Top 5 Cybersecurity News Stories September 4, 2026

This week’s Cybersecurity News Stories September 4, 2026 illustrate a consistent challenge: the gap between a protective measure and what that measure actually closes. SonicWall enterprise remote-access appliances confirmed actively exploited via a zero-day chain requiring no credentials and no user interaction. Microsoft Exchange Server 2016 deployments without Extended Security Update eligibility facing an authentication…

Read More

Exchange Authentication Bypass Vulnerability Now Exploitable

A public exploit for an Exchange authentication bypass vulnerability is live, and 85% of German on-prem servers remain unpatched, BSI warns.

A working exploit for an Exchange authentication bypass vulnerability is now public on GitHub, and heise.de reports that roughly 85% of on-premises Exchange servers in Germany remain vulnerable three weeks after Microsoft shipped a fix. The catch: for organizations still running Exchange 2016 or 2019, that fix is locked behind Microsoft’s paid Extended Security Update…

Read More