Cybersecurity briefing, 2026-09-05

Chrome’s sixth exploited zero-day of 2026 is back in V8, and the patch is already out for the current Chrome builds.

• TeamCity breach reached JetBrains Cadence backup
• UTA0565 broadens Chrome zero-day delivery
• Microsoft sees Unicode smuggling in phishing campaign
• Spyware findings push Serbia’s EU bid into doubt
• Frontier models cross into autonomous exploit work
• Plex patch leaves mixed estates exposed
• Russia ties data Center security to state control
• IDScan cloud breach exposes centralized ID scans
• Citrix NetScaler Gateway flaw hits KEV list
• CrowdStrike Falcon mitigation leaves macro cleanup gap
• Trojanized HAProxy turns a load balancer into spyware
• Wordfence sees mass WordPress shell drops
• ShipMonk breach broke Trezor's deletion assumption
• VMware patches guest-to-host bugs as vCenter fires burn
• PostgreSQL replication privilege opens server control
• ArubaOS-CX advisory puts switch management at risk

Recent editions

• Friday, September 4, 2026: Microsoft sees Unicode smuggling in phishing campaign · 17 stories
• Thursday, September 3, 2026: Citrix NetScaler Gateway flaw hits KEV list · 18 stories
• Wednesday, September 2, 2026: Virtualizor update hijack puts VPS hosts at risk · 17 stories
• Tuesday, September 1, 2026: Malicious Composer themes turned sites into iPhone spyware · 18 stories
• Monday, August 31, 2026: McKesson breach shifts into public leak pressure · 18 stories
• Sunday, August 30, 2026: FulcrumSec turns MAG breach into leak threat · 5 stories
• Saturday, August 29, 2026: GTIG sees AI speed up real attacks · 14 stories