Breaking News – Cyber Threats – 2026-09-01 03:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-09-01 03:00 PDT

• Rewiring Democracy Series on The Renovator
  Schneier on Security • 2026-09-01 02:59 • www.schneier.com

  Nathan E. Sanders and I are writing a series of essays on real-world examples of democratic technologies for The Renovator. I haven’t been posting the full text on the blog because they’re a bit long, but here are links.

  Part 1 is about the Japanese digital democracy party, Team Mirai.

  Part 2 is about the Swiss Public AI model, Apertus.

  https://www.schneier.com/blog/archives/2026/09/rewiring-democracy-series-on-the-renovator.html

• Five Venezuelans plead guilty to ATM jackpotting attacks in US
  BleepingComputer • 2026-09-01 02:15 • www.bleepingcomputer.com
  Five Venezuelan nationals pleaded guilty to attempting to empty automated teller machines (ATMs) using malware in a series of ATM jackpotting attacks. […]
  https://www.bleepingcomputer.com/news/security/five-venezuelans-plead-guilty-to-atm-jackpotting-attacks-in-us/
• Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
  The Hacker News • 2026-09-01 01:26 • thehackernews.com
  Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that’s been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis.

  The idea, ESET said in a series of posts on X, is to deliberately trip a large language model’s (LLM) safety mechanisms and prevent its
  https://thehackernews.com/2026/09/russia-aligned-uac-0099-plants-nuclear.html

• Recently patched PaperCut zero-days used in data theft attacks
  BleepingComputer • 2026-09-01 00:48 • www.bleepingcomputer.com
  Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited as zero-days, are now being abused in data theft attacks. […]
  https://www.bleepingcomputer.com/news/security/recently-patched-papercut-zero-days-used-in-data-theft-attacks/
• Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
  The Hacker News • 2026-09-01 00:22 • thehackernews.com
  Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.

  The vulnerabilities in question are listed below –

  CVE-2026-0768 (CVSS score: 9.8) – A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.
  CVE-2026-66066 aka
  https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html

• Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
  Securelist • 2026-09-01 00:00 • securelist.com
  Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.
  https://securelist.com/mirage-kitten-new-backdoors-noderabbit-pollcat/121244/
• 179: The Courthouse – Revisited
  Darknet Diaries • 2026-09-01 00:00 • darknetdiaries.com

  In this episode we follow up with Gabby and Justin from Episode 59 – two seasoned penetration testers who tell us a story about the time when they tried to break into a courthouse but it went all wrong, and what happened in the aftermath.

  Sponsors

  This show is brought to you by Doppel. Doppel stops AI attacks with digital risk protection, human risk management, and email security on a unified social engineering defense platform.
  doppel.com

  This show is brough…
  https://darknetdiaries.com/episode/179/

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.