The Edge of the Cyber World See the latest
Dropbox confirmed on September 1, 2026 that hackers compromised roughly 5,000 user accounts in an incident that ran through most of August, using a flaw in a little-known identity partnership with Lenovo rather than breaking into Dropbox’s own servers. The disclosure, first reported by Bloomberg and syndicated by Reuters, TradingView, and Security Magazine, lands at…
A single crafted GraphQL query is now enough to wipe a public GitLab repository off the internet, no password required. GitLab disclosed CVE-2026-19478 on August 17, 2026, rating it 9.4 out of 10 on the CVSS scale, and confirmed that unauthenticated attackers could delete or rewrite public projects hosted on self-managed GitLab Community Edition and…
Google keeps cranking out Flash models: the company on Wednesday announced two versions of a new 3.8 Flash. The variants include a standard Flash, a “workhorse” model for agentic tasks, software development, and multi-step reasoning, and Flash Cyber optimized for vulnerability detection and mitigation.Google CEO Sundar Pichai said in an X post that 3.8 Flash delivers…
Researcher tracking 764 said the first-of-its-kind case has a wider impact that will cause ripples across the landscape of violent extremist crime. The post Jail time for Maine child in 764 marks turning point in federal law enforcement appeared first on CyberScoop.
It’s the first Pegasus infection of 2026 that Citizen Lab is forensically confirming, and the SHARE Foundation said it’s the biggest wave of spyware surveillance in Serbia yet. The post Pegasus, NoviSpy variant spyware found on devices of Serbian activists appeared first on CyberScoop.
Criminals behind the Manchester Airports Group cyberattack have posted the personal data of nearly nine million people online, offering the full dataset for free to other criminals and scammers. The move, confirmed by the BBC on September 2, 2026, marks the moment a five-day-old ransom standoff turned into a live, ongoing exposure event for millions…
New research suggests the coming Vulnpocalypse may not be so overwhelming for enterprise security teams — if they have the right strategies.
Security teams shopping for a new detection platform in September 2026 keep landing on the same three names: CrowdStrike Falcon, Palo Alto Networks Cortex XDR, and Microsoft Defender XDR. All three now market themselves as full extended detection and response (XDR) suites rather than plain endpoint tools, and all three claim to replace pieces of…
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor’s edge devices.
Ask a SOC analyst in September 2026 what changed their job most this year and most won’t say a new EDR agent or a fresh threat feed. They’ll point to the chat window sitting inside their console, the one that reads an alert queue and writes a KQL query, drafts an incident summary, or flags…
