Cybersecurity briefing, 2026-09-12

A Sogou link flaw gave UNC3569 user-context access and loaded GRAYRABBIT on Windows hosts.

• UNC3569 Used Sogou Links for User-Context Access
• JeetBot Leaks Twitch Sessions Through Browser Stores
• Midnight Blizzard Used Claude to Chase Detection
• Check Point VPN Flaws Move Into Exploitation Window
• Brevo SSO Flaw Pushed Phishing Across Customers
• Microsoft Flags Million-Message BEC Fraud Run
• UAC-0099 Tries to Blind AI Malware Review
• EU CRA Starts the 24-Hour Reporting Clock
• GTIG Says AI Is Shrinking Intrusion Timelines
• Rclone PoCs Put Unpatched S3 Services at Risk
• RubyGems Abuse Became a Public Storage Locker
• PREY-0058 Moves From Vishing To Extortion