniques. Ask whether your detection can act within a 10 hour window. Six, the FBI is warning about attackers posing as journalists or officials asking a target to review a draft document. The link never asks for a password. It asks you to authorize an app and the authorization is what hands over the mailbox. Restrict third-party app consent in Entra and Workspace and audit the grants you already have. 7. One crafted request to a SwitchFox phone provisioning endpoint runs code as the database super user with no login, and a honeypot caught a real attempt on the 30th of August. The fix has been out since mid-July. Upgrade and get that admin interface off the internet. Eight. In GeoNetwork, the catalog sitting behind a lot of government geo portals, including the European Inspire backend, an anonymous user can upload a file to the Format or Endpoint And an unsafe transformation engine runs it. The fix shipped in July, and the details went public on Monday. 9. Microsoft is tracking fake software download pages that copy well known vendors and the installers that come back, set up persistence, and start switching off your protections. Victims run across healthcare, manufacturing, logistics, and government. Block downloads outside an approved list and alert on anything that disables Defender. ten. Huntress is watching a fishing crew talk people into enrolling their own machines into the attacker's tenant of a real endpoint management platform, which then pushed Screen Connect onto them. 457 endpoints in a month. Alert on unexpected enrollment and on remote support tools you did not install. eleven. The group behind the Manchester Airports breach says it got in by finding admin keys for the airport's customer engagement platform in the JavaScript on the front page of all three websites. Go grip your own front end bundles for keys because this took no crawling and no subdomain hunting. 12. Someone stole an inferenced API key from the AI evaluation nonprofit METAR in March and spent about $600,000 on model credits over three weeks before anyone noticed. put spending alerting and rate limits on every model key you hold. thirteen, Hugging Face Transformers downloads a model Python code and writes it to disk before anyone asks whether you trust it. The fix is out, so upgrade and treat that cache as attacker writable. 14. The SageMaster Python SDK stores the keys that signs your pipeline payloads in clear text, or any role that can call describe pipeline is able to read it. Upgrade the SDK and restrict that call. fifteen thirteen malicious theme packages on packages to inject JavaScript into every site that installs them. And on unpatched iPhones, that script runs a WebKit chain that installs spyware. Audit your composer dependencies and get managed phones current. sixteen, checkpoint found a Chinese speaking crew installing custom Apache modules on web servers they had already compromised. A lot of them Brazilian government sites. The modules quietly forward visitors to phishing pages while a site carries on working. That's sixteen for Wednesday. I'm Jerry Bell and this was the day's security news in five minutes. Sources are in the show notes. If this was worth your time, like it, subscribe, and pass it on to someone on your team. Backing in tomorrow.