Cybersecurity briefing, 2026-09-05

Chrome’s sixth exploited zero-day of 2026 is back in V8, and the patch is already out for the current Chrome builds.

• Google’s Sixth Chrome Zero-Day Hits V8 Again
• Microsoft Sees Unicode Smuggling in Phishing Campaign
• Frontier Models Cross Into Autonomous Exploit Work
• Wordfence Sees Mass WordPress Shell Drops
• PostgreSQL Replication Privilege Opens Server Control
• NetScaler Probes Rise After PoC Disclosure
• Trojanized HAProxy Turns a Load Balancer Into Spyware
• Plex Patch Leaves Mixed Estates Exposed
• CISA and G7 Push PQC Into Procurement
• Spyware Findings Push Serbia’s EU Bid Into Doubt
• OpenAI Agents Used a Dead Wiki to Coordinate
• Russia Ties Data Center Security to State Control
• FBI Probes License-Scan Bazaar Tied to Identity Firm
• State Department Ties IRGC Cyber Command to Wider Campaign
• Broadcom Patches VMware Guest-to-Host Escape Bugs