September 2026

HPE Fabric Composer Vulnerabilities Expose Critical Systems

Counterfeit installers to system compromise: Tracking a deceptive software download campaign

FBI Probes Service Selling 153M+ Drivers Licenses

Impersonating IT support: how threat actors turn a remote session into enterprise-wide access

Summer 2024 weather report: Cloudflare with a chance of Intern-ets

OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI

French Hospital Fined €500,000 After Patient Data Breach Affects 525,000

SonicWall NSM Flaws Enable Authentication Bypass and Command Execution

Google Rushes Out Chrome Patch for Exploited V8 Zero Day

CISA Flags Actively Exploited Chrome Flaw as Sixth 2026 Zero-Day

OpenAI Agents Posted 18,000 Messages Plotting Sandbox Breakouts

CISA Flags Chrome V8 Flaw Affecting Major Chromium Browsers

OpenAI Pledges $1 Billion to Bring AI Cyber Defence to Utilities

StyleSmuggler Campaign Exploits Unpatched Magento Stores Without Login

Attackers Exploit PaperCut Flaws to Breach School Networks

MikroTik Patches Exploited SSH Bypass That Adds Rogue Accounts

Roundcube Fixes Zero Click XSS and SSRF Flaws in Mail Server

MikroTik RouterOS Zero Day Chain Gives Attackers Admin Control

Springfield Schools Close After Cyber Incident Disrupts Operations

32.8 Million Condé Nast User Records Offered for $15,000

Cybercriminals Turn Overlooked Loyalty Points Into Funding for Fraud

Microsoft Fixes 974 Flaws Including Two Exploited Windows Zero Days

Microsoft’s Record Patch Tuesday Fixes Two Exploited Windows Zero-Days

Microsoft Fixes 974 Flaws as Two Windows Zero Days Face Exploitation

Colorado School District Warns Cyberattack May Have Destroyed Files

Microsoft Maps Cloud App Attack Paths in New Threat Matrix

AI Finds Thousands of Flaws, but Humans Patch Fewer Than 1%

CISA Flags Actively Exploited MikroTik RouterOS Flaw Exposing Kernels

CISA Flags Actively Exploited Critical MikroTik RouterOS Flaw

Attackers Exploit Personal Phones to Steal Corporate Data via Graph API

CISA Flags Actively Exploited GitLab Flaw Exposing Arbitrary Files

CISA Warns of Exploited JFrog Artifactory Authentication Flaw

CISA Warns of Actively Exploited JFrog Artifactory Flaw

Google Exposed Sex Crime Victims’ Removal Requests Worldwide

New York DFS Urges Annual Cyber Risk Reviews After Major Changes

Revolut Exposed Customer Data After Fraudulent Government Request

Healthcare Bears 60% of Cyber-Attacks Reported in Colombia

Security Affairs Tracks Malware, Ransomware and Active Exploits

Delaware Tightens Privacy Rules and Breach Reporting Duties

Russia-linked hackers exploit Cisco firewall flaws to deploy Cyclops Blink

ENISA Warns Frontier AI Could Enable “Negative Time-to-Exploit”

CISA Warns of Actively Exploited Cisco Email Gateway Flaw

Singapore Mosques’ Payroll System Hacked and Held for Ransom

CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks

Microsoft Bans AI Companions in Schools Under New Pact

Ontario Hospital Confirms Ransomware Attack Encrypted Patient Files

CISOs Pour More Money Into AI Despite Unclear Security Returns

Cyberattack Knocks International Meteor Organisation’s Site Offline

OpenAI admits its models lie to cover their own mistakes

Attackers Are Crossing Eight Attack Surfaces in One Campaign, Unit 42 Finds

CISA to End Weekly Vulnerability Bulletins Amid Risk Shift

Brevo Supply Chain Attack Exposed 100,000 Websites to Malware

Ellis County Isolates Systems After Ransomware Attack Discovered

Vectra AI Launches Partner Programme to Tackle AI Era Threats

TigerByte Emerges With $3 Million to Secure Legacy AI Systems

Google Gemini Reached Three Real Companies During Security Test

ShinyHunters Claims It Breached and Defaced Clop’s Leak Site

Microsoft Edge to Retire Internet Explorer Mode by 2029

Microsoft Fixes Excel Copy and Formula Errors in September Update

Windows Server 2022 Mainstream Support Ends in October 2026

Meta’s Muse AI Flaw Lets Mac Apps Hijack Accounts and Data

AI Apps Face ‘Denial of Wallet’ Risk From Unbounded Usage

Google Fined €403 Million Over GDPR Location Tracking Breaches

Elsevier Platforms Redirected Users to LAPSUS$ Extortion Pages

80,000 Relays Help China Users Bypass US AI Model Restrictions

CISA Warns of Active Check Point Gateway Code Execution Flaw

FBI Recruitment Portal Hack May Expose Agents’ Home Addresses

GitLab Fixes Critical CI/CD Flaws Enabling Arbitrary Code Execution

FBI Investigates ShinyHunters Claim of Recruitment Site Breach

OpenAI Agent Gained Unauthorised Access to Australian Health Files

Salesforce Agentforce Flaws Could Turn Web Forms Into Slack Phishing Tools

Ryuk Access Broker Jailed for Helping Ransomware Hit US Targets

Unit 42 Exposes Three Cybersecurity Myths Putting Organisations at Risk

Former US Soldier Gets 70 Months for Telecom Data Hacking Scheme

CISA Warns of Active MikroTik RouterOS Attacks and SharePoint Flaw

Lunex Stealer Exploits AMD Drivers to Evade Security Monitoring

US and China Set AI Crisis Channel Amid Rising Tech Tensions

OpenAI Probes AI Agents’ Unauthorised Access to US Government Sites

CISA Warns NetScaler Flaw Is Being Exploited for Command Execution

CISA Warns Attackers Are Exploiting Critical Citrix NetScaler Flaw

Citrix NetScaler Zero Days Exploited Against Unpatched Systems

Apple Patches Exploited Zero Day Targeting Older iOS Versions

TDengine Zero-Day Lets Attackers Crash Servers with One Packet

Carbonato Botnet Hijacks Exposed Docker Servers to Steal AI Keys

Fake MSP360 RMM Installers Let Attackers Deploy ScreenConnect

Apple Patches Actively Exploited CoreGraphics Zero Day in Targeted Attacks

Unsloth Studio Flaw Let Malicious AI Models Run Python Code

FTC Probes OpenAI and Anthropic Over AI Consumer Risks

Internet Society Launches Free Multilingual Hub to Combat Online Scams

Attackers Abuse OpenAI’s Trusted Domains to Deliver RAT Malware