Most Fraudulent Hires Receive Credentials Before Detection

A September 2026 Infosecurity Magazine feed highlights a broad range of active cybersecurity threats, including ransomware, phishing-as-a-service, malicious browser and mobile software, supply-chain compromise, insider-risk exposure, zero-day exploitation, critical vulnerabilities, cybercrime operations, and AI-related security risks. Notable items include exploitation of maximum-severity GitLab and SAP flaws, a critical N-able RCE (CVE-2026-86218), Microsoft emergency patches, credential theft campaigns targeting Microsoft 365, Android malware, and data breaches involving Revolut and Trezor’s