🐛 COMMON VULNERABILITIES AND EXPOSURES 4[−]
5 SepAttackers Exploit PaperCut Flaws to Steal Credentials From Schools and UniversitiesThreat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe. The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an au…THEHACKERNEWS.COM
5 SepElementor Pro WordPress Plugin Vulnerability Exploited to Hack SitesTracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions. The post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWeek .SECURITYWEEK.COM
5 SepCritical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host CodeBroadcom has released security updates for two security flaws impacting VMware Workstation and Fusion, including one critical bug that could result in arbitrary code execution under certain conditions. The vulnerability, tracked as CVE-2026-59346 (CVSS score: 9.3), is an integer-…THEHACKERNEWS.COM
5 SepPaperCut Flaws Exploited in Attacks on U.S. and European SchoolsAttackers are exploiting two new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the U.S. and Europe. Attackers are exploiting two recelty disclosed PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, in attacks targeting schools a…SECURITYAFFAIRS.COM
⚠️ VULNERABILITY DISCLOSURE 9[−]
5 SepSurviving and thriving in the AI VulnpocalypseKatie Moussouris on AI's Vulnerability Deluge, Bug Bounties, and Smart Regulation In this Cybersecurity Today on the Weekend feature interview, host David Shipley interviews cybersecurity entrepreneur and long-time hacker Katie Moussouris about today's surge in AI-driven vulnerab…CYBERSECURITYTODAY.LIBSYN.COM
5 SepNew darknet marketplace peddles millions of driver's licenses.Healthcare companies disclose breaches. Law enforcement and industry partners shutter the Sality botnet.THECYBERWIRE.COM
5 SepRMM-ber this ransomware.Ismael Valenzuela, Vice President of Labs, Threat Research and Intelligence at Arctic Wolf, sits down with Dave to discuss their work tracking Anubis. Arctic Wolf Labs details a series of 2026 Anubis ransomware intrusions, revealing affiliates using stolen VPN credentials and…THECYBERWIRE.COM
5 SepBroadcom Patches Critical VMware Workstation and Fusion VM-Escape VulnerabilitiesBroadcom patched two VMware Workstation/Fusion VM-escape bugs. No workarounds exist. Update to version 26H1u1 immediately. Broadcom published advisory VMSA-2026-0007, patching two vulnerabilities in VMware Workstation and Fusion that allow an attacker inside a virtual machine to …SECURITYAFFAIRS.COM
5 SepTrezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was DeletedHardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. have been impacted in a breach at its shipping provider ShipMonk. The exposed information includes customer names, email addresses, phone numbers, shipping addresses, and order num…THEHACKERNEWS.COM
5 SepFalconFlank Zero-Day Hits CrowdStrike Falcon SensorCyberKendra reports: A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges on fully patched Windows machines running CrowdStrike Falcon. The researcher — who also uses the aliases Nightmare-Eclipse, MSNightm…DATABREACHES.NET
5 SepAttackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS CredentialsJetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately r…THEHACKERNEWS.COM
5 SepFrench Police Arrest Suspected ZeroBytes Hacker Over Tax Data TheftWaqas reports: French authorities have detained an 18-year-old man suspected of belonging to ZeroBytes, a hacking group that claimed responsibility for several attacks targeting French government services and companies. The Paris prosecutor’s office disclosed the case on Septembe…DATABREACHES.NET
5 SepOpenAI Announced $1B in Defensive Tools for Water UtilitiesOpenAI pledges $1B in subsidized Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. OpenAI announced Daybreak for Frontline Defenders on September 3, 2026, committing $1 billion in subsidized access to its Daybreak cyber models, training, and t…SECURITYAFFAIRS.COM
🔥 INCIDENT REPORTING 4[−]
5 SepOpenAI Agents Hacked Another WebsitePlus: Tens of millions of US and Canadian drivers’ licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad data poses to troops, and more.WIRED.COM
5 SepOpenAI admits it didn't disclose rogue AI wiki hijacking incidentOpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000 posts, shared answers, and bypassed restrictions, saying it treated the activity as model "misalignment" rather than a security breach. [...]BLEEPINGCOMPUTER.COM
5 SepOver 5,400 hacked sites serve ClickFix payloads stored on the blockchainA massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). [...]BLEEPINGCOMPUTER.COM
5 SepOpenAI confirms ‘wiki incident,’ says it’s ‘working on a framework’ for more disclosureOpenAI acknowledged its role in a recently reported incident where AI agents took over a German wiki forum.TECHCRUNCH.COM
🕵️ THREAT INTELLIGENCE 2[−]
5 SepThe Fake Deal Cost €626,735In the “Phantom Deal” scheme, attackers identified someone on a target company's legal team and impersonated an executive through WhatsApp. They claimed a massive, confidential corporate acquisition was underway and eventually demanded a transfer of €626,735.45 to a company in Ho…YOUTUBE.COM
📡 INFOSEC NEWS 1[−]
5 SepThousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination ChannelA group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool answers to a timed web task and pass ar…THEHACKERNEWS.COM