Interesting paper: “Cybersecurity Mission Creep.” Abstract: Cybersecurity is experiencing mission creep. Policymakers are casting more and more problems as issues of cybersecurity. So reframed, wildly different policy issues, from misinform

A growing trend in the United States involves policymakers increasingly framing a wide range of societal problems as cybersecurity issues, a phenomenon described as "cybersecuritization." This reframing transforms diverse policy challenges, including misinformation, social media safety for children, antitrust regulations, allegations of journalist misconduct, and anti-sex trafficking laws, into matters of cybersecurity.
When issues are "cybersecuritized," they are presented not merely as significant but as existential threats amplified by their technological underpinnings. This elevation grants them access to the political and legal frameworks associated with urgency and exceptionalism, potentially leading to concerning governance responses. Framing these problems as security threats imbues them with an apparent authority to override other considerations, thereby oversimplifying complex issues.
This oversimplification inherent in cybersecuritization risks promoting one-dimensional solutions and can lead to the use of argumentative shortcuts, such as invoking First Amendment challenges to dismiss counterarguments. Furthermore, the process often encourages deference to individuals perceived as cybersecurity specialists and their proposed remedies.
The combined effect of cybersecuritization's reductive nature and the deference it prompts can make ultimate governance choices less transparent. This opacity, in turn, has the potential to undermine public trust and erode political legitimacy.
A recent analysis has identified and examined this phenomenon of cybersecuritization, proposing a new framework for its critique. By drawing on examples from both criminal and civil legal domains, the analysis illustrates how pervasive and subtle cybersecuritization has become, suggesting its continued expansion is likely.
Addressing cybersecuritization is considered crucial. The authors warn that failing to confront this trend could result in ceding responsibility for difficult policy decisions to the perceived ultimate authority of cybersecurity. The analysis aims to facilitate a return to more robust and transparent governance processes.

Attackers are exploiting two new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the U.S. and Europe. Attackers are exploiting two recelty disclosed PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, in attacks targeting schools and other education organizations in the U.S. and Europe, as reported by TheHackerNews. Arctic Wolf researchers observed

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence executions," JetBrains said.
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, will offer AI models, training, and technical support over the next six months, prioritizing water and wastewater utilities, electric grid operators, and local government entities. This move aims to equip organizations with limited budgets and staff against increasingly sophisticated cyber threats.

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is publishing early