The Edge of the Cyber World See the latest
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026. Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider. “The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment
Three days after OpenAI shipped its most powerful model yet, the company’s own chief scientist told the public he isn’t sure anyone is ready for what comes next. GPT-6 Astra launched on September 3, 2026, and by September 6, Jakub Pachocki had published warnings that go well beyond the usual safety-page boilerplate. He wrote that…
Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diverse initial access methods, namely a Quick Assist tech-support scam, a phishing-delivered MSI installer, and a fake
SonicWall’s SMA1000 secure access gateways are under attack again. On September 1, 2026, the vendor disclosed two new vulnerabilities in its SMA 1000 Series, CVE-2026-83548 and CVE-2026-83549, and confirmed both were already being exploited in the wild before the patch shipped. It’s the second time in roughly seven weeks that attackers have found and weaponized…
PUBG: DED.NET is a 1996-set PvP FPS that introduces a multi-match career journey and roguelite progression to the PUBG universe.
France’s data protection authority has handed down a €500,000 ($580,000) fine against a private hospital in Saint-Étienne after a 2025 cyberattack exposed medical and personal data tied to more than 727,000 people. The CNIL announced the penalty against Hôpital Privé de la Loire on September 3, 2026, closing out a year-long investigation into how an…
JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. “Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence…
Plus: Tens of millions of US and Canadian drivers’ licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad data poses to troops, and more.
A settlement has resolved one of the largest healthcare data breach lawsuits still working through the U.S. court system. The HIPAA Journal reported on September 3, 2026 that Managed Care of North America, Inc. (MCNA) has agreed to a multi-million-dollar settlement fund closing out class action litigation tied to a 2023 ransomware attack that hit…
Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe. The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an authentication bypass and remote code execution chain – to conduct command execution and reconnaissance, as…
