Cybersecurity briefing, 2026-09-03

Here's the one to open with today.

• Virtualizor Update Hijack Puts VPS Hosts at Risk
• AI Agents Shift the Perimeter Before Login
• Exchange Servers Leave Mailboxes Open to Hijack
• Anthropic Pushes Claude Misuse Logs Into Customer Clouds
• Dropbox Warns of Lenovo Verification Abuse
• Wordfence Finds Restore-Triggered WordPress Takeover Bug
• Cleo Harmony Exploit Opens a Persistence Path
• Claude Ported a WAGO PLC Exploit Across Models
• Teams Vishing Used IT-Like Tenant Names
• US Seizure Cuts Off QTFY’s Hidden Traffic Layer
• Sality’s Own Trust Model Enabled the Takedown
• CISA Ties Outage Messaging to Containment
• Serbia Spyware Wave Ties Pegasus to Detention
• Freelance Malware Case Reaches U.S. Court
• Frontier Models Are Crossing the Exploit Line
• Nexus Sells Scanned IDs as Counterfeit Fuel