🐛 COMMON VULNERABILITIES AND EXPOSURES 2[−]
13 SepGitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 HoursCVE-2026-85706, a CVSS 10.0 GitLab path traversal, was under active exploitation within 24 hours of disclosure. GitLab disclosed CVE-2026-85706 (CVSS score of 10.0) on September 10, 2026, a path traversal vulnerability in its repository commits API. CVE-2026-85706 affects GitLab’…SECURITYAFFAIRS.COM
13 SepHackers exploit Tencent app flaw to deploy GrayRabbit malwareThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]BLEEPINGCOMPUTER.COM
⚠️ VULNERABILITY DISCLOSURE 8[−]
13 SepRevolut handed customer data to fraudsters using a government email domainRevolut disclosed personal and financial information of customers after receiving fraudulent information requests sent from an email account hosted on a legitimate government agency domain. The fintech company says its systems and customer funds were not compromised. Blockchain i…CYBERINSIDER.COM
13 SepWeek in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploitedHere’s an overview of some of last week’s most interesting news, articles, interviews and videos: Zero trust AI agents demand a different kind of security In this interview, Chris Webber, VP, Product Marketing at Teleport, explains why zero trust principles need to change for AI …HELPNETSECURITY.COM
13 SepAttackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate DataMicrosoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, i…THEHACKERNEWS.COM
13 SepChess.com (2026) - 4,653,212 breached accountsIn August 2026, millions of records allegedly sourced from Chess.com were posted online . The data contained 7.3M rows with 4.6M unique email addresses, along with usernames, names, countries and data relating to users' Chess.com accounts. Analysis of the data suggested it had be…HAVEIBEENPWNED.COM
13 SepDelaware Consumer Privacy and Data-Breach Law UpdatesJoseph J. Lazzarotti of JacksonLewis writes: On September 2, 2026, Delaware’s Governor signed House Bill (HB) 380 and HB 381. HB 380 amends the Delaware Personal Data Privacy Act (DPDPA), which was enacted in 2023 and became effective January 1, 2025. HB 381 separately amends Del…DATABREACHES.NET
13 SepAT&T store worker gets 16 months inside for SIM-swap side hustleConnor Jones reports: A former AT&T retail worker who used his system access to hijack customers’ phone numbers for cybercriminals has been sentenced to 16 months in federal prison. Kenneth Carter, 44, carried out the SIM swaps at a store in Portland, Oregon, , allowing…DATABREACHES.NET
13 SepHHS Releases Updated Security Risk Assessment ToolFrom HHS OCR: The U.S. Department of Health and Human Services Office for Civil Rights (OCR) and the Office of the National Coordinator for Health IT (ONC) are pleased to announce the release of version 3.7 of the Security Risk Assessment (SRA) Tool. To help you make the most of …DATABREACHES.NET
13 SepSix in 10 Cyberattacks in Colombia Target HospitalsJoseph Freixes reports: Six in 10 cyberattacks recorded in Colombia target health sector institutions, a figure that highlights the growing exposure of hospitals and clinics to digital threats. The figure, included in a Biofile report based on a measurement analyzed from IBM’s X-…DATABREACHES.NET
📢 SECURITY ADVISORIES 1[−]
13 SepSpace's cybersecurity policy problem.As space becomes increasingly connected and autonomous, effective cybersecurity policy is struggling to keep pace. Host Maria Varmazis and Dr. Mac McGuire sit down to discuss the limitations of current approaches for managing space cyber risks and what the industry is lackin…THECYBERWIRE.COM
🔥 INCIDENT REPORTING 1[−]
13 SepConti Hacker Who Built Malware and Attacked Victims Gets Four-Year SentenceUkrainian lawyer and Conti malware developer Oleksii Lytvynenko was sentenced to four years in U.S. prison for ransomware attacks. Oleksii Oleksiyovych Lytvynenko had, by most accounts, a fairly ordinary legal career in Ukraine before he switched to writing malware. A US federal …SECURITYAFFAIRS.COM
🕵️ THREAT INTELLIGENCE 2[−]
13 SepAnthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch UpDario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the entire internet. The post Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up appeared first on SecurityWeek .SECURITYWEEK.COM
13 SepSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter REVSTEALER ramps up Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode GuardBreaker: Derailin…SECURITYAFFAIRS.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
13 SepSecurity Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITIONA new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. The AI Supply Chain Has a Securit…SECURITYAFFAIRS.COM
📰 CYBERSECURITY BRIEFINGS 1[−]
13 SepSpace cybersecurity needs new rules.This week on T-Minus: Space-Cyber Briefing: we dive deeper into current cybersecurity practices in space and how these policies are rapidly becoming obsolete as spacecraft and technologies become interconnected..THECYBERWIRE.COM
📡 INFOSEC NEWS 1[−]
13 SepThorough reorganization at NSA will create five 'mission centers,' including cyber and AIThe largest electronic spy agency in the world is reorganizing. And fast.THERECORD.MEDIA