Weekly News - Anthropic locks out Claude users after infostealers hijack login sessions

September 2026 Patch Tuesday forecast: All we need is more time - View in browser  Weekly cybersecurity news September 8, 2026 Leave with a stronger IT & cyber strategy Gain practical strategies for AI, cybersecurity, cloud, identity, and automation at LogicON 2026. Join 100+ IT leaders in Columbus, Oct. 6–7, and leave with ideas you can put to work. Last week in headlines: Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers Google patches actively exploited Chrome zero-day (CVE-2026-85046) Microsoft Teams is about to make QR code phishing much harder September 2026 Patch Tuesday forecast: All we need is more time A five-part inventory for your AI agent credentials Scammers have figured out the best time to text you OpenAI is putting $1 billion behind Daybreak for defenders working without enterprise budgets Most of the bugs Claude Mythos found have never been checked by a human New infosec products of the week: September 4, 2026 Thomson Reuters reveals breach that exposed U.S. and Canadian court records Google’s Gemini 3.8 Flash takes on bigger AI models at a lower cost Russian man indicted for spreading malware to 80,000 freelancers Researchers built a $7 gadget for anyone paranoid about hidden cameras in hotel rooms Your AI agent’s system prompt is not a security control Your threat feed is someone else’s database: What ingesting malware intel at scale takes When AI quietly breaks things, who pays? Windows memory integrity switches on automatically for eligible devices in October 2026 Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911) Download: The Agentic Software Development Guide Exploitation of Sangoma Switchvox flaw is underway (CVE-2026-9586) Attackers are going after prominent individuals through OAuth phishing, FBI warns SonicWall SMA 1000 appliances under attack via zero-day flaws A battery storage cyberattack would look exactly like a badly tuned controller Global sinkhole operation ends Sality botnet’s 23-year run DuckDB stays open source while the team behind it goes to work for Amazon National Life Group CISO expects more vulnerabilities in six months than in thirty years Scareware ads keep running on Google’s transparency tool, even after they’re reported Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Anthropic’s Enterprise Frontier Safeguards lets your Claude logs stay in your cloud An AI CAPTCHA solver talked itself out of the right answer CISA review makes the case for eliminating vulnerability classes Vishing campaign abuses Microsoft Teams to give attackers a foothold in company networks Fake Claude Opus 5 app delivers malware and wipes its own tracks Berlin refuses to be blackmailed after network breach Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes NIS2 compliance: Fixing IAM and access control before the 2026 audit What your vendor says about PQC tells you if they are ready Cybersecurity jobs available right now: September 1, 2026 Threat actors are posing as AI crawlers to hunt for exposed credentials Attackers plant remote access tools on compromised PaperCut servers AWS Console Private Access can block sign-ins to personal accounts ShinyHunters claims it stole 284 million patient records from McKesson Anthropic locks out Claude users after infostealers hijack login sessions Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails Debian developers rejected an LLM ban and left disclosure voluntary The OpenClaw 2.0 release moves your sessions into SQLite What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree Halo-record: Open-source audit trails for AI agents AI AppSec tools agree on just 5% of security findings Free ChatGPT users get ads picked from whatever they just asked about Stay Informed every day. Get the day’s most important stories, useful insights, and fresh updates delivered straight to your inbox. Subscribe to our Daily newsletter. Industry news: Synology ActiveProtect Manager 2.0 improves AI-driven security Seemplicity Response Options accelerates vulnerability mitigation Keepnet launches free SMS/Call Reporter for iOS Visa enhances A2A Protect to stop fraud before money leaves the account Edge Case launches Guardian, an AI platform for tracking risk across autonomous systems F5 speeds up virtual patching to counter AI-driven threats Vali Cyber ZeroLock 5 brings MFA to the hypervisor command line BugBase Pentest Copilot Enterprise automates black-box pentesting Ping Identity introduces enterprise security for personal AI agents Superna 2.15 simplifies cyberstorage security and resilience operations LastPass enhancements improve visibility, governance, and control Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive