14th September – Threat Intelligence Report

Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection

ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability

ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability

A Vulnerability in GitLab Could Allow for Disclosure of Sensitive Data

ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

Social Engineering Campaign Uses Phony NDAs to Avoid Detection

Google’s new search redirects make links harder to check before you click

Warning: “Slop Squatting” Directs AI Users to Phishing Pages

Revolut gave customer IDs and financial data to a government impostor