Cybersecurity briefing, 2026-09-03

Here's the one to open with today.

• Citrix NetScaler Gateway flaw hits KEV list
• Freelance malware case reaches U.S. court
• Wordfence sees mass WordPress shell drops
• Booz Allen puts AI attack power on identity
• Breeze Comet pushes fraud through payment rails
• Anthropic pushes Claude misuse logs into customer clouds
• Exchange servers leave mailboxes open to hijack
• Plex patch leaves mixed estates exposed
• Dropbox warns of Lenovo verification abuse
• Claude ported a WAGO PLC exploit across models
• CrowdStrike Falcon mitigation leaves macro cleanup gap
• Sality’s own trust model enabled the takedown
• Virtualizor update hijack puts VPS hosts at risk
• CISA turns ScreenConnect flaw into live risk
• Cleo Harmony PoC shrinks the fix window
• Thomson Reuters breach exposed court records hub
• CISA and G7 push PQC into procurement
• CISA ties outage messaging to containment

Recent editions

• Wednesday, September 2, 2026: Virtualizor update hijack puts VPS hosts at risk · 17 stories
• Tuesday, September 1, 2026: Malicious Composer themes turned sites into iPhone spyware · 18 stories
• Monday, August 31, 2026: McKesson breach shifts into public leak pressure · 18 stories
• Sunday, August 30, 2026: FulcrumSec turns MAG breach into leak threat · 5 stories
• Saturday, August 29, 2026: GTIG sees AI speed up real attacks · 14 stories
• Friday, August 28, 2026: PaperCut’s exploit chain splits into two CVEs · 18 stories
• Thursday, August 27, 2026: TeamPCP arrests open a forensic phase · 17 stories