Exploited this week — Friday, 18 September 2026

Elsewhere

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
SecurityWeek

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
The Hacker News

Abandoned IoT apps keep sending sensitive data to broken servers
Help Net Security

Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
The Hacker News

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
The Hacker News

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
The Hacker News

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
The Hacker News

AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom
The Register

New RatHat Android malware uses AI to automate device control
BleepingComputer

China's Salt Typhoon backdoors Latin American orgs with new snooping malware
The Register