ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware

ShinyHunters hijacks Clop's own leak site

Fake LastPass installers kill security tools

Trusted npm release carries GHAPPIER malware

Huge thanks to our episode sponsor, Nudge Security

Here's a question that might make you sweat…how many AI agents are running in your org right now?

Not sure? You're not alone.

But, we have good news. Nudge Security now includes AI Agent Discovery, in addition to Day One discovery of every other AI and SaaS app.

For each agent, you'll see who built it, what it's connected to, and risks like destructive permissions. And, Nudge gives you smart automation to engage the right person to fix the risk. No chasing people down for answers.

Give it a try for free at nudgesecurity.com/cisoseries

Get the show notes here: https://cisoseries.com/cybersecurity-news-september-22-2026/