Cybersecurity briefing, 2026-09-08

N-able released Hotfix 4 for N-central after exploit attempts were observed on on-premises systems.

• Microsoft's 974-fix update includes two exploited Windows flaws
• UAC-0099 tries to blind AI malware review
• Artifactory chaining gave attackers admin backdoors
• F5 BIG-IP APM intrusions hide in PHP memory
• US agencies map industrial AI capability theft
• Liquid’s Elements bug paused L-BTC redemptions
• CISA turns ScreenConnect flaw into live risk
• BengalSEO turns Bing trust into malware delivery
• JSCeal replays Google sessions after malvertising
• FreeIPA patch leaves a directory backdoor question
• ShipMonk breach broke Trezor's deletion assumption
• ChatGPT’s shared trust layer leaks across accounts
• Telerik UI PoC exposes a narrow RCE path
• Sponsored search powered Filimonov’s bank fraud scheme
• Unbound patch shifts priority to DNS resolvers
• CIA Cyber work helped track Maduro

Recent editions

• Monday, September 7, 2026: N-central Hotfix 4 supersedes yesterday’s patch · 18 stories
• Sunday, September 6, 2026: TeamCity breach reached JetBrains Cadence backup · 6 stories
• Saturday, September 5, 2026: UTA0565 broadens Chrome zero-day delivery · 16 stories
• Friday, September 4, 2026: Microsoft sees Unicode smuggling in phishing campaign · 17 stories
• Thursday, September 3, 2026: Citrix NetScaler Gateway flaw hits KEV list · 18 stories
• Wednesday, September 2, 2026: Virtualizor update hijack puts VPS hosts at risk · 17 stories
• Tuesday, September 1, 2026: Malicious Composer themes turned sites into iPhone spyware · 18 stories