September 2026 Microsoft Patch Tuesday
104Critical 860Important 0Moderate 0Low Microsoft addresses 964 CVEs, smashing July’s release as the largest Patch Tuesday release. This month’s updates include patches for two zero-days…
Month: September 2026
Hackers Turn More Than 3,500 Redis Servers Into Cryptocurrency Miners
A large cryptomining operation has compromised 3,562 Redis servers and turned their processing power into a source of Monero revenue. The campaign did not rely…
Infostealers Target Claude, Cursor, Codex and Other AI Agents to Steal Credentials and Sensitive Data
Information-stealing malware is expanding its collection logic to target locally stored data from AI coding agents, including Claude, Cursor, Codex, Cline, Continue, and OpenCode. The…
AI-Infra-Guard: Open-source security scanner for AI systems
Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them…
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been…
UK government proposes AI first responders for cyber attacks
The UK government plans to use money set aside in the Defence Investment Plan to develop its own agentic artificial intelligence (AI) incident response capabilities…
Main Roads WA brings real-time visibility to traffic operations
Key points Main Roads Western Australia’s Real Time Operating Platform (RTOP) unifies data from around 30 separate systems into a single real-time view of the…
The Hidden Instructions That Can Hijack AI Agents
They cannot be seen, can be tailored to different purposes and once adopted they operate at lightning speed. Hidden AI prompt injections are synonymous with…
IT Help Desk Impersonation Lets Hackers Bypass MFA
IT Help Desk Impersonation Lets Hackers Bypass MFA Pierluigi Paganini September 08, 2026 Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365…
Feds accuse China of ‘systematic’ distillation of U.S. AI models
The U.S. government is accusing Chinese AI companies of engaging in a deliberate and “systematic” effort to illegally distill U.S. frontier AI models and their…
AI data exposure ranks second among AI security incidents in Australia and New Zealand
AI systems revealing sensitive information to unauthorised users has become the second most common type of AI-related security incident inside organisations in Australia and New…
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
Tyler Reguly, Fortra’s associate director of security R&D, pointed out that as long as Microsoft is playing catch-up on patching vulnerabilities, numbers have lost all…