CVE Tools
Track your stack

Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast

Help Net SecurityBy Sinisa Markovic

RoundupClaudeShinyHuntersMicrosoft Exchange

Our summary

This weekly security briefing highlights active exploitation of two zero-day vulnerabilities in SonicWall SMA 1000 appliances, identified as CVE-2026-83548 and CVE-2026-83549. Additionally, Shadowserver Foundation scans reveal that approximately 22,000 Microsoft Exchange servers remain unprotected against critical authentication bypass flaw CVE-2026-62911. The report also covers active targeting of Sangoma Switchvox via recently patched SQL injection defect CVE-2026-9586, alongside broader updates on threats including Claude account compromises via infostealer malware and the September 2026 Patch Tuesday landscape.

Read at Help Net Security

Help Net Security publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsCISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersCVE-2026-83548, CVE-2026-83549 +1
  2. BleepingComputerInfraTrust report warns network management systems under attackCVE-2026-83548, CVE-2026-83549
  3. Check Point Research7th September – Threat Intelligence ReportCVE-2026-83548, CVE-2026-83549
  4. Dark ReadingSonicWall SMA 1000 Zero-Days Enable Unauthenticated RCECVE-2026-83548, CVE-2026-83549
  5. The Hacker NewsAttackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainCVE-2026-83548, CVE-2026-83549
  6. Help Net SecuritySonicWall SMA 1000 appliances under attack via zero-day flawsCVE-2026-83548, CVE-2026-83549
  7. BleepingComputerSonicWall warns of actively exploited SMA1000 zero-day flawsCVE-2026-83548, CVE-2026-83549
  8. SecurityWeekSonicWall Warns of Two SMA1000 Zero-Days Exploited in AttacksCVE-2026-83548, CVE-2026-83549
  9. The Hacker News⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreCVE-2026-9586
  10. SecurityWeekIn Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B ValuationCVE-2026-62911

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store