ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
2026-09-10T19:24:00Z•bd4d906162bc36d4d9956041630ddc9b63f00ecf28a0801cbc1de7e0f5df1a0d
CVE-2026-20079CVE-2026-44756CVE-2026-69414CVE-2026-86218CVE-2026-87491actively-exploitedai-agentsai-securityandroid-malwareapt31banking-trojancisa-kevcloud-securitycredential-theftcryptocurrencyespionageexposed-servicesinfostealerpatch-managementphishingransomware-and-cybercrimeremote-code-executionscam-marketplacesvulnerabilitieszero-day
What happened
Weekly security roundup covering critical and actively exploited vulnerabilities, Android and banking malware, phishing and scam operations, AI-agent security failures, exposed administrative credentials, and major cybercrime and espionage activity. The highest-impact items include unauthenticated remote code execution in Check Point, SAP, and N-able products; actively exploited Chrome, Windows, Cisco, Citrix, and Fortinet flaws; compromise of PaperCut instances; and attacks targeting wallets, AI credentials, and cloud-connected data.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- bd4d906162bc36d4d9956041630ddc9b63f00ecf28a0801cbc1de7e0f5df1a0d
- Enrichment time
- 2026-09-10T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.