Massive Patch Tuesday Update Fixes Critical Microsoft and SAP Vulnerabilities
PremiumSANS NewsBites summarizes Patch Tuesday fixes including hundreds of Microsoft flaws and an SAP kernel patch.
Monday, September 14
AI-Driven Phishing Campaigns Surge with Unprecedented Volume and Precision
PremiumAdversaries leveraged AI to generate one million personalized fraud emails over three days, increasing scale and credibility.
Sophisticated Phishing Campaigns Exploit Microsoft 365 Vulnerabilities
PremiumPasskey-themed phishing campaigns have been used to hijack Microsoft cloud accounts and exfiltrate corporate data.
Friday, September 11
Cybercriminals Exploit Infostealer Logs to Bypass MFA with AI Tokens
PremiumInfostealer logs reveal replayable AI tokens and API keys that attackers reuse to access model providers, bypassing MFA protections.
New 'ShieldCrash' Exploit Challenges Windows Defender Security
PremiumResearcher released a zero-day 'ShieldCrash' exploit targeting Windows Defender components, enabling local bypasses and exploits.
Phishing Campaign Exploits Passkey Themes to Breach Microsoft 365 Accounts
PremiumAttackers use passkey-themed social engineering to hijack Microsoft 365 accounts, bypassing MFA and exfiltrating cloud data.
BlueMoon Exploit Kit Targets Chrome and Windows Vulnerabilities
PremiumBlueMoon exploit kit used by multiple espionage groups chains Chrome and Windows zero-days to gain remote code execution.
Microsoft Sets New Record with Patch Tuesday, Fixes Nearly 1000 Vulnerabilities
PremiumMicrosoft released an unprecedented Patch Tuesday fixing 974 CVEs, including two actively exploited Windows zero-days; prioritize critical updates.
Wednesday, September 9
Urgent Alert: Critical Chromium V8 Vulnerability Actively Exploited
CISA warns CVE-2026-85046 is actively exploited in the wild against Chromium-based browsers; update browsers and apply mitigations.
Microsoft's September 2026 Patch Tuesday: A Record-Breaking Security Update
Microsoft released its largest Patch Tuesday, fixing roughly 973–974 vulnerabilities including two actively exploited zero-days; prioritize exposure-based patching.
Monday, September 7
REVSTEALER Modules Disrupt Windows Security to Exploit Cryptocurrency Mining
PremiumREVSTEALER-linked modules disable Windows Update and Defender then run a cryptocurrency miner, persisting post-stealer.
CrowdStrike Zero-Day Exploit Released by Nightmare Eclipse
PremiumExtortion group Nightmare Eclipse alleges CrowdStrike zero-day release and leaks Manchester Airports Group data.
Friday, September 4
Cybercriminals Exploit Brazilian Government Servers to Push Gambling Sites
PremiumGambling Goblin installed malicious Apache modules on Brazilian government and education servers to redirect visitors to betting pages.
FalconFlank Exploit Unveils Privilege Escalation Vulnerability in CrowdStrike Falcon
PremiumResearcher released a FalconFlank PoC showing privilege escalation in CrowdStrike Falcon sensor, creating urgent patch/practice risk.
Wednesday, September 2
Hackers Exploit Microsoft Teams Calls in Advanced Social Engineering Attack
Spring Ring campaign abuses Microsoft Teams help-desk calls to socially engineer remote execution and lateral network compromise.
Iranian Cyber Espionage Group Targets Tech Specialists with New Malware
Kaspersky links NodeRabbit malware to Iranian espionage campaigns targeting aviation and fintech developers in multiple countries.
Urgent Patch Required: Over 21,000 Exchange Servers at Risk
Nearly 22,000 Microsoft Exchange servers remain unpatched for CVE-2026-62911, enabling mailbox hijacking at scale.
Monday, August 31
Tech Titans Urge Action Against Surging AI Cyber Threats
PremiumOver 100 tech and cybersecurity firms warn AI-enabled cyberattacks will surge without collective defensive measures.
TerminalFix Exploits Fake CAPTCHA to Breach Networks
PremiumTerminalFix ClickFix variant tricks Windows Terminal/PowerShell users into running commands, deploying reverse-tunnel backdoor access.
Friday, August 28
Get these articles delivered to your inbox.
Subscribe free