Cybersecurity threats and breaches reported

Between September 2–3, 2026, infosec sources reported multiple security incidents including StreamRat malware distributed via Meta ads, a $17 billion Meta settlement affecting teens, GeoNetwork RCE vulnerabilities, Fishbrain password theft, Pegasus spyware targeting Serbian activists, and 153 million driver license images on the dark web. The incidents span malware, data breaches, and spyware deployment.