Breaking News – Cyber Threats – 2026-09-03 03:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-09-03 03:00 PDT

• Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs
  BleepingComputer • 2026-09-03 01:55 • www.bleepingcomputer.com
  Microsoft is working to fix a known issue that causes crashes and launch failures for Microsoft Teams and New Outlook users after installing updates released since the August 2026 Patch Tuesday. […]
  https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-outlook-fail-to-launch-on-arm-based-windows-pcs/
• Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone
  The Hacker News • 2026-09-03 01:43 • thehackernews.com
  The iPhone belonging to a member of Serbia’s student protest movement was infected with NSO Group’s Pegasus spyware, according to new findings from the Citizen Lab in collaboration with the SHARE Foundation.

  “Our analysis confirmed that an iMessage zero-click exploit was used to infect the device with NSO Group’s Pegasus spyware,” the Citizen Lab said. “We found high-confidence indicators of
  https://thehackernews.com/2026/09/pegasus-zero-click-spyware-exploit.html

• Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
  The Hacker News • 2026-09-02 23:26 • thehackernews.com
  The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.

  “FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in CrowdStrike Falcon Sensor,” the researcher said in a GitHub README file, adding
  https://thehackernews.com/2026/09/researcher-releases-falconflank-poc.html

• CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
  The Hacker News • 2026-09-02 22:19 • thehackernews.com
  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers’ crosshairs.

  The vulnerabilities are as follows –

  CVE-2026-83548 (CVSS score: 10.0) – A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated
  https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.