IT Security Awareness News Roundup for September 2026

Added at 09/01/2026, last update at 09/11/2026

What matters most this month in IT security and awareness, and what should guide the attention of CIOs, CISOs, and CEOs? (regularly updated)

A quick update from us

New free Employee Phishing Simulator QuickCheck as SCORM module

In this free E-Mail Phishing Simulator, Employees shall review each message, identify whether it is legitimate or phishing, and use the clues to sharpen their judgment. LMS reporting gives managers valuable insights into how their employees respond to common and sometimes deceptive phishing emails, helping identify potential gaps in security awareness and areas...

Academy

Secure Programming / Coding Failures

Cross-Site Scripting (XSS) still exists in professional Applications!

What about your in-house development? Security in custom-made software – do you rely solely on frameworks? Is Secure Programming background knowledge important to your team and project managers:

Academy

IT Security Awareness Failures

Microsoft/Malwarebytes/HackerNews: Fake CAPTCHA Turns Users into Their Own Attackers

Cybercriminals are using compromised websites and fake Cloudflare CAPTCHA prompts to trick users into copying and executing malicious PowerShell commands on their own Windows systems. The TerminalFix campaign then deploys a multi-stage payload that performs Active Directory reconnaissance and establishes a reverse tunnel, potentially giving attackers access to other systems inside the corporate network. (09/03/2026)

Security Awareness - User detects fake phishing link

Academy Source link 1 Source link 2 Source link 3

HissenIT SCORM-based security awareness training for all employees (pay-once)

HissenIT - with over 20 years of experience in IT security and awareness training (onsite and online) - offers SCORM-based security training material for employees. Looking to implement a foundational security curriculum in your LMS? Whether you use SAP SuccessFactors, Moodle Workplace, or Cornerstone, we can help you deploy SCORM-compliant content that actually sticks.

General Employees: Security Awareness and Knowledge for everyone
General Managers and Project Managers: How to setup security processes within projects and companies in general
Web Developers: Secure Programming of Web and Cloud Applications

HissenIT is a content creator & vendor which means - even for large enterprises - there is no vendor risk involved. The content is independent (offline) from its vendor and runs in every LMS. Moreover, HissenIT does not believe in subscription-based licenses. We believe in partnership based on results, we provide material that you want. Hence, all our course packages are pay-once lifetime licenses.