ICYMI: 2026-09-10
Latest Headlines
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Google Play Early Access Abused to Push Thousands of Deceptive Android Apps
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example “sk-1234” Admin Key
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
Clearview AI Is Testing an AI Tool That Would Let Cops Unearth Your Life Online
Cybersecurity M&A Roundup: 33 Deals Announced in August 2026
Anthropic Researcher Resigns With Warning About the Dangers of AI Development
Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster
Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews
Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation
OpenMatter Network Realigns Leadership Team to Accelerate Global Commercial Growth
Hackers Use Fake GTA 6 Downloads to Deploy RATs, Infostealers and Data-Wiping Malware
WordPress Uses AI to Stop Malicious Plugin Updates Before They Reach Millions of Websites
Hackers Use Blob URLs and Microsoft Teams to Create Phishing Pages Inside Victims’ Browsers
Hackers Exploit Critical Cisco Firewall Flaw to Gain Root Access and Deploy Malware
CISA Warns of Citrix NetScaler Authentication Bypass Vulnerability Exploited in Attacks
Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data
Hackers Can Turn AI Workflows Into Privileged Data-Stealing Proxies Without Jailbreaking Models
Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks
LiteLLM Flaws Let Attackers Execute Code as Root and Steal Cloud Credentials
New Android malware encrypts files, steals data, and harasses victims
September Windows Server updates break Remote Desktop Services
Surfshark VPN says hackers breached internal testing, proxy servers
Microsoft Excel KB5002914 update breaks copy and paste for some users
AI-powered attack exploited PaperCut flaws to hack 395 organizations
Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
IDScan confirms breach tied to 153 million stolen driver’s licenses
New ‘BlueMoon’ kit exploited Windows and Chrome zero-day flaws
The Top 4 Threats We Found by Investigating Every Alert for a Quarter
Microsoft says September updates fix mouse settings reset issues
CISA: WatchGuard RCE flaw now exploited in ransomware attacks
Trezor warns users of email provider breach, phishing attacks
– MTZ