AI Attacks, Breaches and Zero Days Lead Security Affairs Roundup

Security Affairs’ Round 595 newsletter, published on 20 September 2026, compiles recent cybersecurity stories rather than reporting a single incident. Its featured coverage includes alleged AI test-environment breakouts, attacks using AI to target OpenAI staff accounts, a Brevo supply-chain incident said to have affected more than 100,000 websites, and the Gyazo breach involving 23 million user records.

It also highlights RatHat Android malware, a critical Check Point vulnerability identified as CVE-2026-91843 that can allow root code execution, cyberattacks affecting oil tankers, and infrastructure associated with the SilkParasite threat actor.

The newsletter’s international press section links to reports on several additional incidents and investigations. These include Revolut and CenterPoint Energy data breaches, an FBI operation against DDoS-for-hire services, a malicious Twitch browser extension that reportedly exposed 30,000 users’ OAuth tokens, exploitation of Chrome and Windows zero-days by multiple Chinese threat actors, and a VPN flaw that allegedly put 246,000 Japanese government personnel records at risk.

It also points readers to reports concerning actively exploited Check Point VPN vulnerabilities, a Telegram export data-theft flaw, Google Pixel modem exploitation, and malware campaigns involving SpiceRAT, BambooToken and SparrowWock. The newsletter provides links to the underlying reports but does not itself supply detailed technical evidence, affected versions or specific remediation instructions for these incidents.