Baitaphish
Security intelligence
SearchLatest briefing
Daily briefing

September 4, 2026

One view per published record. Repeated section appearances are grouped by exact record ID, while every attached source remains available for inspection.
Generated 48 unique records48 source records
ArchiveLatest
Briefing context

Why this day matters

  • Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution. [...]
  • Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7
Published records

What changed

Expand a row to inspect provenance
Material developments

Cisco searched for IOS XR bugs and found so many it rolled them into an update release

Theregister Security published a source item for review.

1 source recordContext source

What happened

Theregister Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Validate the source-stated mitigation in a controlled environment before rollout.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Pegasus and NoviSpy Used Against Serbian Protesters

Securityaffairs published a source item for review.

1 source recordContext source

What happened

Securityaffairs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Large group of Serbian opposition, activist figures targeted with spyware

Therecord Media published a source item for review.

1 source recordContext source

What happened

Therecord Media published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Theregister Security published a source item for review.

1 source recordContext source

What happened

Theregister Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Microsoft: KB5120998 mouse reset bug affects only non-English PCs

Bleepingcomputer published a source item for review.

1 source recordContext source

What happened

Bleepingcomputer published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Drowning in CVEs and thirsty for answers? Try CTEM

Theregister Security published a source item for review.

1 source recordContext source

What happened

Theregister Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web

Securityaffairs published a source item for review.

1 source recordContext source

What happened

Securityaffairs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Rust 1.98.1

Rust Lang Rust Releases published a source item for review.

1 source recordAuthoritative source

What happened

Rust Lang Rust Releases published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

  • Rust 1.98.1 Rust Lang Rust Releases · Published 2026-09-03T13:14:07Z · Retrieved Sep 4, 2026, 8:51 AM UTC
    daily-item:v1:f34d7238239b7c9a0935c8cb87dd9947580cf0e7a044e3aafee173c8f0cbdb82

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

w2026-09-03

Owasp Zap Releases published a source item for review.

1 source recordAuthoritative source

What happened

Owasp Zap Releases published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

  • w2026-09-03 Owasp Zap Releases · Published 2026-09-03T12:35:50Z · Retrieved Sep 4, 2026, 8:52 AM UTC
    daily-item:v1:358a0b71483bdcef5351b086c2f84713da5494c3048f411884abd5a26451c8ed

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Researching Employment Scams

Schneier Blog published a source item for review.

1 source recordContext source

What happened

Schneier Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

  • Researching Employment Scams Schneier Blog · Published 2026-09-03T11:18:52Z · Retrieved Sep 4, 2026, 7:23 AM UTC
    daily-item:v1:288fda770359bfd4f5cdfe6147a43074741fe360d148f1340156dc9ec2696908

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd)

Sans Isc Diary published a source item for review.

1 source recordContext source

What happened

Sans Isc Diary published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Elastic Stack 9.5.3 released

Elastic Security Blog published a source item for review.

1 source recordAuthoritative source

What happened

Elastic Security Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Validate the source-stated mitigation in a controlled environment before rollout.

Evidence

  • Elastic Stack 9.5.3 released Elastic Security Blog · Published 2026-09-03T00:00:00Z · Retrieved Sep 4, 2026, 7:23 AM UTC
    daily-item:v1:452064b58945807422c61e2d47020fae502880964aca7f4c1a19de168ba80d10

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Health data of more than 9.5 million people leaked from Aesto record system

Therecord Media published a source item for review.

1 source recordContext source

What happened

Therecord Media published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

BGP hijack infecting networks caused by a comedy of errors that’s not funny at all

Arstechnica Security published a source item for review.

1 source recordContext source

What happened

Arstechnica Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

Elastic Stack 8.19.21 released

Elastic Security Blog published a source item for review.

1 source recordAuthoritative source

What happened

Elastic Security Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Validate the source-stated mitigation in a controlled environment before rollout.

Evidence

  • Elastic Stack 8.19.21 released Elastic Security Blog · Published 2026-09-02T00:00:00Z · Retrieved Sep 4, 2026, 7:23 AM UTC
    daily-item:v1:336a41531cf53058b288780cdc233696d415e8131840ca13272f929349bf8d68

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

FBI Probes Service Selling 153M+ Drivers Licenses

Krebs On Security published a source item for review.

1 source recordContext source

What happened

Krebs On Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Material developments

What’s the Scam?

Schneier Blog published a source item for review.

1 source recordContext source

What happened

Schneier Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

  • What’s the Scam? Schneier Blog · Published 2026-09-01T17:36:13Z · Retrieved Sep 4, 2026, 7:23 AM UTC
    daily-item:v1:cdad45a7c4bd68d5d82789cc8f25b5d80376d98de812b25b71db753d7541e7e3

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

HPE patches critical ArubaOS-CX remote code execution flaw

Bleepingcomputer published a source item with critical severity.

1 source recordContext source

What happened

Bleepingcomputer published a source item with critical severity.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

The Hacker News published details for CVE-2026-20212.

1 source recordContext source

What happened

The Hacker News published details for CVE-2026-20212.

Why it matters

A reviewed impact interpretation has not been published for this record.

Structured associations

CVE-2026-20212 mentioned

Reviewed next steps

  • Check asset inventory and patch status for CVE-2026-20212.
  • Validate the source-stated mitigation in a controlled environment before rollout.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Microsoft Teams is about to make QR code phishing much harder

Helpnetsecurity published a source item for review.

1 source recordContext source

What happened

Helpnetsecurity published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

September 2026 Patch Tuesday forecast: All we need is more time

Helpnetsecurity reports active exploitation in this exact source item.

1 source recordContext source

What happened

Helpnetsecurity reports active exploitation in this exact source item.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Prioritize exposure review and remediation because exploitation is explicitly confirmed.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Scammers have figured out the best time to text you

Helpnetsecurity published a source item for review.

1 source recordContext source

What happened

Helpnetsecurity published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Cisco Fixed Critical RCE in Nexus 9000 Series Switches

Securityaffairs published details for CVE-2026-20212.

1 source recordContext source

What happened

Securityaffairs published details for CVE-2026-20212.

Why it matters

A reviewed impact interpretation has not been published for this record.

Structured associations

CVE-2026-20212 mentioned

Reviewed next steps

  • Check asset inventory and patch status for CVE-2026-20212.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

The Hacker News published a source item for review.

1 source recordContext source

What happened

The Hacker News published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

StreamRat Android malware spreads through Meta and TikTok ads

Malwarebytes Labs published a source item for review.

1 source recordAuthoritative source

What happened

Malwarebytes Labs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory

The Hacker News published a source item for review.

1 source recordContext source

What happened

The Hacker News published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Your phone or computer may soon ask how old you are

Malwarebytes Labs published a source item for review.

1 source recordAuthoritative source

What happened

Malwarebytes Labs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Russian national facing 20 years for malware campaign that infected 80,000 freelancers

Therecord Media published a source item for review.

1 source recordContext source

What happened

Therecord Media published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Tech support scams look different now. Here’s what to watch for

Malwarebytes Labs published a source item for review.

1 source recordAuthoritative source

What happened

Malwarebytes Labs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Scammers are getting smarter about where they target you

Malwarebytes Labs published a source item for review.

1 source recordAuthoritative source

What happened

Malwarebytes Labs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Threat and risk signals

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

Kaspersky Securelist published a source item for review.

1 source recordAuthoritative source

What happened

Kaspersky Securelist published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Cloud and infrastructure

Coder's registry infrastructure compromised to push malicious modules

Bleepingcomputer published a source item for review.

1 source recordContext source

What happened

Bleepingcomputer published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Cloud and infrastructure

Confused about which VPN is right, US senator asks the NSA for guidance

Arstechnica Security published a source item for review.

1 source recordContext source

What happened

Arstechnica Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Cloud and infrastructure

Elastic and Tencent Cloud deepen strategic partnership to power AI-era search foundation

Elastic Security Blog published a source item for review.

1 source recordAuthoritative source

What happened

Elastic Security Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Cloud and infrastructure

AI Agents Are Now Emailing Me with Their Security Concerns

Schneier Blog published a source item for review.

1 source recordContext source

What happened

Schneier Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Cloud and infrastructure

Wireless Routers as Motion Detectors

Schneier Blog published a source item for review.

1 source recordContext source

What happened

Schneier Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

  • Wireless Routers as Motion Detectors Schneier Blog · Published 2026-09-02T10:23:28Z · Retrieved Sep 4, 2026, 7:23 AM UTC
    daily-item:v1:e9a22b5e91b9fdac2aa7811fa3595cf313d51abf4d25c7ab5bd36ab41be22e0e

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Incidents and exposure

Dark Web Service Nexus Sells 153M+ Driver’s Licenses

Securityaffairs published a source item for review.

1 source recordContext source

What happened

Securityaffairs published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Incidents and exposure

French hospital fined €500,000 after breach exposes data of 727,000

Bleepingcomputer published a source item for review.

1 source recordContext source

What happened

Bleepingcomputer published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Incidents and exposure

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

The Hacker News published a source item for review.

1 source recordContext source

What happened

The Hacker News published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Incidents and exposure

US and Canadian court data exposed in Thomson Reuters breach

Therecord Media published a source item for review.

1 source recordContext source

What happened

Therecord Media published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

Incidents and exposure

I rented a car, and within hours, my driver's license was for sale

Arstechnica Security published a source item for review.

1 source recordContext source

What happened

Arstechnica Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

A five-part inventory for your AI agent credentials

Helpnetsecurity published a source item for review.

1 source recordContext source

What happened

Helpnetsecurity published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

OpenAI commits $1B in AI credits to frontline cyber defenders

Theregister Security published a source item for review.

1 source recordContext source

What happened

Theregister Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

Nobody Is Saying Why OpenAI and Anthropic Had Outages Today

Wired Security published a source item for review.

1 source recordContext source

What happened

Wired Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

Prediction Market Betting Is Getting People Banned and Arrested

Wired Security published a source item for review.

1 source recordContext source

What happened

Wired Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

This Is Flock’s AI Search Tool for Cops

Wired Security published a source item for review.

1 source recordContext source

What happened

Wired Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

The security attack that hid inside your observability data

Elastic Security Blog published a source item for review.

1 source recordAuthoritative source

What happened

Elastic Security Blog published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.

AI and model reality

OpenAI Is About to Release Its First AI Model With ‘Critical’ Cyber Abilities

Wired Security published a source item for review.

1 source recordContext source

What happened

Wired Security published a source item for review.

Why it matters

A reviewed impact interpretation has not been published for this record.

Reviewed next steps

  • Review the exact source item and determine whether it changes exposure or monitoring priorities.

Evidence

Known limitation

This item is supported by one source record and has not been independently corroborated here.