IT Security & Day-to-Day Patch Intelligence Newsroom

Grindr Settles UK Data Privacy Claims for £26m

Moderate Infosecurity Magazine

2026-09-08 Infosecurity Magazine

Grindr Settles UK Data Privacy Claims for £26m

Grindr settled UK claims over alleged unlawful processing of sensitive user data

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

AI Coding Tools Now a Prime Target for Threat Actors, Google Warns

Moderate Infosecurity Magazine

2026-09-08 Infosecurity Magazine

AI Coding Tools Now a Prime Target for Threat Actors, Google Warns

Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

THost9 Android RAT Pairs Packed Loader With ADB Worm

Important Infosecurity Magazine

2026-09-08 Infosecurity Magazine

THost9 Android RAT Pairs Packed Loader With ADB Worm

THost9 hides its payload and uses ADB to spread across exposed Android devices and containers

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials

Moderate Infosecurity Magazine

2026-09-08 Infosecurity Magazine

BigBear 2 PhaaS Campaign Steals 5000+ Microsoft Credentials

CloudSEK has uncovered BigBear 2.0, a new phishing-as-a-service operation targeting Microsoft 365

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Trezor Supply Chain Breach Now Impacts 81,000 Customers

Critical Infosecurity Magazine

2026-09-08 Infosecurity Magazine

Trezor Supply Chain Breach Now Impacts 81,000 Customers

Crypto wallet-maker Trezor says a data breach at supplier ShipMonk is far worse than originally thought

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

NCSC Warns Shadow AI Creates New Security Risks

Moderate Infosecurity Magazine

2026-09-07 Infosecurity Magazine

NCSC Warns Shadow AI Creates New Security Risks

NCSC warns unapproved AI tools can expose corporate data and create new security risks

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

Critical CVE-2026-86218 Infosecurity Magazine

2026-09-07 Infosecurity Magazine

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

The vulnerability, CVE-2026-86218, was allocated a maximum-severity rating by the software provider itself

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused

Moderate Infosecurity Magazine

2026-09-07 Infosecurity Magazine

Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused

The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency plans

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters

Moderate Infosecurity Magazine

2026-09-07 Infosecurity Magazine

North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters

Sekoia and Kudelski Security have observed that North Korea's Lazarus umbrella is split into six distinct clusters, focused on espionage, financial theft and sanctions evasion

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Multiple Class Action Lawsuits Filed Against IDScan

Moderate Infosecurity Magazine

2026-09-07 Infosecurity Magazine

Multiple Class Action Lawsuits Filed Against IDScan

Several victims of a recent breach of driver’s license information have sued the company they believe responsible

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

Critical Infosecurity Magazine

2026-09-07 Infosecurity Magazine

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

A security researcher has posted a zero-day exploit in CrowdStrike which could allow hackers to escalate privileges

Fix: Review advisory findings, isolate suspect endpoints, and verify threat signatures.