Security alerts spanning 25–26 September 2026 reported: placeholder third-party.com serving malware across 1,700+ repositories, compromised GitHub Actions resuming Mini Shai-Hulud malware execution, Elementor CSRF vulnerability enabling site takeovers, and Kiteworks urging customers to shut down systems for nine hours over suspected cyber attack.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
Hacker News: Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content https:// thehackernews.com/2026/09/plac eholder-third-partycom-referenced.html # news # IT
Hacker News: The SOC Doesn https:// thehackernews.com/2026/09/the- soc-doesnt-need-to-start-over-with.html # news # IT
Hacker News: Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware https:// thehackernews.com/2026/09/comp romised-github-actions-came-back.html # news # IT
Hacker News: Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild https:// thehackernews.com/2026/09/roun dcube-pre-auth-sql-injection-flaw.html # news # IT
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials https:// thehackernews.com/2026/09/crit ical-bifrost-ai-gateway-flaw-lets.html
AI Agents Are Rewriting the Rules of Lateral Movement https:// thehackernews.com/2026/09/ai-a gents-are-rewriting-rules-of.html
Hacker News: SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild https:// thehackernews.com/2026/09/shar epoint-rce-and-mikrotik-routeros.html # news # IT
Hacker News: Zero Trust for AI Agents Starts With Fixing Zero Visibility https:// thehackernews.com/2026/09/zero -trust-for-ai-agents-starts-with.html # news # IT
Who says CSRF isn't a real vulnerability? https:// thehackernews.com/2026/09/elem entor-csrf-flaw-lets-attackers-take.html # vulnerability # appsec
Hacker News: Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells https:// thehackernews.com/2026/09/atta ckers-bypass-wafs-to-exploit-oracle.html # news # IT
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control https:// thehackernews.com/2026/09/new- cpanel-flaw-lets-hosting-account_0272795595.html
Hacker News: Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link https:// thehackernews.com/2026/09/elem entor-csrf-flaw-lets-attackers-take.html # news # IT
🔒 Security News Digest - 2026-09-26 📊 7 updates from 2 sources: 🔹 The Hacker News: Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack https:// thehackernews.com/2026/09/kite works-urges-customers-to-shut-down.html 🔹 The Hacker News: SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild https:// thehackernews.com/2026/09/shar epoint-rce-and
Hacker News: Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack https:// thehackernews.com/2026/09/kite works-urges-customers-to-shut-down.html # news # IT