ICYMI: 2026-09-21
Latest Headlines
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
Google Fined €403 Million Over GDPR Violations Tied to Location Data
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
US and China Discuss Alerting Each Other to AI National Security Threats
Google Hit With $463 Million Fine for EU Location Data Rule Breach
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast
Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal
Rust Team Members and Popular Crate Owners Targeted via Video Calls
Colorado Water Utilities Hit by Cyberattacks Targeting OT Systems
Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities
Google Fined €403 Million for GDPR Violations Over Users’ Location Data
AWS Automatically Quarantines Exposed IAM Keys Within 10 Seconds of GitHub Leak
Claude Code Agent Allegedly Deletes 48,000 Files in 103 Seconds
Microsoft Entra ID to Block SMS First-Factor Sign-Ins Worldwide in February 2027
Microsoft Investigating Teams Calling Issue Blocking Users From Making or Receiving Calls
PAYLOAD Ransomware Hijacks Active Directory GPO to Disrupt Entire Windows Domain Without Encryption
Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code
Microsoft Confirms September 2026 Windows Updates Break File History Backups
ChatGPT Ad Tracking Cookie Follows Users Across Third-Party Advertiser Websites
Leaky TLS Certificate Exposes North Korea’s Hangro VPN Infrastructure Across Two Countries
BigCommerce alerts merchants of data breach linked to Ribon apps
CISA alerts of active exploitation of three Linux kernel flaws
WordPress Click2Shell flaw lets hackers execute PHP on the server
Microsoft to retire Microsoft 365 Companion apps in December
Google fined €403 million over location data privacy violations
Microsoft fixes broken Excel copy and paste for all Office users
Microsoft reminds admins to migrate Entra ID users to passkeys
Microsoft: September updates break File History backup feature
– MTZ