Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

Infosecurity Magazine feed covering September 2026 cybersecurity developments, including active exploitation of critical vulnerabilities, ransomware and data breaches, phishing and fraud campaigns, Android malware, cybercrime operations, AI-related security risks, nation-state activity, and defensive or policy responses. Notable items include exploitation of Marimo RCE, GitLab and SAP maximum-severity flaws, N-able CVE-2026-86218, a CrowdStrike privilege-escalation zero day, Pegasus zero-click exploitation, Rhysida extortion, BigBear Microsoft 365 credential theft, and large-scale driver’s-lic