Education — Cybersecurity News & Threat Intelligence

9 articlesUpdated 3 Oct 2026

Cyber AttackGov & Defence

China-Aligned TA419 Impersonates White House and Anthropic Figures to Target AI Experts

Proofpoint: China-aligned TA419 posed as an ex-White House OSTP official and an Anthropic employee to steal AI policy experts' Microsoft 365 sessions.

3 Oct 20266 min read

Daniel Okafor

ThreatsCloud & SaaSCritical
HPE Fixes 18 Instant On Access Point Flaws, Including Unauthenticated RCE Bugs
HPE bulletin HPESBNW05150 fixes 18 Instant On AP flaws, including two CVSS 9.8 unauthenticated RCE bugs (CVE-2026-76721, CVE-2026-76722). Update to 3.4.2.0.
Aisha Noor3 Oct 20265 min read
ThreatsCloud & SaaSHigh
PaperCut issues superseding maintenance releases as attackers deploy AI agent swarms against 440+ servers
PaperCut shipped consolidated maintenance updates after automated AI agent swarms compromised over 440 print management servers, bypassing earlier emergency hotfixes.
Daniel Okafor11 Sep 20266 min read
ResearchEducation & Academia
Eight new ransomware brands in one week: why tracking group names has stopped working
One tracker logged 315 leak-site posts from 40 groups in a single August week, eight of them new. Brand-based detection cannot keep pace. Here is what to instrument instead.
Daniel Okafor10 Sep 20266 min read
InsightsCloud & SaaS
SharePoint 2016/2019 is unpatchable now. Exchange has until 31 October.
SharePoint Server 2016 and 2019 lost support on 14 July 2026 with no paid ESU on offer. Exchange 2016/2019 has until 31 October. Here is how to contain both.
Priya Raman10 Sep 20266 min read
ResearchEducation & Academia
Iran-Linked Screening Serpens Shipped Six RAT Builds in Ten Weeks
Unit 42 documented six new RAT variants from Iran-nexus Screening Serpens between February and April 2026. The hashes rotate; the AppDomainManager config file does not.
Mei-Lin Chen9 Sep 20266 min read
ResearchEducation & Academia
Breakout time falls to 72 minutes — and most SOCs are not built for it
The 2026 benchmark from foothold to active exfiltration is 72 minutes, a fourfold reduction. Human-paced triage no longer fits inside the window.
Priya Raman5 Sep 20267 min read
ThreatsCloud & SaaSHigh
Enterprise app CVE roundup: PeopleSoft, cPanel, Artifactory and Switchvox all need attention
Four high-severity vulnerabilities in widely deployed enterprise software — including a build-artefact repository that sits directly in the software supply chain.
Priya Raman4 Sep 20266 min read
ResearchEducation & Academia
Attackers impersonated hundreds of brands on GitHub to push malware through search results
A campaign beginning in late June 2026 built hundreds of fake brand repositories on GitHub and used SEO to place them at the top of software download searches.
Mei-Lin Chen4 Sep 20266 min read