September 25, 2026 by sig9

Hacker Wars - September 25, 2026

Your daily dose of infosec chaos

Between a $351 million heist on a crypto exchange, a Cloudflare isolation flaw that let container tenants read each other’s leftovers, and a Roundcube bug already being exploited in the wild, today’s theme is broken boundaries. Add an attack chain that weaponizes AI agents into Slack phishers and macOS malware stashing payloads in iCloud calendars, and nothing looks quite as sandboxed as it claims. Patch the mail server, question your isolation assumptions, and keep reading.

Bitget Crypto Exchange Loses $351.6 Million in Suspected North Korean Heist

Crypto exchange Bitget confirmed that suspected North Korean operators drained $351.6 million from its hot and warm wallets. This is the classic exchange nightmare: funds kept online for liquidity turn into a patient, well-funded crew’s payday.

What to do: Move long-term holdings to cold storage and enforce withdrawal allowlists plus hardware 2FA on every account.

Cloudflare Container Flaw Let One Customer Read Another’s Leftover Data

Cloudflare patched a flaw in its Containers product that allowed one paying customer to read disk data other customers’ containers had left behind on shared hardware. The data came from dead workloads rather than live ones, but isolation that ends at the delete key is not the isolation anyone bought.

What to do: Treat shared hosting as untrusted for secrets and scrub sensitive state from ephemeral storage before releasing it.

Roundcube Webmail SQL Injection Exploited in the Wild

An unauthenticated SQL injection in Roundcube webmail, tracked as CVE-2026-48842, is under active attack. Webmail bugs are a favorite entry point because one pivot drops attackers into the inbox where password resets and wire approvals live.

What to do: Patch Roundcube now, and if you cannot, pull the webmail interface off the public internet until you can.

Salesbleed Turns AI Agents Into Slack Phishing Delivery

A new attack chain dubbed Salesbleed smuggles malicious instructions from the web into Salesforce agents, which then relay phishing into trusted Slack channels. Agentic AI just did what interns were never allowed to do: carry untrusted input straight into internal comms without adult supervision.

What to do: Constrain what your AI agents can post into internal channels and sanitize web-derived content before it reaches humans.

MacSync Malware Hides Payloads in Public iCloud Calendars

A new variant of the MacSync malware targeting macOS now stages fresh native payloads in public iCloud calendar events. Nothing says advanced persistent threat like weaponizing the invite your team uses for the weekly standup.

What to do: Watch for unusual calendar activity on managed Macs and block unsigned native executables with your EDR rules.

Until next time, may your logs be clean and your alerts be false positives.

Brought to you by sig9 - sig9.ch | Protecting the unseen, securing the unknown

This bulletin is provided for informational purposes. Contact us for tailored security analysis.