Cybersecurity briefing, 2026-09-04

Your EDR is supposed to clean up malicious files.

• UTA0565 broadens Chrome zero-day delivery
• Microsoft sees Unicode smuggling in phishing campaign
• Wordfence sees mass WordPress shell drops
• Citrix NetScaler Gateway flaw hits KEV list
• Thomson Reuters breach exposed court records hub
• Sality’s own trust model enabled the takedown
• CrowdStrike Falcon mitigation leaves macro cleanup gap
• Breeze Comet pushes fraud through payment rails
• Unit 42 finds AI-run exfiltration nodes in Latin America
• Trojanized HAProxy turns a load balancer into spyware
• Plex patch leaves mixed estates exposed
• CISA and G7 push PQC into procurement
• ArubaOS-CX advisory puts switch management at risk
• Cleo Harmony PoC shrinks the fix window
• PostgreSQL replication privilege opens server control
• IDScan cloud breach exposes centralized ID scans
• Pyramid NetStaX flaw hides a crash behind valid traffic

Recent editions

• Thursday, September 3, 2026: Citrix NetScaler Gateway flaw hits KEV list · 18 stories
• Wednesday, September 2, 2026: Virtualizor update hijack puts VPS hosts at risk · 17 stories
• Tuesday, September 1, 2026: Malicious Composer themes turned sites into iPhone spyware · 18 stories
• Monday, August 31, 2026: McKesson breach shifts into public leak pressure · 18 stories
• Sunday, August 30, 2026: FulcrumSec turns MAG breach into leak threat · 5 stories
• Saturday, August 29, 2026: GTIG sees AI speed up real attacks · 14 stories
• Friday, August 28, 2026: PaperCut’s exploit chain splits into two CVEs · 18 stories