Cisco released fixes for CVE-2026-76461, a critical flaw in AsyncOS Software for Secure Email Gateway that lets unauthenticated attackers run root-level commands by sending crafted emails with malicious SQL statements. The company confirmed it detected active exploitation of the bug in September 2026 and issued indicators of compromise for defenders to check mail logs and network traffic. CISA has added the flaw to its Known Exploited Vulnerabilities catalog, giving federal agencies until September 17 to patch.
bleepingcomputer.com
· 2026-09-15
Microsoft Outlook users encountering the 'Your message can't be displayed right now' error can resolve it by clearing their cache, whether they use the web version or the desktop client. The fix forces Outlook to rebuild fresh copies of emails without deleting any messages, calendar events, or contacts.
engadget.com
· 2026-09-14
Microsoft researchers uncovered a phishing operation in which an unidentified attacker sent over one million fraudulent emails within three days, each tailored to target accounts payable staff at specific companies. The emails impersonated ServiceNow, demanding nearly $50,000 in fake subscription payments, and included fabricated email threads featuring real executives' names to make the scam appear legitimate.
darkreading.com
· 2026-09-11
An Entrepreneur contributor argues that mass-personalized AI outreach, like generic cold LinkedIn messages and spam emails, is damaging brand credibility rather than building it. Instead, the piece advocates for marketing built on educational content and showcasing real client success stories to attract buyers who are already primed to purchase.
entrepreneur.com
· 2026-09-10
Trezor alerted customers that attackers compromised its third-party email provider and used the legitimate [email protected] address to send phishing emails warning of a fake 'STM32 Entropy Vulnerability' in its hardware wallets. The company took down the malicious domain and is investigating how attackers gained access to its email infrastructure. This follows an earlier breach disclosed in August involving shipping partner ShipMonk, which exposed personal data of roughly 81,000 customers across multiple countries.
bleepingcomputer.com
· 2026-09-10
Instinct, the AI assistant startup valued at $2.5 billion, announced it is issuing dedicated email addresses to its agent so it can independently sign up for services, contact businesses, and handle bookings without flooding users' personal inboxes. Founder Noah Shinn said this is the first step toward letting Instinct fully own and operate accounts on a user's behalf, building on a recent partnership with 1Password for credential handling.
techcrunch.com
· 2026-09-09
Meta has introduced a new personal AI agent aimed at everyday users, capable of handling tasks like online shopping and sending emails. The launch is framed as an accessible entry point into agentic AI rather than a developer-focused tool.
wsj.com
· 2026-09-08
Anthropic has released a Gmail connector that lets its Claude AI assistant read, draft, organize and send emails directly from a user's inbox. The feature works through natural-language requests rather than fixed commands, and is available to all Claude users regardless of whether they pay for a subscription.
engadget.com
· 2026-09-08
An Android Authority writer found their Gmail account eating up 5.27GB of Google's 15GB free storage tier, largely due to accumulated email attachments rather than message count. Using Gmail's built-in 'Clean up space' tool, they identified and deleted large attachments, then cleared out Spam and Trash folders to recover storage without paying for Google One.
androidauthority.com
· 2026-09-07
Microsoft confirmed an ongoing Exchange Online incident, tracked as EX1467029, causing intermittent 'Server busy' errors for users sending or receiving messages from external domains. The company says anti-spam protections may be worsening delays for some accounts, and it has not yet identified the root cause or affected regions.
bleepingcomputer.com
· 2026-09-04
Dropbox notified users that roughly 5,000 accounts were accessed without authorization between August 4 and 21, 2026, with files downloaded from about 1,500 of them. The breach traces to a single sign-on integration with Lenovo IDs, where a gap in Lenovo's email verification let attackers register accounts under victims' email addresses and log into their Dropbox accounts without needing inbox access.
9to5mac.com
· 2026-09-02
Dropbox has notified some customers that attackers broke into their accounts by exploiting a flaw in Lenovo's email verification system, which let them register a fraudulent Lenovo ID tied to the victim's email address. Because Dropbox's login integration trusted Lenovo's identity assertions without independently confirming account ownership, attackers could log in without knowing the victim's Dropbox password. Dropbox says the intrusions occurred between August 4 and August 21, and Lenovo has attributed the issue to a legacy integration between its ID system and Dropbox.
bleepingcomputer.com
· 2026-09-02
GoKawiil