957 articles · Free
SEPT
15
The FBI published its first-ever comprehensive cyber strategy in September 2026, focusing on disrupting threat actors rather than just defending networks. The strategy outlines four pillars: disrupt, pursue, protect, and prepare. CISA and NSA contributed to the strategy.
SEPT
15
ScreenConnect CVE-2026-84869 is a 9.9 CVSS critical guest-to-host file execution flaw patched in ScreenConnect 26.6.5 on September 8, 2026. ConnectWise issued priority 1 high severity advisory. Servers not affected. Update immediately or strip TransferFiles permission.
SEPT
15
Switzerland's federal government announced in September 2026 it will move away from Microsoft 365 to open-source alternatives citing data sovereignty, cost, and vendor lock-in concerns. The transition will roll out over 3-5 years across federal agencies.
SEPT
15
Tesla CEO Elon Musk confirmed the company repelled a 'serious' ransomware attack in early September 2026, attributing the success to the company's internal security team. Bank Info Security reports the incident. Tesla did not pay any ransom.
SEPT
15
Active exploitation wave hits Palo Alto Networks PAN-OS and Fortinet FortiGate enterprise edge devices in September 2026. Critical PAN-OS root-level RCE and FortiGate vulnerabilities under active attack by APT and ransomware groups. Patch immediately.
SEPT
15
A new phishing-as-a-service platform named BigBear bypassed Microsoft 365 multi-factor authentication at 258 organizations in early September 2026. BleepingComputer reports the platform uses adversary-in-the-middle techniques to steal session tokens.
SEPT
15
Plesk patched CVE-2026-68488, a TOCTOU symlink race in Backup Manager that lets an authenticated customer escalate to root on Linux servers during subscription restores, alongside the equally rated path-traversal flaw CVE-2026-68487. Here is what admins must do this week.
SEPT
15
Purported white-hat hackers drained about 4,000 BTC, worth roughly $320 million, from the Liquid Network federation wallet through a software bug, then returned 3,400 BTC and kept around 598 BTC. Blockstream now says it will not pay for the rest.
SEPT
15
Quinn Emanuel and McDermott confirmed data breaches driven by social engineering, exposing client files, Social Security numbers and health data. At least 10 Big Law firms disclosed breaches this summer. Here is what happened, who is affected, and what law firms and clients should do.
SEPT
15
Revolut says a fraudulent request sent from a real government agency email domain tricked it into handing over customer KYC files including passports, selfies and full transaction histories. Self-proclaimed culprits now demand 10,000 bitcoin. Here is what leaked, who is at risk, and what victims should do now.
SEPT
15
High-yield savings accounts pass through Fed rate hikes within 30-60 days. Online banks lead with 4.00-4.50% APY; brick-and-mortar banks average 0.42% APY. Best HYSAs in 2026: UFB Direct 4.51%, Marcus 4.40%, Bask Bank 4.40%, Ally 4.35%.
SEPT
15
Goldman Sachs raised its September 2026 Fed hike call to 100% after the August CPI hot core print. GS now sees 2 cuts in 2027 in September and December, terminal rate at 3.25-3.50%. Credit Agricole leans hold with hawkish tone. Reuters poll says hold; Kalshi market prices ~52% hike.
Get career tips in your inbox
One email a week — new articles, guides and course updates. No spam.