Latest Cybersecurity News, page 29

TThe Hacker Newsinmalware·Aug 30high

Global IoT Botnet, Water System Targets, and SharePoint RCE Chain Highlight Week's Threat Landscape

This week's threat landscape features a large-scale IoT botnet compromising approximately 296,000 devices to target water and wastewater systems, with over 100 facilities reportedly in the crosshairs. Separately, a remote code execution chain in Microsoft SharePoint is being actively exploited. Additional findings include malware delivery via fake login pages, counterfeit security scans, and fraudulent productivity apps, as well as the integration of AI capabilities into botnet operations and command traffic hiding within public infrastructure.

12m

TThe Hacker NewsinVulnerability·Aug 30critical

PaperCut Zero-Day Actively Exploited in Attacks, Emergency Patches Released

PaperCut has confirmed that a zero-day vulnerability in its PaperCut NG and PaperCut MF print management platforms is being actively exploited in the wild. The company has released emergency patches for versions 25 and 26, stating it is aware of confirmed customer incidents and treating the matter with the highest priority. The vulnerability affects all supported versions of the software, and organizations are urged to update immediately to mitigate active attacks.

11m

BBleepingComputerinThreat Intelligence·Aug 30high

Identity Verification Processes Exploited for Fake Worker Infiltration and Social Engineering

Recent analysis from Specops, as reported by BleepingComputer, highlights a growing threat landscape where adversaries target identity verification and account recovery mechanisms rather than attacking login interfaces directly. The report details how these processes are exploited to create fraudulent worker profiles and conduct social engineering attacks, gaining legitimate access to organizational systems. The findings underscore a shift in attacker focus toward manipulating the trust frameworks organizations rely on for identity validation.

11m

TThe Hacker NewsinCyber Attacks·Aug 30info

INTERPOL Operation Jackal IV Disrupts West African Cyber Fraud Networks

An eight-month INTERPOL-coordinated operation targeting West African organized crime groups involved in cyber fraud has resulted in 58 arrests and the identification of 263 suspects. The operation involved 22 countries across six continents and focused on networks such as Black Axe. Authorities disrupted fraudulent activities but specific victim counts and financial losses were not disclosed in the available reports.

11m

KKrebs on SecurityinThreat Actors·Aug 29high

Australian Authorities Arrest Two Alleged TeamPCP Members in Major Cybercrackdown

The Australian Federal Police (AFP) have arrested two men, aged 21 and 23, from Western Australia in connection with an alleged sophisticated cybercrime syndicate known as TeamPCP. The group is accused of creating malicious open-source software to conduct supply chain attacks against thousands of global businesses, engaging in data extortion, and perpetrating the longest running spree of software supply chain attacks ever. KrebsOnSecurity identified the 21-year-old suspect's real identity in June 2026 and has been communicating with him since. The arrests mark a significant development in the investigation of one of the most persistent supply chain threat actors observed in recent years.

12m

TThe Hacker NewsinThreat Intelligence·Aug 29info

OpenAI Disrupts Russian Influence Operation Using ChatGPT Accounts

On August 26, 2026, OpenAI announced the disruption of a cluster of ChatGPT accounts linked to Russian actors. The accounts used VPNs to bypass access restrictions and were used to generate social media posts and comments promoting the International Burke Institute (IBI) and related narratives. The content was shared across Substack, Telegram, X, Facebook, and LinkedIn. OpenAI banned the accounts for violating its terms of service, though no software vulnerabilities were exploited.

11m

TThe Hacker Newsinsecurity-advisories·Aug 29info

Analyst Perspective: Rethinking SOC Alert Triage in the Age of AI

A recent analysis published by The Hacker News explores the fundamental limitations of traditional Security Operations Center alert triage models, where systemic alert volume guarantees that most queues never receive human review. The article proposes a transition toward AI-augmented workflows designed to generate hypotheses and prioritize alerts, aiming to reduce analyst fatigue and improve mean time to respond for critical threats.

12m

BBleepingComputerinPrivacy·Aug 29info

Microsoft Begins Testing Privacy Controls for Windows 11 Desktop Applications

Microsoft has initiated testing of updated privacy controls for Windows 11, allowing users to manage desktop application access to sensitive hardware including cameras, microphones, and precise location data. The feature is currently in a testing phase and not yet deployed to production environments.

11m

BBleepingComputerinThreat Actors·Aug 29high

Australian Authorities Arrest Alleged TeamPCP Hackers in Supply-Chain Attack Crackdown

Australian Federal Police have arrested and charged two unnamed young men accused of belonging to TeamPCP, a hacking group implicated in supply-chain attacks targeting Python packages and developer environments. The operation marks a significant law enforcement action against the group, though the full scope of alleged attacks and victim impact remains under investigation.

11m

BBleepingComputerinSecurity Advisories·Aug 29info

Android 17 Introduces Enhanced Client Hello Support to Strengthen Web Browsing Privacy

Google has announced the introduction of Enhanced Client Hello (ECH) support in Android 17, a defensive privacy feature designed to encrypt DNS traffic and make web browsing harder to track. The update aims to protect user privacy from ISPs, governments, and malicious actors by obscuring the domain names being visited, while also addressing cellular network vulnerabilities and home network surveillance risks.

11m

BBleepingComputerinData Breaches·Aug 29high

Manchester Airports Group Reports Data Breach Affecting Traveler Information

Manchester Airports Group (MAG) has confirmed a cybersecurity incident involving unauthorized access to its systems, resulting in the theft of customer data including Wi-Fi sign-up information at Manchester, Stansted, and East Midlands airports. The breach was disclosed on August 27, 2026, and is currently under investigation.

11m

DDark readinginCloud Security·Aug 29info

Dark Reading Announces Virtual Event on Cloud Security in the Age of AI

Dark Reading is hosting a virtual event on November 12, 2026, focused on helping enterprises secure cloud assets in the age of AI. The event will feature expert discussions on current cloud security challenges, the role of AI in threat detection and defense, and best practices for protecting cloud infrastructure. No specific breaches, vulnerabilities, or exploitation activity are associated with this announcement; the event is purely informational and educational in nature.

11m

BBleepingComputerinZero-Day·Aug 29high

PaperCut NG and MF Zero-Day Exploitation Reported in the Wild

PaperCut has warned that a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software is being actively exploited by threat actors in zero-day attacks. The flaw allows remote code execution via crafted HTTP requests, potentially leading to full system compromise. No patch is currently available, and the company has urged immediate network segmentation and monitoring.

11m

CCISA AdvisoriesinVulnerability·Aug 29critical

Critical Vulnerabilities Discovered in Applied Systems Engineering ASE2000 V2 Communications Test Set

CISA has issued an industrial control systems advisory detailing two vulnerabilities in the Applied Systems Engineering ASE2000 V2 Communications Test Set. CVE-2018-1285 is an XXE vulnerability in the bundled log4net library that could allow arbitrary file read/write. CVE-2026-18717 is an improper certificate validation flaw that could permit TLS handshake interception and modification. Affected versions range from 2.25 to 2.37. ASE/Kalkitech has released version 2.38 addressing both issues.

11m

DDark readinginSecurity Research·Aug 29info

Cyber Deception Gains Traction as Essential Defense for Operational Technology

A Dark Reading article published on August 28, 2026, argues that the frustrating reality following an OT cyberattack—no data, no trail, and no history—necessitates the adoption of cyber deception strategies. The piece highlights how traditional OT environments often lack the security telemetry required for effective incident response and attribution, and proposes deception technologies such as decoys and fake assets as a means to generate alerts, trap attackers, and collect intelligence in these data-sparse networks.

11m

BBleepingComputerinData Breaches·Aug 29high

McKesson Reports Data Breach; ShinyHunters Claims 284 Million Patient Records Stolen

McKesson has confirmed a cybersecurity incident involving unauthorized access to third-party applications. The ShinyHunters extortion group claims to have stolen approximately 284 million patient data records and posted evidence on a hacking forum. The full scope and verification of the claims are pending official forensic analysis.

11m

CCISA AdvisoriesinVulnerability·Aug 29critical

CISA Warns of Critical Flaws in Ebyte NA111-M Gateway Allowing Full Device Compromise

CISA has published an advisory detailing 13 vulnerabilities in the Ebyte NA111-M gateway, with CVSS scores up to 9.8. The flaws could allow unauthenticated remote attackers to fully compromise the device, access sensitive information, or disrupt availability. No patch is currently available; Ebyte has not confirmed a timeline.

11m

DDark readinginPhishing·Aug 29high

Russian Nation-State Threat Actors Target EU Officials via Messaging Apps

According to a Dark Reading report published on August 27, 2026, Russian nation-state threat actors have pivoted their phishing operations from traditional email vectors to popular messaging platforms including Signal and WhatsApp. The campaign targets European Union officials, leveraging social engineering tactics to compromise communications. In response, EU governments are evaluating a strategic move away from these consumer-grade apps toward more secure, government-approved alternatives.

11m

TThe Hacker NewsinRansomware·Aug 29high

Berlin State Government Rejects Extortion After State Network Compromise

Berlin's state government confirmed it is the target of an extortion attempt following the compromise of its state administrative network in August 2026. Authorities stated they will not meet the hackers' demands. Forensic work has identified further data outflows within the Senate Department for Mobility, Transport, Climate Protection and Environment. The incident remains under investigation with no specific hacker group or ransom amount publicly verified.

21m

CCISA AdvisoriesinVulnerability·Aug 29critical

CISA Advises Critical Vulnerabilities in Xiiaozet LK100W IoT Device

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an industrial control systems advisory (ICSA-26-239-01) detailing three vulnerabilities in the Xiiaozet LK100W wireless router. The flaws, tracked as CVE-2026-78037, CVE-2026-78239, and CVE-2026-76943, affect firmware versions below 2.1.240. Successful exploitation could allow an attacker to execute arbitrary operating system commands, bypass authentication, and gain unauthorized administrative access, potentially leading to complete device compromise. Xiiaozet recommends updating to firmware version 2.1.240 or later as the primary remediation.

22m

BBleepingComputerinVulnerability·Aug 29critical

Over 8,300 Gitea Servers Remain Unpatched Amid Active Exploitation

A critical remote code execution vulnerability in Gitea version 1.22.0 and earlier is being actively exploited in the wild. According to the Shadowserver Foundation, more than 8,300 Internet-exposed Gitea instances remain unpatched despite the availability of a security update. Successful exploitation could allow attackers to execute arbitrary code on affected servers.

11m

TThe Hacker NewsinSecurity Advisories·Aug 29high

AI-Powered Attacks Compress Defender Response Times, Report Warns

A new analysis highlights how advanced AI models are enabling attackers to discover vulnerabilities, generate exploit code, and move through weaknesses faster than traditional security processes can handle. The report emphasizes that defenders now have less time to respond, urging organizations to build AI-ready security operations.

12m

CCISA AdvisoriesinCVE·Aug 29medium

Mitsubishi Electric CNC Series Vulnerability CVE-2025-2399 - Out-of-Bounds Read Risk

CISA has issued an industrial control systems advisory (ICSA-26-078-05) disclosing CVE-2025-2399, a vulnerability in Mitsubishi Electric CNC Series (Update A) products. The issue stems from improper validation of specified index, position, or offset in input (CWE-1285). Successful exploitation could allow a remote attacker to cause an out-of-bounds read, resulting in a denial-of-service condition. The vulnerability affects a wide range of Mitsubishi Electric CNC controllers including M800, M80, M700, M70, E, and C series models, with products deployed worldwide. Mitsubishi Electric has released vendor fixes requiring version updates (BC/FN/LK or later depending on model). Until patches are applied, the vendor recommends restricting access via firewall or VPN and operating affected devices within trusted LAN environments only.

12m

BBleepingComputerinSecurity Advisories·Aug 29info

ESET Highlights Threat Research and MDR as Key Defensive Tools for SMBs

ESET published an advisory-style article on BleepingComputer discussing how threat research and Managed Detection and Response (MDR) services can help small and medium-sized businesses (SMBs) improve their security posture. The piece emphasizes the value of combining threat intelligence, continuous monitoring, and human expertise to achieve faster detection and response. No specific attack or vulnerability is described; the content is informational and vendor-sponsored.

11m