Cybersecurity briefing, 2026-09-04

Your EDR is supposed to clean up malicious files.

• Cisco Patches Root RCE Across Nexus and IOS XR
• Elementor Pro Exploitation Turns Plugins Into Shells
• AI Agents Shift the Perimeter Before Login
• Cleo Harmony PoC Shrinks the Fix Window
• Sality’s Own Trust Model Enabled the Takedown
• Freelance Malware Case Reaches U.S. Court
• CISA Ties Outage Messaging to Containment
• Breeze Comet Pushes Fraud Through Payment Rails
• FalconFlank Turns CrowdStrike Cleanup Into LPE
• Wordfence Finds Restore-Triggered WordPress Takeover Bug
• Microsoft Sees Unicode Smuggling in Phishing Campaign
• Thomson Reuters Breach Exposed Court Records Hub
• CISA and G7 Push PQC Into Procurement
• ArubaOS-CX Advisory Puts Switch Management at Risk
• Pyramid NetStaX Flaw Hides a Crash Behind Valid Traffic
• Pegasus Case Expands Into Serbia Election Surveillance
• Abliteration.ai Turns Guardrail Removal Into a Service