“AI”

Widening attacks against US water systems continue, targeting Internet-exposed PLCs; attribution reports suggest Iran-linked activity in some cases.

China-linked Storm-1175 deploys StormEncryptor ransomware, likely exploiting an N-able N-central vulnerability to gain initial access.

Microsoft warns China-linked actors are exploiting a critical flaw in N-able to deploy ransomware broadly as a launchpad.

Critical vulnerabilities discovered in Belgian eID software put two million users at risk of identity compromise.

Ransomware group claims 6 TB exfiltration and hijacks a hospital's Facebook page, exposing highly sensitive patient data categories.

CopyEscape (CVE-2026-17106) allows malicious docker cp operations to overwrite host files and potentially achieve root execution.

CISA confirms active exploitation of a high-severity Microsoft SharePoint RCE now used in ransomware intrusions and lateral movement.

Windows Plug and Play abuse can fetch signed vendor software and escalate to SYSTEM on fully updated Windows 11 via USB emulation.

Ceva Logistics suffers supply-chain data breach, disrupting warehouse operations and impacting multiple European retail customers.

Attackers used a private cellular network to intrude on a Polish heat-and-power plant, shutting a steam turbine and disrupting treatment systems.

A Chrome extension removed for stealing AI chats returned to the Web Store and resumed malicious activities — immediate remediation recommended.

Metabase zero-day allows remote admin takeover and data exfiltration, posing broad downstream risk to analytics consumers.

US and South Korean agencies warn of Gunra exploiting firewall and VPN flaws to hit government and critical infrastructure.

Microsoft released massive August updates covering hundreds of CVEs, including multiple zero-days — prioritize exploited and high-impact fixes.