Relays Are Masking Chinese Access to Frontier AI Models in the US

Dark Reading's September 2026 roundup covers active cyber threats, critical vulnerabilities, phishing and identity abuse, supply-chain compromises, ransomware and extortion, malware campaigns, state-sponsored espionage, and emerging AI security risks. Notable items include a maximum-severity Cisco ISE authentication bypass (CVE-2026-76460), a maximum-severity GitLab path traversal flaw (CVE-2026-85706), exploitation of Cisco vulnerabilities by Sandworm to deploy Cyclops Blink, OAuth and device-code phishing targeting Microsoft 365, the Shai-Hulud npm supply-chain attack, and AI-agent attacks,