30
42
55
30
In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
SecurityWeek weekly roundup covers exploited WordPress Super Forms flaw CVE-2026-14894, a $10M bounty on an Iranian cyber official, InjectEave attacks, and more.
SecurityWeek's weekly roundup aggregates short items across the threat landscape, including Microsoft's report of invisible Unicode tag characters used in financial phishing lures at up to 2.37 million messages per day, and active exploitation of critical WordPress Super Forms plugin flaw CVE-2026-14894 to deploy PHP webshells. Policy items include a $10 million US bounty for IRGC-CEC Cyber Operations Command lead Amir Yaryab, a 16-month prison sentence for ex-AT&T employee Kenneth Carter over SIM swaps with nearly $600,000 in intended losses, and the US arraignment of Russian Sergei Anatolyevich Filimonov over credential harvesting. Technical items include InjectEave electromagnetic side-channel attacks tested on 11 devices, an FBI warning on OAuth consent phishing, and VulnCheck's finding that only 202 of 26,153 Anthropic Project Glasswing findings were fixed.
45
Cybersecurity jobs available right now: September 8, 2026
Help Net Security's September 8 job roundup lists open cybersecurity roles at AudioCodes, Garmin, Scotiabank, GDIT, Subway and others across seven countries.
The listing includes a CISO role at AudioCodes in Israel, a Combat Systems Cyber Engineer at Johns Hopkins Applied Physics Laboratory, cloud security engineering at Garmin, and an IAM Architect at Scotiabank. Other openings span penetration testing for NATO exercises at Spektrum in Belgium, SOC analyst at Orro Group in Australia, threat hunting at GDIT, and security operations at Subway in the USA. Roles range from CISO and architect to SOC analyst and penetration tester.
12
30
30
30
30
30
30
30
30
30
30
30
30