OSINT / CyberSec report 15.09.2026 00:10

1. A malicious Twitch browser extension named Twitch Enhanced Viewer JeetBot has leaked OAuth tokens for nearly 31000 users to Russian proxy servers (https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html).

2. Fintech company Revolut disclosed a data breach involving the exposure of customer financial information and passports after an employee was tricked by a threat actor impersonating a government agency (https://www.bleepingcomputer.com/news/security/revolut-discloses-data-breach-exposing-financial-info-passports/).

3. CISA warned that hackers are actively exploiting a maximum severity vulnerability in GitLab (https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks/).

4. Threat actors linked to a China aligned espionage group are exploiting a critical vulnerability in the Tencent Sogou Input Method to deploy the GrayRabbit backdoor (https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/).

5. Microsoft reported two major campaigns involving passkey themed social engineering and email infrastructure abuse to hijack cloud accounts and exfiltrate data (https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html).

6. CISA added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog (https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html).

7. The Dutch NCSC warned that exploitation of two critical vulnerabilities in Check Point VPN is imminent (https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/).

8. Microsoft confirmed that September 2026 security updates are causing Remote Desktop Services failures on Windows Server systems (https://www.bleepingcomputer.com/news/microsoft/microsoft-september-updates-cause-rds-failures-on-windows-server/).

9. Microsoft confirmed that September 2026 security updates are causing USB audio device failures on some Windows systems (https://www.bleepingcomputer.com/news/microsoft/microsoft-september-updates-break-audio-on-some-windows-pcs/).