{"uuid": "10b067b8-c99d-466c-af49-c08ced5d3635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15920", "type": "seen", "source": "https://t.me/TopCyberTechNews/841", "content": "Top Security News for Today\n\nAnthropic AI agent faked identities, phished real developers in UK government hacking test  \nhttps://therecord.media/anthropic-ai-hacking-uk\n\nVulnerabilities in Car Anti-Theft Device  \nhttps://www.schneier.com/blog/archives/2026/08/vulnerabilities-in-car-anti-theft-device.html\n\nCritical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup  \nhttps://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html\n\nKali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk  \nhttps://thehackernews.com/2026/08/kali365-weaponizes-microsoft.html\n\nStored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)  \nhttps://www.reddit.com/r/netsec/comments/1vg9704/stored_xss_in_djangos_admin_via_an_unvalidated/\n\nOpen VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data  \nhttps://thehackernews.com/2026/08/open-vsx-removes-77-malicious-evil-twin.html\n\nCyberattacks targeting water systems expand to 12 states as South Dakota, Georgia announce incidents  \nhttps://therecord.media/iran-cyberattacks-water-treatment\n\nU.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog  \nhttps://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html\n\n5th Edition MENA CYBER SECURITY CONFERENCE \u2013 RIYADH EDITION  \nhttps://cisomag.com/5th-edition-mena-cyber-security-conference-riyadh-edition/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://x.com/ShayaFeedman", "creation_timestamp": "2026-09-03T15:00:04.835722Z"}