Vulnerability ManagementConnectWise ScreenConnect bug exploited in the wild, CISA saysSteve ZurierSeptember 16, 2026Experts warn teams to patch right away to prevent a potential ransomware incident.
Threat IntelligenceHBO Max Reddit account compromised, used in ‘PasteSwitch’ ClickFix attacksLaura FrenchSeptember 16, 2026Malicious Reddit advertisements led to macOS and Windows infostealer downloads.
RansomwarePatched VMware vCenter bug targeted in ransomware campaignsSteve ZurierSeptember 15, 2026Ransomware groups exploit a critical VMware vCenter bug just seven weeks after patch released.
PhishingMicrosoft warns of cloud storage attacks, financial fraud scams targeting customersLaura FrenchSeptember 15, 2026Both campaigns use social engineering to access accounts or secure fraudulent transactions.
AI/MLTrump pushes back on Anthropic CEO’s call for an AI slowdownSteve ZurierSeptember 14, 2026Trump rejects calls to slow frontier AI as security experts debate the risks and need for guardrails.
Vulnerability ManagementMax severity GitLab path traversal flaw under active reconnaissanceLaura FrenchSeptember 11, 2026The flaw could enable sensitive files to be read with just an HTTP request.
Vulnerability ManagementCheck Point patches two critical VPN gateway bugsSteve ZurierSeptember 11, 2026Check Point fixed two 9.8-severity VPN flaws before any known exploitation in the wild.
AI/MLAnthropic finds 4th real-world attack by Claude agent, details models’ ‘biased reasoning’Laura FrenchSeptember 11, 2026Mythos 5 was highlighted as being especially prone to believing the real world was a simulation.
RansomwareCISA: WatchGuard Firebox bug exploited in ransomware campaignsSteve ZurierSeptember 10, 2026Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.
AI/MLPaperCut MF/NG flaws attacked with hundreds of AI agentsLaura FrenchSeptember 10, 2026The AI-assisted campaign enabled attackers to gain domain admin in as little as 5 minutes.
Hastily deployed agentic security is not the answer to enterprise cyber threatsLee Rossey September 16, 2026
