Skip to content
TacitSoft Cyber Daily for 2026-09-07
TacitSoft Cyber Daily

Cyber Daily: exploitation, identity phishing, and AI-agent security research

This edition tracks network and management-platform attacks, Microsoft cloud phishing, Perl ecosystem vulnerabilities, and research on AI-agent and prompt-injection risk.

Read this edition Choose briefing cadence View archive →
Source-linked signals
12
Edition date
Sep 7, 2026
Coverage window
Complete UTC day
Vulnerabilities Cloud security Software supply chain AI security
RSS

Ranked operator signal

Signals in this edition

Each item links to its publisher and includes one independently written TacitSoft sentence based on structured facts.

Rank 01
The Hacker News Security News

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

TacitSoft analysis

Operators tracking Chrome, router, and software supply-chain risk can use this recap as a source-attributed overview of the reported events.

Software supply chain Vulnerabilities
Read source
Rank 02
The Hacker News Security News

Your Cloud Security Checklist Doesn't Work the Way You Think It Does

TacitSoft analysis

Cloud security programs are the subject of a source-attributed critique of checklist-only evaluation and its operational limits.

Cloud security
Read source
Rank 03
The Hacker News Security News

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

TacitSoft analysis

Telerik UI operators should assess exposure to chained padding-oracle behavior that can enable unauthenticated remote code execution and has a public exploit.

Vulnerabilities
Read source
Rank 04
arXiv Cryptography and Security Security Research Primary

Harmless Yet Harmful: Neutral Prompting Attacks for Stealthy Hallucination Steering in Agent Skills

TacitSoft analysis

Operators of AI agents using skills should consider how neutral-looking prompts could steer hallucinations inside those workflows.

AI security Software supply chain
Read source
Rank 05
BleepingComputer Breaking Security

Hackers exploit new MikroTik RouterOS flaws to hijack routers

TacitSoft analysis

MikroTik RouterOS operators should investigate newly reported flaws associated with active router hijacking.

Vulnerabilities
Read source
Rank 06
arXiv Cryptography and Security Security Research Primary

Semantic Overlays: Mitigating Prompt Injection with Annotations Beyond Tokens and Steering Vectors

TacitSoft analysis

Language-model defenders can evaluate semantic overlays as a research approach to mitigating prompt injection beyond token-level annotations and steering vectors.

AI security Vulnerabilities
Read source
Rank 07
arXiv Cryptography and Security Security Research Primary

Engineered Persuasion: Evaluating Personalized Pretexts in LLM-Generated Spear Phishing

TacitSoft analysis

Security teams evaluating AI-enabled social engineering can use this study of personalized pretexts in LLM-generated spear phishing.

AI security Vulnerabilities
Read source
Rank 08
BleepingComputer Breaking Security

N-able patches max severity N-central flaw amid ongoing attacks

TacitSoft analysis

N-central operators should prioritize the available patch because the maximum-severity flaw is associated with ongoing attacks.

Vulnerabilities
Read source
Rank 09
BleepingComputer Breaking Security

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

TacitSoft analysis

Microsoft 365 defenders should examine identity controls after reported BigBear phishing activity bypassed MFA across 258 organizations.

Cloud security Vulnerabilities
Read source
Rank 10
The Hacker News Security News

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

TacitSoft analysis

ScreenConnect operators should investigate rogue client activity that may deliver a four-stage VBScript chain to newly connected hosts.

Software supply chain Vulnerabilities
Read source
Rank 11
Openwall oss-security Open Source Disclosure

CVE-2026-16028: Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

TacitSoft analysis

Perl HTTP/2 services using Protocol::HTTP2 before 1.14 should be assessed for CVE-2026-16028 memory-exhaustion risk when closed streams remain in the connection table.

Identifiers
CVE-2026-16028
Software supply chain Vulnerabilities
Read source
Rank 12
Openwall oss-security Open Source Disclosure

CVE-2026-86287: Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

TacitSoft analysis

Net::IP::LPM operators should assess versions before 1.12 for CVE-2026-86287 because malformed prefix lengths may be accepted during Perl network-prefix processing.

Identifiers
CVE-2026-86287
Software supply chain Vulnerabilities
Read source

Get the briefing on your schedule

Choose daily, weekly, monthly, or any combination.

Choose your briefing cadence