GreyNoise says an attacker built and tested exploits for PaperCut NG/MF vulnerabilities in a private lab, then used AI agents to automate mass compromise efforts against organizations worldwide. The campaign led to at least 440 compromised PaperCut instances across 395 organizations in 48 countries, with education as the most affected sector. #PaperCut #GreyNoise #CVE-2026-81578 #CVE-2026-82078

Anthropic disrupted a cyberespionage campaign that matched the Russian state-nexus group Midnight Blizzard, which used Claude to iteratively modify malware, evade detection, and target more than 20 organizations across government, defense, intelligence, and industry sectors. The report also highlights attacks on AI infrastructure and credentials, including fraudulent Claude reselling, prompt injection…

Surfshark disclosed that a misconfigured internal test server was accessed by a threat actor, exposing limited engineering data and some build-related credentials, but no user data or production systems were affected. The company said it contained the incident, rotated credentials, added security measures, and will conduct an independent security audit. #Surfshark…

Kiteworks has acquired Bonfy.AI to strengthen real-time policy enforcement for sensitive data shared by people and AI agents across enterprise systems. The deal extends Kiteworks’ unified data control plane with inline classification and contextual security decisions for email, file sharing, SaaS apps, AI assistants, and autonomous agents. #Kiteworks #BonfyAI…

Trezor said phishing emails tied to a breach at Brevo targeted 347,000 email addresses and tricked 2,500 users into clicking a malicious link that tried to steal wallet backup information. The company also linked the campaign to earlier third-party breaches, including ShipMonk and a previous support portal intrusion, highlighting repeated exposure of customer data. #Trezor #Brevo #ShipMonk #ShinyHunters

Microsoft fixed a bug that caused Microsoft Teams and the new Outlook for Windows to fail to launch or close unexpectedly on ARM-based Windows 11 devices after August 2026 updates. The issue was resolved in September 2026 Patch Tuesday updates, with Microsoft advising users to install KB5124012 or later and apply Microsoft Store updates if needed. #MicrosoftTeams #Outlook #SurfacePro11 #SurfaceLaptop7 #KB5124012

Pistachio’s Phishing Behaviour Report 2026 finds that phishing resilience should be measured by clicks, credential submission, and reporting together, not by click rates alone. The report also shows that performance can change over time and vary widely by department, with construction, health, logistics, and IT all showing different risk patterns. #Pistachio #PhishingBehaviourReport2026 #Construction #FacilityManagement #Health #Logistics #IT #TechDevelopment

Kerri Shafer-Page of Arctic Wolf outlines a ransomware decision tree that organizations should prepare in advance, focusing on containment, extortion negotiations, and the business impact of paying a demand. She also stresses involving law enforcement, legal counsel, and communications teams early so decisions are made before a crisis hits. #ArcticWolf

Researchers from Michigan State University and partner schools showed that lost-device reporting systems across carriers can be abused to block phones and other connected devices that were never actually stolen. They found weaknesses in carrier identity checks, IMEI disclosure on certain chipsets, and cross-carrier block-list sharing, affecting devices such as Samsung Galaxy Z Fold 7 phones and home alarm gateways. #SamsungGalaxyZFold7 #GSMA #MichiganStateUniversity