Cybersecurity briefing, 2026-09-14

Attackers have found a clever hiding place: your own AI's safety filter.

• UNC3569 Used Sogou Links for User-Context Access
• Microsoft Links Passkey Lures to O365 Intrusions
• Microsoft Flags Million-Message BEC Fraud Run
• Check Point VPN Flaws Move Into Exploitation Window
• CISA Warns Its Own Capacity May Fail First
• JeetBot Token Theft Splits Firefox From Chrome
• Revolut Data Leak Came Through Trusted Email
• Midnight Blizzard Used Claude to Chase Detection
• Brevo SSO Flaw Pushed Phishing Across Customers
• GemStuffer Turned RubyGems Publishing into Automation
• Telus Account Breach Enabled Service Hijacks
• Rclone PoCs Put Unpatched S3 Services at Risk
• Claude Helped Debug a Guided Rocket Loop

Recent editions

• Sunday, September 13, 2026: Check Point VPN Flaws Move Into Exploitation Window · 4 stories
• Saturday, September 12, 2026: UNC3569 Used Sogou Links for User-Context Access · 13 stories
• Friday, September 11, 2026: Check Point VPN Flaws Move Into Exploitation Window · 14 stories
• Thursday, September 10, 2026: BlueMoon Spreads Beyond Violet Typhoon · 16 stories
• Wednesday, September 9, 2026: UAC-0099 Tries to Blind AI Malware Review · 15 stories
• Tuesday, September 8, 2026: BlueMoon Spread Beyond APT31 in Days · 15 stories
• Monday, September 7, 2026: Artifactory Chaining Gave Attackers Admin Backdoors · 14 stories