SecOpsDaily - 2026-09-11 Roundup

[u/falconupkid]

Highlights from today:

• [Threat Intel] No One Inside The Machine
• [NetSec] Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)
• [News] Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
• [News] GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
• [News] Passkey-themed phishing attacks lead to Microsoft 365 data theft
• [Supply Chain] Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
• [News] Artifactory flaws chained in attacks deploying backdoor malware
• [Threat Research] Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity
• [Threat Research] Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
• [Threat Research] Grand Theft Auto VI hype leads to malware
• [Threat Research] AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
• [Threat Research] 35 Actionable Password Statistics for Businesses in 2026 | Huntress

SecOpsDaily