ICYMI: 2026-09-02
Latest Headlines
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
How to Secure Enterprise AI: From Adoption to Incident Readiness
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Authorities Turn Sality’s P2P Network Against Itself, Cutting Off New Malware Payloads
UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure
Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products
Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards
OpenAI’s Astra Crosses ‘Critical’ Cyber Threshold After Finding Zero-Days
SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
WhatsApp Video Call Flaw Lets Anyone Bypass Your Android Lock Screen and View Your Photos
Google Launches Gemini 3.8 Flash Cyber to Identify and Auto-Patch Security Vulnerabilities
Firefox on iPhone Can Now Block Ads and Trackers Without Installing an Extension
GitSpawn Flaws Let Malicious Repositories Execute Code in Claude Code, Codex, Cursor, and Grok
Hackers Target US and EU Firms With Microsoft 365 Session Hijacking and RMM Abuse
Dropbox Says 5,000 Accounts Were Compromised Through Lenovo ID Authentication Flaw
Russian Hacker Indicted for Using Excel Malware to Target 80,000 Freelancers With TVRAT and DarkVNC
Ransomware Hackers Use New TukTuk Malware to Steal Credentials and Disable Security Tools
BREEZE COMET Hackers Use AI-Assisted Malware to Target Brazil Banks for Fraudulent Transfers
Cleo Harmony Flaw Lets Remote Attackers Escalate Privileges via JWT Refresh Token
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
WordPress backup plugin flaw exposes millions of sites to takeover attacks
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
Ransomware protection for MSPs: A 6-point checklist for faster recovery
Dropbox accounts breached through Lenovo email verification flaw
Microsoft Defender flags legitimate Google search links as malicious
US charges Russian for infecting 80,000 freelancers with malware
Sality botnet infrastructure dismantled in joint global takedown
SonicWall warns of actively exploited SMA1000 zero-day flaws
– MTZ