Threat Brief — 2026-09-01 — Quiet day on the threat feed

Today's fresh feed is dominated by general technology and science reporting with no new actionable threat-intelligence items. Two security-relevant findings appeared, but both are re-reports of stories already covered in recent days with no genuine new developments.

Ongoing coverage (no new developments):

• Claude session-cookie theft continues to circulate in Russian-language media. A securitylab.ru article reiterates that infostealer malware can hijack Claude sessions by stealing session cookies, bypassing 2FA and strong passwords. This is consistent with the original reporting from 2026-08-30 and adds no new technical detail. First reported 2026-08-30 by BleepingComputer. (src: securitylab.ru)

• BREEZE COMET financial targeting of Brazil. The Mandiant blog post on financially motivated threat actor BREEZE COMET targeting Brazilian financial services, retail, and eCommerce organisations was first reported today. No subsequent development has appeared. (src: Mandiant Blog)

No new vulnerabilities, exploits, actor disclosures, or campaign developments were identified in today's fresh findings.