← All threat briefs

Cybersecurity Brief - 2026-09-06

SECURITY // 2026-09-06

Cybersecurity Brief: 2026-09-06

  • REVSTEALER persistence modules found disabling Windows security: Elastic Security Labs identified four new modules (ProManager, WinUpdate, SoftManager, and LockAppHost) linked to the REVSTEALER infostealer. These programs persist on infected machines even after the main stealer deletes itself; one module actively disables Windows Update and Microsoft Defender to facilitate cryptocurrency mining. (Source: The Hacker News)
  • Unpatched Magento/Adobe Commerce zero-day "StyleSmuggler" being exploited: Attackers are actively exploiting a new unauthenticated vulnerability in Magento Open Source and Adobe Commerce. The flaw, named StyleSmuggler, allows for remote code execution and the installation of persistent backdoors in online stores. (Source: The Hacker News)
  • Critical Cisco vulnerabilities identified in IOS XR and Nexus switches: During an internal bug hunt, Cisco discovered several issues, including three critical vulnerabilities affecting IOS XR and Nexus 9000 Series Switches, necessitating a significant security update. (Source: The Register)