CISA and NIST Issue Guidance to Protect Cloud Identity Tokens

Infosecurity Magazine coverage from September 7–16, 2026 highlights critical vulnerabilities and active exploitation, ransomware and data breaches, phishing and credential theft, Android malware, cloud and non-human identity risks, software supply-chain compromise, AI-related security concerns, and state-sponsored cyber activity. Notable issues include exploited maximum-severity GitLab and SAP flaws, Microsoft’s record September patch release, an N-able critical RCE (CVE-2026-86218), TP-Link camera zero-days, malicious OAuth-token theft, ransomware extortion, and campaigns targeting Microsoft