Cybersecurity News | Daily Recap [08 Sep 2026]

Cybersecurity News | Daily Recap [08 Sep 2026]

Daily Recap, Authorities dismantled a crypto scam spree linked to a $240 million Bitcoin theft after suspects spent the stolen funds, while MikroTik patched critical RouterOS flaws used for unauthenticated device hijacking. The week also saw major breach disclosures (including Mathspace, a Vietnam-linked API leak of ~220 million traveler records, and a Berlin city-agency credential leak), plus ongoing identity and backdoor activity such as help-desk social-engineering targeting Microsoft 365 and the StyleSmuggler zero-day dropping a Linux backdoor.
#Bitcoin #RouterOS #MikroTik #Mathspace #Microsoft365 #StyleSmuggler #Linux #BigBear #MFA #Chrome #Edge #PEEP #Chrome #Edge #Berlin #Vietnam #API #Microsoft

Crypto Crime

  • Authorities dismantled a scam spree tied to a $240 million Bitcoin theft after suspects flaunted the stolen funds. – Crypto Theft

Router Exploits

  • MikroTik fixed critical RouterOS flaws that were being chained for unauthenticated device hijacking. – Router Fix, Router Hijack
  • A broader weekly roundup highlighted a Chrome 0-day, router hijacks, and a coder supply-chain attack among the week’s top threats. – Weekly Recap

Data Breaches

  • Mathspace disclosed a breach exposing data on over 1 million people, with the incident also reported as affecting more than 1 million users. – Mathspace Breach, Mathspace Leak
  • A Vietnam-linked API leak exposed about 220 million traveler records, underscoring the scale of compromised transport data. – Travel Leak
  • Berlin is investigating a new data leak after hackers published stolen login credentials from city agencies. – Berlin Breach

Identity Abuse

  • Attackers used fake IT help-desk calls to steal Microsoft 365 data and extort executives in a targeted social-engineering campaign. – Help-Desk Scam
  • BigBear said its phishing service bypassed MFA at 258 organizations, showing how phishing kits continue to defeat account protections. – BigBear Phish

Malware & Backdoors

  • Magento StyleSmuggler zero-day exploitation is being used to deploy a Linux backdoor on compromised systems. – StyleSmuggler
  • PEEP turns Chrome and Edge into post-compromise backdoors for host command execution. – PEEP Backdoor
  • OpenAI Agents were reported hijacking another victim website in a post-compromise abuse case. – Agent Hijack

AI & Security Tools

  • Microsoft unveiled Project Zenith, bringing large AI models directly onto developer PCs in Windows 11. – Project Zenith
  • Doppler showcased secrets management for humans, pipelines, and AI agents to reduce credential exposure. – Doppler Secrets

Ransomware Trends

  • Ransomware negotiations have matured into a business process, reflecting how extortion playbooks are becoming more structured and professionalized. – Ransomware Talks

Cybersecurity News | Daily Recap – hendryadrian.com