Weekly cyber roundup flags AI package traps, CEO phishing kits, and 5,000 Dropbox logins

Attackers this week leaned on tools people already trust—help-desk chats, document shares, AI install lists, and leftover logins—rather than novel zero-days, according to a September 3, 2026 cybersecurity bulletin covering twenty incidents. Microsoft, cloud vendors, and AI labs described campaigns that turn a single click, a mistyped URL, or an unclaimed package name into remote access, ransomware, or stolen identity data.