September 2026

Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests 2026-09-01 at 16:08 By The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote […]

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones 2026-09-01 at 14:48 By The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks […]

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 2026-09-01 at 12:05 By METR (short for Model Evaluation and Threat Research and pronounced “Meter”), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered “two notable security incidents” where […]

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis 2026-09-01 at 11:26 By Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that’s been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis. The idea, […]

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity 2026-09-01 at 10:22 By Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below – CVE-2026-0768 (CVSS score: 9.8) – A lack of proper validation of a […]