Skip to the rundown
GetYourBrief
Search

Monthly report · September 2026

Cyber news in September 2026

Cyber coverage in September 2026: 38 news events, 31% fewer than in August 2026, drawn from 96 outlet reports. The most covered name was OpenAI, in 9 events.

How many events, day by day?

Cybersecurity desk: news events homed on the desk per day, September 2026 (UTC days). Source: GetYourBrief's record of the outlets' reports.

Who was in the news most?

  1. OpenAI 9
  2. Anthropic 9
  3. FBI 7
  4. Donald Trump 6
  5. ShinyHunters 5
  6. CISA 4
  7. Hugging Face 4
  8. United States 4
  9. Reuters 4
  10. China 4
  11. Securities and Exchange Commission 3
  12. Sam Altman 3
  13. Xi Jinping 3
  14. Meta 3
  15. Google 3

Counts are events (one per story, however many outlets carried it) on this desk in September 2026 that named each person, company or body. Source: GetYourBrief's record of the outlets' reports.

The week of August 31 to September 6, 2026: 7 events

A quiet week on the desk, so its events are kept here in full rather than in a week brief.

  1. 01

    Automakers urge Congress to ban Chinese connected vehicles in US

    2 outlets · first: CNBC Regulation

    Machine summary The group asked lawmakers to act before Congress' current session ends on Jan. 3, according to the report.

    1. The group asked Congress to act before the end of its current session on Jan. 3, according to the report.

    Reported by CNBC and The Loadstar.

  2. 02

    OpenAI rolls out GPT-6 Astra: 100K GPUs

    2 outlets · first: ibtimes.com Vulnerability

    Machine summary OpenAI's GPT-6 Astra triggered cybersecurity safeguards, the first OpenAI model to do so. Initial access is limited to select cybersecurity customers before a broader paid-tier rollout. The release follows a two-week development pause after two test models were breached at Hugging Face.

    1. Astra was trained using more than 100,000 GPUs at OpenAI's Texas site and is the first OpenAI model to use other AI models to supervise its training.
    2. OpenAI says Astra is the first model to trigger its Critical cybersecurity capability threshold, able to autonomously discover unknown vulnerabilities and develop exploits against well-protected systems.
    3. Brockman stated that feeling we have reached the AGI era is not unreasonable; Altman remarked that everybody will find the upcoming model generation sobering.

    Reported by ibtimes.com and punchng.com.

  3. 03

    CISA adds Sangoma Switchvox flaw to known exploited list

    2 outlets · first: bleepingcomputer.com Vulnerability

    Machine summary CISA added the flaw to its Known Exploited Vulnerabilities catalog.

    1. Horizon3 said it observed active exploitation of CVE-2026-9586 on August 30, with attempts from a single source IP address (176.65.148.184) to establish a reverse shell.
    2. Sangoma fixed the flaw and 11 others in Switchvox version 8.4.0.2, released on July 14, according to BleepingComputer.
    3. CISA added CVE-2026-9586 to its Known Exploited Vulnerabilities catalog, according to SecurityWeek.

    Reported by bleepingcomputer.com and securityweek.com.

    • CISA
    • CVE-2026-9586
    • Horizon3
    • Switchvox
    • Sangoma
  4. 04

    Palo Alto Networks shares fall after fiscal Q4 report

    2 outlets · first: finance.yahoo.com Security

    Machine summary Palo Alto Networks reported fiscal Q4 revenue of $3.41 billion and adjusted earnings per share of $1.02, according to a report. The report said the company also issued forward guidance and announced an acquisition, and that its shares declined 10.3% for the week.

    1. Palo Alto Networks reported fiscal Q4 revenue of $3.41 billion, up roughly 34% year over year, according to a report.
    2. The company reported non-GAAP earnings per share of $1.02, compared with $0.95 in the prior-year quarter, according to the report.
    3. Annualized recurring revenue for its next-generation security segment rose 63% year over year to $9.1 billion, and remaining performance obligations rose 34% to $21.2 billion, the report said.
    4. Palo Alto Networks guided for current fiscal year sales between $14.1 billion and $14.2 billion and adjusted earnings per share between $4.16 and $4.19, according to the report.
    5. The company announced it acquired Console, an agentic artificial intelligence platform, the report said.

    Reported by finance.yahoo.com and aol.com.

More events reported

No summary of ours and no outlet headline passed our automated checks for these, which says nothing about the events (how they work); the outlets and their reports are linked.

  1. · 2 outletsbleepingcomputer.com, securityweek.com
  2. · 1 outletArs Technica
  3. · 3 outletsPr Newswire, mykxlg.com, daily-tribune.com

Which stories did the most outlets carry?

  1. Sep 29 OpenAI says it delayed release of GPT-6.1 Astra over security concerns 11
  2. Sep 19 Google says Gemini model hacked three companies in security test 6
  3. Sep 11 Reports: Australians lost $156.6m to scams in first half of year 5
  4. Sep 9 lasvegassun.com: “China hits back at US claims of maliciou AI distillation ahead of planned Trump - Xi talks” 4
  5. Sep 21 ShinyHunters claims hijack of rival cl0p dark web site 4
  6. Sep 10 livemint.com: “Anthropic discloses fourth AI hacking incident missed in earlier review” 3
  7. Sep 20 China spy agency chief warns AI could jeopardise national security 3
  8. Sep 20 Cybersecurity stocks jumped this week. 3
  9. Sep 20 Wyoming DOT warns of phishing emails posing as agency employee 3
  10. Sep 29 Inspira Enterprise named Major Contender in Everest Group 2026 cybersecurity PEAK Matrix 3
  11. Sep 3 Automakers urge Congress to ban Chinese connected vehicles in US 2
  12. Sep 3 OpenAI rolls out GPT-6 Astra: 100K GPUs 2
  13. Sep 2 CISA adds Sangoma Switchvox flaw to known exploited list 2
  14. Sep 6 Palo Alto Networks shares fall after fiscal Q4 report 2
  15. Sep 7 bleepingcomputer.com: “Mathspace discloses data breach affecting over 1 million people” 2

What kind of news was it?

  1. Threat intelligence 19
  2. Security 11
  3. Data breach 10
  4. Regulation 3
  5. Vulnerability 3

Categories come from the pipeline's classifier; how they are assigned.

Week by week

  1. Aug 31The week of August 31 to September 6, 20264
  2. Sep 7The week of September 7 to 13, 20269
  3. Sep 14The week of September 14 to 20, 20267
  4. Sep 21The week of September 21 to 27, 202613
  5. Sep 28The week of September 28 to October 4, 20265

Sources: the outlets' reports linked on this page; counts and times from GetYourBrief's record of those reports (methodology).