The Edge of the Cyber World See the latest
Criminals behind the Manchester Airports Group cyberattack have posted the personal data of nearly nine million people online, offering the full dataset for free to other criminals and scammers. The move, confirmed by the BBC on September 2, 2026, marks the moment a five-day-old ransom standoff turned into a live, ongoing exposure event for millions…
Former cybercriminal Brett Johnson provides a look inside the mind of a threat actor and discusses where AI provides the most value for attackers.
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548 SonicWall SMA1000…
Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve accounts, which is the population no corporate identity provider governs, and no admin console can sign out. Session-cookie replay bypasses SSO as thoroughly as it bypasses 2FA. What SSO provides here…
OpenAI and Anthropic each drew a new line around their most powerful artificial intelligence systems this week, and for the first time both companies are pointing to the same reason: the models have gotten too good at hacking. On September 1, 2026, OpenAI said its upcoming Astra model is the first system to cross the…
Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, timely, accurate, and audience-appropriate communications during IT and operational technology (OT) outages. Whether caused by cyber threat actors, human error, equipment failure, or natural hazards, service outages can create disruption and societal panic even…
Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates. The post Malicious Virtualizor Update Served via BGP Hijacking appeared first on SecurityWeek.
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as
OpenAI said this week that its next model, code-named Astra, has crossed the company’s own “Critical” cybersecurity threshold, the highest tier in its internal risk-classification system. TechCrunch reported on September 1, 2026 that internal testing showed Astra could find previously unknown security flaws and exploit them without a human walking it through each step. Fortune’s…
Aesto Health, a Birmingham, Alabama-based healthcare technology vendor, disclosed on September 1, 2026 that a security incident tied to its Amazon Web Services (AWS) infrastructure exposed personal and health data belonging to 9,540,683 patients, according to reporting from BleepingComputer, SecurityWeek, and HIPAA Journal. The disclosure makes Aesto Health’s breach the second-largest confirmed U.S. healthcare data…
