IT Security Awareness News Roundup for September 2026

Added at 09/01/2026, last update at 09/03/2026

What matters most this month in IT security and awareness, and what should guide the attention of CIOs, CISOs, and CEOs? (regularly updated)

IT Security Awareness Failures

Microsoft/Malwarebytes/HackerNews: Fake CAPTCHA Turns Users into Their Own Attackers

Cybercriminals are using compromised websites and fake Cloudflare CAPTCHA prompts to trick users into copying and executing malicious PowerShell commands on their own Windows systems. The TerminalFix campaign then deploys a multi-stage payload that performs Active Directory reconnaissance and establishes a reverse tunnel, potentially giving attackers access to other systems inside the corporate network. (09/03/2026)

Security Awareness - User detects fake phishing link

Academy Source link 1 Source link 2 Source link 3

HissenIT SCORM-based security awareness training for all employees (pay-once)

HissenIT - with over 20 years of experience in IT security and awareness training (onsite and online) - offers SCORM-based security training material for employees. Looking to implement a foundational security curriculum in your LMS? Whether you use SAP SuccessFactors, Moodle Workplace, or Cornerstone, we can help you deploy SCORM-compliant content that actually sticks.

General Employees: Security Awareness and Knowledge for everyone
General Managers and Project Managers: How to setup security processes within projects and companies in general
Web Developers: Secure Programming of Web and Cloud Applications

HissenIT is a content creator & vendor which means - even for large enterprises - there is no vendor risk involved. The content is independent (offline) from its vendor and runs in every LMS. Moreover, HissenIT does not believe in subscription-based licenses. We believe in partnership based on results, we provide material that you want. Hence, all our course packages are pay-once lifetime licenses.