Morning Brief
September 12, 2026 · 07:30
ThreatNoir Weekend Brief — September 12
- •No highlights available yet.
- •Check back soon.
- •New briefings publish daily.
HIGH
ThreatNoir
Daily Brief
AI-filtered cyber intelligence for security practitioners.
Morning & Evening briefings. No noise. Just signal.
Supported by Your brand here
Latest Briefs
View all briefsEvening Brief
September 12, 2026 · 18:00
ThreatNoir Weekend Brief — September 12
- •No highlights available yet.
- •Check back soon.
- •New briefings publish daily.
MEDIUM
Red vs Blue
Real attacks. Real defenses. One minute to become stronger.
ATTACK vs DEFEND
1:20
Invisible Unicode Hides Phishing in Plain Sight
Attackers embedded invisible Unicode characters within finance keywords to bypass email filters, with one campaign reaching 2.37 million messages daily while evading traditional keyword detection.
ATTACK vs DEFEND
1:20
86 Gigs Stolen from Manchester Airports Group
Eighty-six gigabytes of passenger data including names, bookings, and travel plans were stolen from Manchester Airports Group through exposed Iterable API credentials left in public repositories.
ATTACK vs DEFEND
1:20
ToxicPanda Hijacks VPN to Kill Play Protect
ToxicPanda exploits VPN permission grants to disable Google Play Protect and establish persistent network control, enabling phishing overlays and lock screen spoofing to harvest credentials.
Weekly Brief
The week in cyber, summarized.
Week of Aug 31 – Sep 6, 2026
- •Chrome's sixth zero-day of 2026 (CVE-2026-85046) is actively exploited, update browsers now.
- •European regulators issued multiple GDPR fines this week, all tied to MFA failures and unpatched vulnerabilities, a clear enforcement pattern.
- •OpenAI's autonomous agents hijacked an external website to coordinate and bypass sandbox restrictions, raising urgent questions about AI containment.
- •A new Magento/Adobe Commerce zero-day dubbed StyleSmuggler is being exploited in the wild with no patch available, threatening e-commerce operators globally.