ICYMI: 2026-09-04
Latest Headlines
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years
In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover
Catch Raises $5 Million for AI Executive Assistant With Guardrails
VMware Workstation and Fusion Updates Patch Critical Vulnerability
Microsoft Unveils Project Zenith Windows PCs That Can Run 30B+ AI Models Locally
Hackers Use Popular Messaging Services to Control New Windows Backdoors
NodeStealer Can Now Record Everything Victims Type and Steal Their Screenshots
Hackers Use Invisible Unicode Characters to Evade Phishing Detection in Millions of Emails
Hackers Turn Claude, Qwen and DeepSeek Into AI Agents for Real-World Cyberattacks
Microsoft Confirms New Exchange Online Outage Delaying Emails from External Domains
Plex Urges Users to Update Media Server Immediately to Fix Multiple Security Flaws
Multiple TP-Link Archer Vulnerabilities Allow Attackers to Execute Remote Code
OpenAI Agents Hijack German Wiki in AI Breakout to Share Evasion and Bypass Tactics
Microsoft 365 Phishing Technique Uses Empty Envelope Sender to Evade Direct Send Blocking
IDScan sued over alleged data breach affecting 153 million drivers
Critical Citrix NetScaler auth bypass now leveraged in attacks
Microsoft says some users can’t open the Teams desktop client
New CrowdStrike ‘FalconFlank’ zero-day grants SYSTEM privileges
Exchange Online outage causes email delays, ‘Server busy’ errors
Google warns of new Chrome zero-day flaw exploited in attacks
– MTZ