https://cyber-osint.io/news/malicious-npm-packages-evade-install-script-defenses-at-runtime CyberOSINT en 2026-09-20 Malicious npm packages evade install-script defenses at runtime https://cyber-osint.io/news/researchers-escape-openai-codex-sandbox-to-run-commands-on-host CyberOSINT en 2026-09-20 Researchers escape OpenAI Codex sandbox to run commands on host https://cyber-osint.io/news/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions CyberOSINT en 2026-09-19 BragJack attacks hijack AI browser agents through malicious extensions https://cyber-osint.io/news/north-korean-waterplum-hackers-infected-30000-devices-worldwide CyberOSINT en 2026-09-19 North Korean WaterPlum hackers infected 30,000 devices worldwide https://cyber-osint.io/news/shinyhunters-hacks-clop-leak-site-threatens-to-extort-ransomware-gang CyberOSINT en 2026-09-19 ShinyHunters hacks Clop leak site, threatens to extort ransomware gang https://cyber-osint.io/news/identity-visibility-in-2026-the-foundation-of-identity-security CyberOSINT en 2026-09-19 Identity Visibility in 2026: The Foundation of Identity Security https://cyber-osint.io/news/viral-ai-actress-hotline-face-scans-every-caller-watches-their-mood CyberOSINT en 2026-09-19 Viral AI actress' hotline face-scans every caller, watches their mood https://cyber-osint.io/news/calling-viral-ai-actress-tilly-norwood-agree-to-a-face-scan-first CyberOSINT en 2026-09-19 Calling viral AI actress Tilly Norwood? Agree to a face scan first https://cyber-osint.io/news/claude-opus-5-helped-researchers-take-over-openai-staff-accounts-via-chained-flaws CyberOSINT en 2026-09-19 Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws https://cyber-osint.io/news/solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthenticated-rce CyberOSINT en 2026-09-19 SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE https://cyber-osint.io/news/critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-the-wild CyberOSINT en 2026-09-19 Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild https://cyber-osint.io/news/google-gemini-broke-into-real-company-systems-after-security-test-domain-mix-up CyberOSINT en 2026-09-19 Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up