🕵️ RESEARCH & DEEP DIVES
MITM flaw in Autodesk Fusion Desktop lets add-ins redirect traffic via proxy (CVE-2026-85217)
A high-severity MITM vulnerability in Autodesk Fusion Desktop allows a malicious add-in to redirect authenticated traffic through an attacker-controlled proxy.- Applies to Autodesk Fusion Desktop versions before 2705.1.11 (2705.0.0 line affected; 2705.1.11 not affected).
- A maliciously crafted add-in can modify persistent network proxy settings without user notification or consent.
- Attackers can route authenticated Fusion network traffic through an attacker-controlled proxy, exposing sensitive information of the current user.
- Tracked as CVE-2026-85217 (CWE-15), CVSS 3.1 score 8.6, requires local access and user interaction; assigned by Autodesk.
New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws — BleepingComputer
The Top 4 Threats We Found by Investigating Every Alert for a Quarter — BleepingComputer
Anthropic Researcher Resigns With Warning About the Dangers of AI Development — SecurityWeek
Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster — SecurityWeek
Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews — SecurityWeek
Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation — SecurityWeek
PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector — Check Point Research
Google Play Early Access Abused to Push Thousands of Deceptive Android Apps — The Hacker News
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE — The Hacker News
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances — The Hacker News
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks — The Hacker News
Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th) — SANS ISC
Governments ‘buying time’ in race between innovation, security, national cyber director says — CyberScoop
ION-DTN before 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertio... — CVE ThreatInt
ICEcoder through 8.1 Path Traversal via oldFileName ParameterICEcoder version... — CVE ThreatInt
ICEcoder through 8.1 OS Command Injection via lib/properties.phpICEcoder thro... — CVE ThreatInt
ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement... — CVE ThreatInt
Stored XSS in Ankaref's LIBRID/LIBREFImproper neutralization of input during ... — CVE ThreatInt
MISP: Unescaped HTML Injection in PDF Report Element RenderingMISP contains a... — CVE ThreatInt
Improper Authentication in Ankaref's LIBRID/LIBREFWeak Password Recovery Mech... — CVE ThreatInt
Suricata lua: sandbox allocation limit not enforced for new allocationsSurica... — CVE ThreatInt
Stored XSS Yönetim panel in Ankaref's LIBRID/LIBREFImproper neutralization of... — CVE ThreatInt
EspoCRM before 10.0.4 SSRF via IPv6 Transition Address BypassEspoCRM before 1... — CVE ThreatInt
CyberPanel before 3.0.5 Authentication Bypass via APICyberPanel before 3.0.5 ... — CVE ThreatInt
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit CheckoutSnipe-I... — CVE ThreatInt
OpenPanel Unauthenticated Share Lookup Information DisclosureOpenPanel share ... — CVE ThreatInt
OpenPanel SSRF via Unguarded Importer File URL FetchOpenPanel is an analytics... — CVE ThreatInt
OpenPanel Read-Only Access Level Enforcement Bypass via MutationsOpenPanel fa... — CVE ThreatInt
OpenPanel SQL Injection via unvalidated profile filter column identifierOpenP... — CVE ThreatInt
Renovate before 44.14.7 Command Injection via distributionTypeRenovate before... — CVE ThreatInt
Renovate before 44.14.7 Command Injection via Mix organizationRenovate before... — CVE ThreatInt
Renovate before 44.11.2 Credential Exfiltration via Link HeaderRenovate is a ... — CVE ThreatInt
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it — Cloudflare Blog
Introducing AI Assistant for Akamai Web Security Analytics — Akamai Blog
‘Anne Hathaway’ admits leading $245 million crypto theft gang that spent a fortune on nightclubs, watches, and luxury cars — Graham Cluley
New: ID verification giant IDScan confirms data breach of driver's licenses. — @zackwhittaker@mastodon.social
Hackers Use Fake GTA 6 Downloads to Deploy RATs, Infostealers and Data-Wiping Malware — Cyber Security News
WordPress Uses AI to Stop Malicious Plugin Updates Before They Reach Millions of Websites — Cyber Security News
Hackers Use Blob URLs and Microsoft Teams to Create Phishing Pages Inside Victims’ Browsers — Cyber Security News
Hackers Exploit Critical Cisco Firewall Flaw to Gain Root Access and Deploy Malware — Cyber Security News
CISA Warns of Citrix NetScaler Authentication Bypass Vulnerability Exploited in Attacks — Cyber Security News
Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data — Cyber Security News
Hackers Can Turn AI Workflows Into Privileged Data-Stealing Proxies Without Jailbreaking Models — Cyber Security News
Why immutable backups are critical for ransomware resilience — securityboulevard.com (discovered)
Mapping Cequence AI Gateway Controls to OWASP’s Top 10 for Agentic Applications — <https://securityboulevard.com/2026/09/mapping-cequence-ai-gateway-controls-to-owasps-top-10-for-agentic-applications/|securityboulevard.com (