Latest security news

Wed, 9 Sept 2026

1. 10:11
   Over 36,000 exposed Plex servers vulnerable to recent flaws

   Over 36,000 Plex Media servers exposed online remain unpatched against multiple security vulnerabilities and are vulnerable to attacks.

   BleepingComputer
2. 10:01
   Microsoft fixes record 964 flaws, including 2 exploited zero-days

   Microsoft’s September 2026 Patch Tuesday fixes a record 964 vulnerabilities, including two actively exploited zero-days.

   Malwarebytes Labs·Microsoft
3. 10:00
   Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure

   An investigation into how cybercriminals used YouTube gaming lures and SEO poisoning to deliver multi-payload malware to enterprise networks.

   Unit 42
4. 09:40
   Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

   The update contained 119 critical flaws and two zero days, with security teams needing to prioritize updates

   Infosecurity Magazine·Microsoft
5. 09:32
   U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok

   U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting "systematic extraction" of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring at an industrial-scale and one that forms the "core" of their AI development strategy, according to

   The Hacker News
6. 09:11
   Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

   Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation in the wild. The medium-severity vulnerability, assigned the CVE identifier CVE-2026-87491 (CVSS score: N/A), has been described as an out-of-bounds bug in V8, Chrome's JavaScript and WebAssembly engine. "Out-of-bounds write in V8 in Google Chrome prior to

   The Hacker News·Google, Chrome
7. 09:00
   Safe word: What is it and why do you need one?

   AI scams are now hyper-realistic. But there’s one simple way to see through them.

   WeLiveSecurity
8. 08:44
   Man gets 15 years for extorting women with AI-generated porn videos

   An Ohio man was sentenced to 15 years in prison for multiple cybercrimes, including sextortion and cyberstalking of numerous victims using AI-generated sexually explicit content.

   BleepingComputer
9. 08:42
   CRPx0 ransomware: what you need to know

   CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business. Read more in my article on the Fortra blog.

   Graham Cluley
10. 08:28
    The push to stop algorithms controlling social media feeds has begun

    Australia is proposing a law that gives people a choice over what fills their feeds. It may not be long before other countries demand the same.

    Malwarebytes Labs