SAP warns of maximum severity 'OVERPASS' kernel vulnerability

💥 BREACHES & INCIDENTS

Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin's public record shows. About 598.5 bitcoin has not come back. Liquid is a Bitcoin sidechain that holds real bitcoin to back a token called L-BTC. The network is still paused,
📎 Coverage: thehackernews.com · 👁 via The Hacker News

CVE-2026-86738 — grokability snipe-it — CVSS 9.3 — Snipe-IT before 8.7.0 CSS Injection via Custom CSSSnipe-IT versions before 8....
CVE-2026-86732 — craftcms cms — CVSS 8.7 — Craft CMS before 5.10.12 Remote Code Execution via element-indexCraft CMS ver...
CVE-2026-86730 — craftcms cms — CVSS 8.7 — Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCECraft CMS versions b...
CVE-2026-86733 — grokability snipe-it — CVSS 8.6 — Snipe-IT before 8.7.0 Remote Code Execution via Backup RestoreSnipe-IT before...
CVE-2026-86600 — Snowflake Connector for Python — CVSS 8.2 — Workload identity attestation generated before login host validation in Snowf...
CVE-2026-86734 — grokability snipe-it — CVSS 7.1 — Snipe-IT before 8.7.1 Denial of Service via Unbounded Note FieldSnipe-IT befo...
CVE-2026-86731 — craftcms cms — CVSS 7.1 — Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersControllerC...

autonomous-ai-agent-credential-harvesting — The Hacker News
uefi-shell-secure-boot-bypass — CERT/CC Vulnerability Notes
ChatGPT Sandbox Flaw Lets Attackers Steal Gmail Data Across Accounts via Hidden Channel — Cyber Security News
gemini-adversarial-adoption — @campuscodi@mastodon.social
XenForo SSRF in PayPal Webhook Handler (CVE-2026-73315) — thehackerwire.com (discovered)
Ivanti EPMM, Neurons and Sentry Vulnerabilities Enable Privilege Escalation and RCE Attacks — cryptika.com (discovered)
Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized Access — cryptika.com (discovered)
france-reactiv-gov-ir-team — @campuscodi@mastodon.social

SAP warns of maximum severity 'OVERPASS' kernel vulnerability CVE-2026-44756 CVE-2026-58240
SAP has addressed 20 vulnerabilities across multiple products in its September 2026 security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code. [...]
📎 Coverage: bleepingcomputer.com · 👁 via BleepingComputer, SecurityWeek (+1)
ivanti-september-2026-advisories — Cyber Security News