SecurityWeek Briefing

"Honeywell:  OT security teams embrace AI, but autonomy still rare."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 23 September 2026, 1352 UTC.

Content and Source:  "SecurityWeek Briefing" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

101K followers50 articles per week

#security#tech

84

Today

Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare

OT cyber risks surge across industries

•

by Eduard Kovacs / 1h

Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature. The post appeared first on SecurityWeek .

Adobe Patches Critical Flaws in Connect, AEM Forms

4 TTPs

•

by Ionut Arghire / 2h

The nine critical security defects could be exploited for arbitrary code execution and privilege escalation. The post appeared first on SecurityWeek .

AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft

3 TTPs

•

by Eduard Kovacs / 2h

•

Microsoft disrupts EvilTokens phishing

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets. The post appeared first on SecurityWeek .

Chrome 154 Patches 108 Vulnerabilities

by Ionut Arghire / 3h

The browser update resolves several critical-severity memory safety and memory corruption flaws. The post appeared first on SecurityWeek .

A Look at AI Doomsday Scenarios That Researchers Say Could Put Humanity at Risk

AI internet takeover fears rise

•

by Associated Press / 3h

Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the technology’s development for safety reasons. The post appeared first on SecurityWeek .

Outerlimit Raises $16 Million to Stop Rogue AI Agents From Causing Harm

by Kevin Townsend / 3h

Emerging from stealth with $16 million in pre-seed funding, Outerlimit offers a decentralized authorization layer designed to discover, observe, and block harmful autonomous AI actions. The post appeared first on SecurityWeek .

Yesterday

Arista Urges Immediate Patching of Exploited VCO Zero-Day

CVE-2026-93952

•

by Ionut Arghire / 5h

Remote attackers could trigger the critical-severity flaw to access privileged internal functionality. The post appeared first on SecurityWeek .

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day

Execution (Enterprise TA0002)

•

by Ionut Arghire / 6h

•

CVE-2026-94127

Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution. The post appeared first on SecurityWeek .

ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report

3 TTPs

•

by Eduard Kovacs / 6h

The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. The post appeared first on SecurityWeek .

Check Point Patches Exploited Management Server Zero-Day

2 TTPs

•

by Ionut Arghire / 7h

•

Check Point management server zero day

The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts. The post appeared first on SecurityWeek .

BigCommerce Data Stolen via Ribon Apps Hack

3 TTPs

•

by Ionut Arghire / 19h

•

BigCommerce Ribon app breach

The attackers used a compromised BigCommerce application key held by Ribon to access customer data. The post appeared first on SecurityWeek .

Cyera Raises $400 Million at $12+ Billion Valuation

Cyera raises 400M extension

•

by SecurityWeek News / 23h

The data security company received the new investment from Goldman Sachs Alternatives, extending its Series G funding round. The post appeared first on SecurityWeek .

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

BigDiskBuster blocks Defender updates

•

by Eduard Kovacs / 1d

Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse. The post appeared first on SecurityWeek .

Only 13% of OT Network Segments Are Fully Isolated: Analysis

by Eduard Kovacs / 1d

Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise assets. The post appeared first on SecurityWeek .

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers

12 TTPs

•

by Ionut Arghire / 1d

•

CVE-2026-7273

A Chinese threat actor has exploited the bug to exfiltrate sensitive information from nearly 1,000 ZyXEL switches. The post appeared first on SecurityWeek .

Malicious B-tree NPM Package Accumulates Millions of Downloads

11 TTPs

•

by Ionut Arghire / 1d

•

indexed btree npm malware

Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method. The post appeared first on SecurityWeek .

WordPress Patches ‘Click2Shell’ Vulnerability

4 TTPs

•

by Ionut Arghire / 1d

The bug lets attackers automatically install and preview themes and could lead to remote code execution. The post appeared first on SecurityWeek .

Sep 21, 2026

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

Japan exposes North Korea cyberfarm

•

by Eduard Kovacs / 1d

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign. The post appeared first on SecurityWeek .

US Proposes AI Incident Alert System in Talks With China, Bessent Says

US proposes AI incident notification

•

by Associated Press / 1d

Trump has resisted calls to slow down AI development, saying that would help China catch up to U.S. companies. The post appeared first on SecurityWeek .

Google Hit With $463 Million Fine for EU Location Data Rule Breach

Google fined 403 million euros

•

by Associated Press / 1d

Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data. The post appeared first on SecurityWeek .

Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer

12 TTPs

•

by Ionut Arghire / 1d

•

GitHub Rapuncel infostealer campaign

The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware. The post appeared first on SecurityWeek .

CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast

by Kevin Townsend / 1d

Noopur Davis never planned a career in cybersecurity. She was a developer at Intergraph, and for many years that was all she wanted to be. The post appeared first on SecurityWeek .

Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal

Dragos acquires NetRise and runZero

•

by Eduard Kovacs / 1d

The transaction is part of the $4.1 billion deal in which Accenture acquired a majority stake in Dragos in an OT cybersecurity push. The post appeared first on SecurityWeek .

RatHat Android Trojan Uses AI for Automation

5 TTPs

•

by Ionut Arghire / 2d

•

RatHat Android AI banking trojan

The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion. The post appeared first on SecurityWeek .

Rust Team Members and Popular Crate Owners Targeted via Video Calls

Rust developers targeted with malware

•

by Eduard Kovacs / 2d

It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea. The post appeared first on SecurityWeek .

CrowdSec Confirms Source Code Stolen in Supply Chain Attack

4 TTPs

•

by Ionut Arghire / 2d

•

CrowdSec source code leak

The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack. The post appeared first on SecurityWeek .

Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems

Foreign actors hack Colorado water

•

by Eduard Kovacs / 2d