Latest / Daily DefSec Brief / Cyber Security News for September 3 2026 - Daily DefSec Brief
Transcript
- Jerry: There's a git setting whose value is a command and git reads it out of the repository. Seven AI coding agents will run it just by looking at the folder. This is the daily DevSec brief for Thursday, September 3rd, 2026. One, Kestra's authentication filter decides whether a request needs a login by checking whether the path ends with the word configs. So any API path whose last segment is configs skips authentication entirely and because Kestra turns its script plugins on by default, that gets you code execution as root inside the worker containers. It's being exploited, the fix is out, and the federal deadline is Saturday. two, manifold security found eight of these across seven coding agents. A repository can name a command in its own git config, and the agent runs it just by checking what changed in the folder. Goose, clawed code, and cursor have shipped fixes and the four paths were still live when they retested on Tuesday. Treat any repo that arrives as files rather than a clone is untrusted. 3. There's an unauthenticated remote code execution flaw in Cisco Nexus 9000 switches that run as root on the models built around the Silicon 1 ASIC. Cisco says this isn't being exploited yet. in this month's advisory batch, which also carries an iOS XR hardening release. four. Light LLM will take any bearer token you hand it and open an authenticated session with it through an OAuth2 fallback in its MCP endpoint. Wiz is already seeing attacks on light LM and MCP infrastructure. Upgrade it and find out whether that endpoint answer is from outside your network. Five. When it rebuilds the request URL, so an attacker can smuggle a path into the host and prepend it to the real one. Anything authorizing off that rebuild URL gets fooled. Fast API sits on Starlet, so this is a lot of Python services. There is a fix out. Six, somebody published a working exploit for Clio Harmony that tampers with HTTP header arguments to get past the JWT refresh logic and escalate privileges. That's managed file transfer, the product. Family ransomware cruise worked all the way through 2024. Patch it today. 7. An attacker registered Lenova IDs against other people's email addresses. Because Dropbox federates logins to Lenovo's identity provider, those IDs open the matching Dropbox accounts with no password. Around five thousand of them. go list every identity provider that can assert an identity on your SaaS tenants. Eight. Microsoft is more on the fake IT support calls over Teams. The remote session now ends with a silently installed MSI, a portable node.js runtime and a JavaScript implant that stays for hands-on keyboard work. Alert on portable node runtimes appearing outside a developer's machine. A ransomware crew calling itself the gentleman turns off your endpoint agent and your backup services before encrypting. And in some intrusion goes from access to full encryption inside a day. Make the alert for your security agent being stopped, page a person rather than opening a ticket. 10. The researcher who dropped the Kaspersky Privilege Escalation on Tuesday has published one for CrowdStrike Falcon. It abuses Falcon's own malicious macro removal feature, which runs with high privileges. No vendor fix is announced yet, so watch for a privilege escalation coming out of the sensor's own process. Eleven. From October, Windows quality updates started switching memory integrity on by themselves, turning on virtualization based security where it isn't already running. Machines where somebody already disabled it or left alone. Test your kernel drivers now because this arrives as a patch rather than a change request. twelve. Boozalin tested seventeen US and Chinese models against a full attack chain. One finished the whole thing on its own and they expected most of the rest to get there within six months. Planar detection against an intrusion that never pauses for a person. thirteen. Unit forty two worked two Latin American intrusions where the operator lived off the land and stood up their own chat interface on the victim's servers to run the job from. Go hunt for self hosted model front ends nobody in your organization deployed. fourteen. Chrome ship twenty six fixes, two of them critical, use after free bugs. Push the update rather than waiting for the rollout to reach you. fifteen. Teams in the new Outlook are failing to launch on ARM Windows machines after the August updates. Mostly the ones that haven't taken store updates. Push those before the help desk hears about it. Sixteen. Not my normal kind of story, but you should know. Dark web service is selling scans of more than a hundred and fifty-three million drivers licenses, Apparently siphoned out of an identity verification provider, and the FBI is investigating. The files include infrared and ultraviolet captures, Not just photographs, because that's what it takes to get a fake past a hologram check. That's the board for today. I'm Jerry Bell and that was the day's security news in five minutes. Sources are in the show notes. If this was worth your time, like it, subscribe, and pass it on to someone on your team back again tomorrow.