Cybersecurity News | Daily Recap [04 Sep 2026]

hendryadrian.com

hendryadrian.com

Zero-Days & Vulnerabilities

• Google patched the 6th Chrome zero-day of 2026 after confirming active exploitation, while new attacks also target SonicWall SMA1000, HPE ArubaOS-CX, and Cisco Nexus 9000 flaws. – Chrome Zero-Day, Chrome Patch, SonicWall Exploit, ArubaOS-CX RCE, Cisco Nexus 9000
• Elementor Pro and Super Forms flaws are being heavily exploited, with more than 440,000 attack attempts targeting vulnerable WordPress sites. – WordPress Exploits, Elementor Pro
• Plex urged immediate updates after patching multiple undisclosed security flaws, reinforcing a busy week of critical product fixes. – Plex Patch

Phishing, Scams & Identity Abuse

• New research found 39 ways to compromise passkey authentication, while Microsoft Teams is adding protections to make QR code phishing harder. – Passkey Abuse, Teams Anti-Phishing
• Scammers appear to time SMS attacks for maximum impact, and a broader roundup highlighted fresh CEO phishing kits, OAuth traps, and 5K Dropbox account hacks. – Scam Texting, ThreatsDay Roundup

Malware, Spyware & Supply Chain

• BraZetsu malware is turning compromised Windows hosts into criminal marketplace inventory, showing how infected systems are monetized after intrusion. – BraZetsu Malware
• Serbian opposition and activist figures were targeted with spyware, while Coder‘s registry infrastructure was compromised to distribute malicious modules. – Serbia Spyware, Coder Registry

Data Breaches & Privacy

• Thomson Reuters disclosed a breach exposing U.S. and Canadian court records, while a French hospital was fined €500,000 after a breach affected 727,000 people. – Reuters Breach, Reuters Details, French Hospital
• Manchester Airports Group data on 8.8 million people was leaked after a ransom refusal, underscoring ongoing extortion-driven breach risks. – MAG Leak

AI, Encryption & Security Strategy

• OpenAI pledged $1 billion to support Daybreak defenders, G7 leaders pressed industry to accelerate post-quantum encryption planning, and a new guide outlined how to inventory AI agent credentials. – OpenAI Funding, G7 Quantum, AI Credentials
• Microsoft reported some users could not open the Teams desktop client, causing service disruption for affected customers. – Teams Issue

Cybersecurity News | Daily Recap – hendryadrian.com