Why Should I Care? — 2026-09-19 | 🔴 2 HIGH · 🟡 1 MEDIUM · 🔵 14 RADAR · ⚪ 80 FILTERED

📋 Briefing — 2026-09-19

17 vendor intel items scanned  |  🔴 2 HIGH  |  🟡 1 MEDIUM  |  🔵 14 RADAR  |  ⚪ 80 FILTERED

🔴 Critical — action required:

1. CISA Adds One Known Exploited Vulnerability to Catalog (CVE-2025-39682) — Yes, if you run Linux Kernel versions 5.10 to 5.15: this vulnerability can allow attackers to gain full control of your system.
2. CISA Adds Two Known Exploited Vulnerabilities to Catalog (CVE-2025-39964, CVE-2026-53266) — Yes, if you run Linux Kernel versions affected by CVE-2025-39964 or CVE-2026-53266: These vulnerabilities can lead to total control of your system by attackers.

Everything else can wait.

🟡 Medium — review when time permits:

1. A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity — Yes, if you run AWS AgentCore Harness with default configurations: attackers can use prompt injection to exfiltrate plaintext credentials.

🔵 14 items on the radar — see below ↓

Why Should I Care? 🔴 HIGH — Handle Now

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Advisories [CISA KEV] | CVSS 9.8 | CVE-2025-39682

❓ Why Should I Care?
Yes, if you run Linux Kernel versions 5.10 to 5.15: this vulnerability can allow attackers to gain full control of your system.

🎯 Affected versions: 5.10 - 5.15
Not affected: 5.16 and above

🎭 In plain English:
This vulnerability means that if you're running an affected version of the Linux Kernel, an attacker could exploit this flaw to take full control of your system. For example, they could install malware, steal data, or use your system to attack others.

🔧 Prerequisites:

• Running Linux Kernel versions 5.10 to 5.15
• No proper patch applied

⏱ Urgency: High urgency due to active exploitation and the potential for full system compromise.

✅ Fixed in: 5.16, 5.17, 5.18

💡 Context: The root cause is an improper check for unusual or exceptional conditions in the Linux Kernel, allowing attackers to exploit this flaw.

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Advisories [CISA KEV] | CVE-2025-39964, CVE-2026-53266

❓ Why Should I Care?
Yes, if you run Linux Kernel versions affected by CVE-2025-39964 or CVE-2026-53266: These vulnerabilities can lead to total control of your system by attackers.

🎯 Affected versions: Linux Kernel versions prior to the patched versions

🎭 In plain English:
These vulnerabilities allow attackers to exploit race conditions or memory errors in the Linux Kernel, potentially giving them full control over your system. For example, an attacker could remotely execute code and take over your server.

🔧 Prerequisites:

• Running an unpatched Linux Kernel version
• Network access to the vulnerable system

⏱ Urgency: High urgency due to active exploitation and potential for full system compromise.

💡 Context: The root cause involves flaws in the Linux Kernel's handling of certain operations, leading to race conditions and memory errors.

Why Should I Care? 🟡 MEDIUM (1)

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

Palo Alto Unit 42

❓ Why Should I Care?
Yes, if you run AWS AgentCore Harness with default configurations: attackers can use prompt injection to exfiltrate plaintext credentials.

🎯 Affected versions: All versions with default configurations
Not affected: Versions where allowedTools are scoped to necessary tools only

🎭 In plain English:
If your AWS AgentCore Harness is set up with default settings, an attacker could trick your system into revealing sensitive credentials. For example, an attacker could send a command that makes your system reveal passwords or access keys.

🔧 Prerequisites:

• Default configuration of AWS AgentCore Harness
• Access to prompt injection

⏱ Urgency: High urgency due to the potential for immediate credential exfiltration and unauthorized access.

💡 Context: The root cause is the default configuration that enables the shell tool, which can access the same memory space where credentials are stored in plaintext.

Why Should I Care? 🔵 On the Radar (14)

• Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root (The Hacker News) — A security researcher has released working exploit code for four Linux kernel flaws that allow local users to gain root access. While the fixes are available, any system running an older, unpatched kernel is at risk.
• Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation (The Hacker News) — Microsoft fixed a critical flaw in Azure AI Foundry that could let unauthorized users gain elevated privileges. Although no action is required from users, it's crucial to stay updated on such security patches.
• Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer (BleepingComputer) — Hackers are using fake GitHub repositories to spread a new infostealer called Rapuncel, which can steal data from your computer and disable antivirus software. This affects users of LastPass and at least 39 other companies.
• Gyazo server flaw exploited to steal 23.6 million user records (BleepingComputer) — Gyazo, an image-sharing platform, suffered a data breach due to a server flaw, leading to the theft of 23.6 million user records. This includes sensitive information like email addresses, password hashes, and metadata associated with uploaded images.
• New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution (The Hacker News) — A new flaw in WordPress allows attackers to install themes without user interaction, which can be chained with another flaw to execute code on your server. This can compromise your site's security.
• Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents (The Hacker News) — A security flaw in four popular AI coding agents allows repository owners to swap a pinned plugin with a malicious one, even if the agent is set to a specific version. This could lead to unauthorized access to your files and credentials.
• An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. (The Hacker News) — A domain previously used by a CDN was re-registered, and thousands of sites are still calling it. The new owner can control what these sites load, potentially leading to security risks like malicious code execution.
• Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2 (The Hacker News) — A threat group called Transparent Tribe is using new malware tools to target government and defense organizations in India and Afghanistan. They use private GitHub repositories for command and control, which is a new tactic.
• Microsoft Teams will let admins block custom file extensions (BleepingComputer) — Microsoft Teams is adding a feature that lets admins block specific file types to enhance security. This is useful if your organization needs to prevent certain file types from being shared within the platform.
• Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer (The Hacker News) — A threat actor used AI to create a malware called PhantomRaven, which steals sensitive information from developers' machines via npm packages. This highlights the growing use of AI in cybercrime and the risks in software supply chains.
• WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage (The Hacker News) — A new malware called WeaselBiscuit is spreading through 13 npm packages and can steal data from Chrome extensions. This could impact any IT professional using these packages or extensions, potentially exposing sensitive information.
• New Check Point flaw lets hackers execute code with root privileges (BleepingComputer) — A critical flaw in Check Point's Security Management Server and Log Server allows attackers to execute code with root privileges, potentially giving them full control over your systems. This is a high-priority issue because it can be exploited without user interaction and can affect any deployment of these systems.
• Webinar: Which Google Workspace security controls actually matter? (BleepingComputer) — Webinar discussing effective Google Workspace security controls.
• RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall (The Hacker News) — New Android malware RatHat uses AI to control compromised devices.

⚪ 80 low-priority items filtered.

🦅 Aggregated and triaged by Donna AI  |  Sources: 8 vendor feeds  |  CISA KEV