Field intelligence for AI-first professionalsVol. II · Nº 61 · Thursday, September 24, 2026
§  The wire

The Big Four, tracked.

The live wire from the labs, refreshed every 15 minutes. Our verified read on the big launches lives in Phantom Notes.

§  Lab spotlight
§  Our verified coverageAll of Phantom Notes →
§  The full wire· 14 items
OCT 14, 2026Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security ChecksCybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass se...The Hacker News · security↗OCT 14, 2026AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the HostA flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted vi...The Hacker News · security↗OCT 14, 2026CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit AttemptsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the ...The Hacker News · security↗OCT 14, 2026OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference RoomA Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company's San Francisco offices to covertly record sen...OpenAI · security↗OCT 14, 2026Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell BugMicrosoft on Tuesday shattered its own Patch Tuesday record by shipping patches for a whopping 1,413 vulnerabilities, including one that it said has come under active exploitation. These include 1,10...The Hacker News · security↗OCT 13, 2026LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local NetworkThree vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix,...The Hacker News · security↗OCT 13, 2026Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss ControllersAttackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The...The Hacker News · security↗OCT 13, 2026Pluto Security raises $42M as AI gives enterprise security teams a new headacheThe problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security h...TechCrunch · security↗OCT 13, 2026Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSmall artificial intelligence (AI) models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from ...Anthropic · security↗OCT 13, 2026SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential TheftA flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant ...The Hacker News · security↗OCT 12, 2026Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft ReportsCryptocurrency hardware maker Ledger has temporarily paused sales of its products via CryptoBilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said...The Hacker News · security↗OCT 12, 2026⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and MoreSome meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That's not much time to read the warning, let alone d...The Hacker News · security↗OCT 12, 2026Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After PatchThreat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tr...The Hacker News · security↗OCT 12, 2026Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCEA maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-...The Hacker News · security↗