The Edge of the Cyber World See the latest
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026. “The technique’s…
The FBI confirmed on September 2, 2026, that it is investigating a report that digital scans of more than 153 million driver’s licenses from the United States and Canada surfaced for sale on a dark web marketplace. The disclosure, first reported by security journalist Brian Krebs of KrebsOnSecurity and picked up by Reuters, TechCrunch, and…
Dropbox confirmed on September 1, 2026 that hackers compromised roughly 5,000 user accounts in an incident that ran through most of August, using a flaw in a little-known identity partnership with Lenovo rather than breaking into Dropbox’s own servers. The disclosure, first reported by Bloomberg and syndicated by Reuters, TradingView, and Security Magazine, lands at…
Google keeps cranking out Flash models: the company on Wednesday announced two versions of a new 3.8 Flash. The variants include a standard Flash, a “workhorse” model for agentic tasks, software development, and multi-step reasoning, and Flash Cyber optimized for vulnerability detection and mitigation.Google CEO Sundar Pichai said in an X post that 3.8 Flash delivers…
Criminals behind the Manchester Airports Group cyberattack have posted the personal data of nearly nine million people online, offering the full dataset for free to other criminals and scammers. The move, confirmed by the BBC on September 2, 2026, marks the moment a five-day-old ransom standoff turned into a live, ongoing exposure event for millions…
Former cybercriminal Brett Johnson provides a look inside the mind of a threat actor and discusses where AI provides the most value for attackers.
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548 SonicWall SMA1000…
Infostealers replayed stolen Claude session cookies into paid accounts without ever touching the login page two-factor authentication guards.The accounts Anthropic flagged were card-billed, self-serve accounts, which is the population no corporate identity provider governs, and no admin console can sign out. Session-cookie replay bypasses SSO as thoroughly as it bypasses 2FA. What SSO provides here…
OpenAI and Anthropic each drew a new line around their most powerful artificial intelligence systems this week, and for the first time both companies are pointing to the same reason: the models have gotten too good at hacking. On September 1, 2026, OpenAI said its upcoming Astra model is the first system to cross the…
Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, timely, accurate, and audience-appropriate communications during IT and operational technology (OT) outages. Whether caused by cyber threat actors, human error, equipment failure, or natural hazards, service outages can create disruption and societal panic even…
