Cybersecurity briefing, 2026-09-01

The newest malware isn't trying to hide from your scanner.

• PaperCut Zero-Days Shift From Access to Theft
• Langflow Probes Rose as Rails Leaked Secrets
• Malicious Composer themes turned sites into iPhone spyware
• Claude Sessions Stolen to Burn Paid Usage
• Fire Ant Pushes Deeper Into Trust Infrastructure
• McKesson Breach Shifts Into Public Leak Pressure
• US Seizure Cuts Off QTFY’s Hidden Traffic Layer
• ServiceNow Patches Four Flaws in AI Platform
• TerminalFix Turns a Fake CAPTCHA Into Network Access
• Hugging Face Incident Shows Agents as Privileged Identities
• OpenAI-Led Coalition Pushes AI Defense Agenda
• Tenable Fixed Four Security Center Flaws
• Coding Agents Can Turn Model Endpoints Into Control Planes
• Rhysida Moves Berlin Theft Into Auction Mode
• DPRK Job Fraud Spreads Into Healthcare Roles
• Guildma Hides Payloads Behind Brazil Checks