Summary:
Google has issued an emergency security update for its Chrome browser to address a high-severity zero-day vulnerability, CVE-2026-85046, which is confirmed to be actively exploited in the wild. The flaw is a type confusion bug within the V8 JavaScript engine that could allow a remote attacker to execute arbitrary code. The update, which also fixes 11 other vulnerabilities, is being rolled out for Windows, macOS, and Linux users, who are urged to apply the patch immediately to mitigate the risk of compromise.

Severity: Critical

Categories: Vulnerability, Patch Management

Article Type: Advisory

Reading Time: 5 minutes

Meta Description: Google has released an emergency patch for a high-severity Chrome zero-day, CVE-2026-85046, which is actively exploited to achieve remote code execution.

Article Slug: google-patches-actively-exploited-chrome-zero-day-vulnerability-cve-2026-85046

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
CISA has added two critical vulnerabilities in SonicWall SMA 1000 series appliances to its Known Exploited Vulnerabilities (KEV) catalog, warning they are being actively exploited. The flaws, CVE-2026-83548 (SSRF, CVSS 10.0) and CVE-2026-83549 (Command Injection, CVSS 7.8), can be chained to achieve unauthenticated remote code execution. Federal agencies are mandated to patch by September 5, 2026, and all organizations using affected models are urged to apply updates immediately.

Severity: Critical

Categories: Vulnerability, Patch Management, Cyberattack

Article Type: Advisory

Reading Time: 5 minutes

Meta Description: CISA warns of active exploitation of critical SonicWall SMA 1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) that can be chained for unauthenticated RCE.

Article Slug: cisa-warns-of-active-exploitation-of-critical-sonicwall-sma-1000-vulnerabilities

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
A 12-year-old high-severity vulnerability, CVE-2026-6471 or "PostGREShell," affects PostgreSQL versions since 9.4. The flaw allows a user with 'Replication' privileges to execute arbitrary code, escalate to superuser, and create a persistent backdoor. The bug lies in the logical decoding feature's failure to validate plugin names, enabling path traversal attacks. Patches have been released, and administrators are urged to update systems and audit accounts with replication rights immediately.

Severity: High

Categories: Vulnerability, Data Breach, Patch Management

Article Type: NewsArticle

Reading Time: 5 minutes

Meta Description: A 12-year-old vulnerability in PostgreSQL (CVE-2026-6471), dubbed PostGREShell, allows for remote code execution and server takeover. Patches are available.

Article Slug: decade-old-postgre-shell-flaw-allows-takeover-of-postgresql-servers

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
The Settra ransomware group has claimed responsibility for a cyberattack on MedEvolve, a U.S.-based medical billing and practice management company. On September 3, 2026, the group posted the company on its dark web leak site, alleging an attack on August 11 that resulted in the theft of 820GB of sensitive internal documents. MedEvolve has not yet confirmed the breach. This incident highlights the continued targeting of the healthcare sector and its supply chain by ransomware gangs.

Severity: High

Categories: Ransomware, Data Breach, Threat Actor

Article Type: NewsArticle

Reading Time: 5 minutes

Meta Description: The Settra ransomware group has claimed a cyberattack on U.S. medical billing firm MedEvolve, threatening to leak 820GB of sensitive internal documents.

Article Slug: settra-ransomware-group-claims-attack-on-us-medical-billing-firm-medevolve

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Iranian state-sponsored hacking groups have reportedly expanded their cyber operations to target U.S. telecommunications and energy providers. This represents a significant escalation from previous campaigns focused on water and wastewater systems. While recent attempts have been unsuccessful, the activity, which targets internet-exposed industrial control systems, signals a strategic focus on reconnaissance and gaining access to a wider range of U.S. critical infrastructure, raising concerns among federal officials.

Severity: High

Categories: Threat Actor, Cyberattack, Industrial Control Systems

Article Type: Analysis

Reading Time: 5 minutes

Meta Description: Iranian state-sponsored hackers have reportedly expanded their cyberattacks to target U.S. telecommunications and energy providers, signaling an escalation in threats.

Article Slug: iranian-hackers-expand-cyber-targeting-to-us-telecom-and-energy-sectors

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
CISA has added seven actively exploited vulnerabilities to its KEV catalog, with a significant focus on AI/ML infrastructure. Three of the new additions—CVE-2026-59822 in LiteLLM, CVE-2026-48710 in Starlette, and CVE-2026-82329 in JFrog Artifactory—affect widely used AI development tools. Exploitation of these flaws has been linked to the Qilin ransomware group and cryptocurrency miners. The update also includes previously reported flaws in SonicWall and others, mandating rapid remediation for federal agencies.

Severity: Critical

Categories: Vulnerability, Patch Management, Threat Intelligence

Article Type: Advisory

Reading Time: 5 minutes

Meta Description: CISA added seven actively exploited vulnerabilities to its KEV catalog, including three flaws in AI/ML tools LiteLLM, Starlette, and JFrog Artifactory.

Article Slug: cisa-adds-7-flaws-to-kev-catalog-highlighting-attacks-on-ai-infrastructure

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
CISA has issued an advisory for a high-severity vulnerability (CVE-2026-77393) in Inductive Automation's Ignition ICS platform. The flaw, rated 8.8 on the CVSS scale, is an incorrect default permission setting that allows any authenticated user to create new projects, potentially leading to unauthorized modifications in industrial environments. The issue affects Ignition versions 8.1.53 and earlier and has been fixed in version 8.1.54. Users in critical manufacturing and energy sectors are urged to upgrade.

Severity: High

Categories: Industrial Control Systems, Vulnerability, Patch Management

Article Type: Advisory

Reading Time: 5 minutes

Meta Description: CISA issued an advisory for a high-severity default permissions flaw (CVE-2026-77393) in Inductive Automation's Ignition ICS platform, urging users to upgrade.

Article Slug: cisa-advisory-for-inductive-automation-ignition-vulnerability-cve-2026-77393

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
OpenAI has announced the "Daybreak for Frontline Defenders" program, a $1 billion initiative to equip under-resourced cybersecurity teams at critical infrastructure entities with advanced AI tools. The program will provide subsidized access to OpenAI's frontier models and specialized training to help defenders combat sophisticated cyber threats. A pilot program, focused on water utilities and other public sector entities, will be launched in collaboration with the Multi-State Information Sharing and Analysis Center (MS-ISAC).

Severity: Informational

Categories: Policy and Compliance, Security Operations, Threat Intelligence

Article Type: NewsArticle

Reading Time: 4 minutes

Meta Description: OpenAI announced a $1 billion program, "Daybreak for Frontline Defenders," to provide advanced AI tools and training to cybersecurity teams at critical infrastructure sites.

Article Slug: openai-pledges-1b-to-fortify-critical-infrastructure-with-defensive-ai

Published Date: Fri, 04 Sep 2026 00:00:00 GMT

Created Date: Fri, 04 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed that a widespread cyber campaign in July 2026 targeted over 100 systems in the U.S. Water and Wastewater Systems (WWS) sector. The attacks, widely attributed to Iranian state-aligned actors, exploited internet-exposed industrial control devices, leading to operational disruptions, including flooding and boil-water notices in at least 12 states. The incidents highlight critical security gaps in the nation's vital infrastructure.

Severity: Critical

Categories: Industrial Control Systems, Cyberattack, Threat Actor

Meta Description: CISA reports that a widespread cyber campaign in July 2026 targeted over 100 U.S. Water and Wastewater Systems by exploiting internet-exposed industrial controls, with attribution pointing to Iranian actors.

Article Slug: over-100-us-water-systems-targeted-in-widespread-cyber-campaign

Published Date: Sun, 30 Aug 2026 00:00:00 GMT

Created Date: Sun, 30 Aug 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 12:00:00 GMT

Update Count: 1

Update History: 1 update recorded

Read Full Article →

Summary:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list includes critical flaws in SonicWall, Kestra, and JFrog products. This action falls under the new Binding Operational Directive (BOD) 26-04, which imposes accelerated patching deadlines on federal agencies, some as short as three days. The vulnerabilities range from server-side request forgery and command injection to improper authentication, with threat actors like the Qilin ransomware group linked to the exploitation of some flaws.

Severity: Critical

Categories: Vulnerability, Patch Management, Threat Intelligence

Meta Description: CISA has added seven actively exploited vulnerabilities to the KEV catalog, including critical flaws in SonicWall, Kestra, and JFrog, mandating urgent patching.

Article Slug: cisa-adds-seven-actively-exploited-vulnerabilities-to-kev-catalog

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 12:00:00 GMT

Update Count: 1

Update History: 1 update recorded

Read Full Article →

Summary:
SonicWall has released urgent security patches for two zero-day vulnerabilities in its SMA 1000 series appliances. The flaws, a critical-rated server-side request forgery (SSRF) and a high-severity command injection, are being actively chained by attackers to achieve unauthenticated remote code execution. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, affect models 6210, 7210, and 8200v. CISA has added both to its Known Exploited Vulnerabilities (KEV) catalog, mandating immediate action from federal agencies and strongly advising all customers to apply the hotfixes.

Severity: Critical

Categories: Vulnerability, Cyberattack, Patch Management

Meta Description: SonicWall urges customers to patch two actively exploited zero-day vulnerabilities (CVE-2026-83548, CVE-2026-83549) in SMA 1000 series appliances leading to RCE.

Article Slug: sonicwall-urges-patching-for-two-actively-exploited-zero-day-vulnerabilities

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Fri, 04 Sep 2026 12:00:00 GMT

Update Count: 1

Update History: 1 update recorded

Read Full Article →

Summary:
The FBI is investigating a colossal data breach after a dark web marketplace named 'Nexus' began selling a database containing over 170 million digital identity document scans. The data, which includes driver's licenses, ID cards, and medical marijuana cards, primarily belongs to citizens of the United States and Canada. The service was discovered after its operator advertised it on a Russian cybercrime forum. The database appears to be fed by an active, ongoing breach, as it is reportedly updated in real-time, posing a severe and continuous threat of identity theft and fraud.

Severity: High

Categories: Data Breach, Threat Intelligence

Meta Description: The FBI is investigating a massive data breach involving a dark web marketplace selling over 170 million identity document scans from US and Canadian citizens.

Article Slug: fbi-probes-massive-data-leak-of-170-million-north-american-id-scans

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Multiple ransomware groups, including Akira, Qilin, and Direwolf, have launched a wave of attacks against organizations across healthcare, finance, government, and manufacturing sectors. Victims announced on data leak sites include New York's Blossom Health, Gale Credit Union in Illinois, the City of Ormond Beach in Florida, and a Texas ambulance service. The attacks employ double extortion tactics, with threat actors exfiltrating sensitive personal and medical data before encrypting systems and demanding ransoms.

Severity: High

Categories: Ransomware, Cyberattack, Data Breach

Meta Description: Ransomware groups including Akira, Qilin, and Direwolf target healthcare, finance, and government entities in a widespread campaign, exfiltrating sensitive data.

Article Slug: ransomware-blitz-hits-healthcare-finance-and-government-entities

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Threat actors are actively exploiting and chaining two zero-day vulnerabilities in PaperCut NG/MF print management software to achieve unauthenticated remote code execution. The attacks have escalated from initial reconnaissance to hands-on-keyboard intrusions. The flaws, CVE-2026-81578 (authentication bypass) and CVE-2026-82078 (unsafe dynamic class loading), turn exposed print servers into a gateway for deeper network compromise. PaperCut has released emergency patches and hardening guidance for the approximately 1,000 instances estimated to be exposed online.

Severity: Critical

Categories: Vulnerability, Cyberattack

Meta Description: Active exploitation of two chained zero-day vulnerabilities (CVE-2026-81578, CVE-2026-82078) in PaperCut NG/MF software is leading to active network intrusions.

Article Slug: active-exploitation-of-papercut-zero-days-escalates-to-intrusions

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Rockwell Automation has released a significant set of security updates, addressing more than a dozen vulnerabilities across its portfolio of industrial control systems (ICS) and operational technology (OT) products. The patches fix critical and high-severity flaws, including denial-of-service (DoS) bugs in RSLinx Classic, a remote code execution vulnerability in FactoryTalk Historian, and multiple cross-site scripting (XSS) issues in ArmorStart controllers. The updates are critical for operators in manufacturing and critical infrastructure to prevent operational disruptions.

Severity: High

Categories: Patch Management, Industrial Control Systems, Vulnerability

Meta Description: Rockwell Automation has released patches for over a dozen vulnerabilities in its industrial products, including RSLinx Classic, FactoryTalk, and ControlLogix.

Article Slug: rockwell-automation-patches-over-a-dozen-flaws-in-industrial-products

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Google and Mozilla have released major security updates for their Chrome and Firefox web browsers, addressing a combined total of 55 vulnerabilities. The patches fix several critical and high-severity flaws that could be exploited for remote code execution. Google's Chrome update resolves 26 bugs, including two critical use-after-free vulnerabilities (CVE-2026-84353 and CVE-2026-84352). Mozilla's Firefox 155 release fixes 29 defects, including 13 high-severity issues related to memory corruption and sandbox escapes. Users are urged to update their browsers immediately to protect against potential attacks.

Severity: High

Categories: Patch Management, Vulnerability

Meta Description: Google and Mozilla have released critical security updates for Chrome and Firefox, patching dozens of vulnerabilities including remote code execution (RCE) flaws.

Article Slug: google-and-mozilla-patch-dozens-of-browser-vulnerabilities

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is expected to issue its final rule for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) in September 2026. This landmark regulation will mandate that covered critical infrastructure entities report substantial cyber incidents to CISA within 72 hours of discovery and any ransomware payments within 24 hours. The rule aims to provide CISA with greater visibility into the national threat landscape, but presents a significant operational challenge for organizations to meet the tight deadlines.

Severity: Informational

Categories: Policy and Compliance, Regulatory

Meta Description: CISA will issue the final rule for the CIRCIA cyber incident reporting act in September 2026, mandating 72-hour incident and 24-hour ransom payment reporting.

Article Slug: cisa-to-issue-final-circia-cyber-attack-reporting-rule-in-september-2026

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Unit 42 researchers have uncovered two distinct but overlapping cyberattack campaigns, tracked as CL-CRI-1131 and CL-CRI-1163, targeting organizations in Latin America. The threat actors are leveraging commercial Large Language Models (LLMs) like Claude and GPT-4, accessed via the open-source NextChat interface, to generate scripts and troubleshoot data exfiltration tasks. The campaigns target Mexican federal government and transportation entities, as well as the Brazilian financial sector. Key TTPs include the use of shared SOCKS5 proxy infrastructure, dynamic DNS for command and control, and job-themed phishing for initial access. The attackers' reliance on AI for on-the-fly script generation was exposed through operational security errors, providing defenders a window into their methods.

Severity: High

Categories: Threat Actor, Malware, Threat Intelligence

Article Type: Report

Reading Time: 8 minutes

Meta Description: Unit 42 research details two cyber campaigns targeting Latin American organizations with AI tools like Claude and GPT-4 for data exfiltration from government and financial sectors.

Article Slug: attackers-expose-ongoing-ai-tool-use-targeting-organizations-in-latin-america

Published Date: Thu, 03 Sep 2026 00:00:00 GMT

Created Date: Thu, 03 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 15:00:00 GMT

Read Full Article →

Summary:
Print management software provider PaperCut has issued an urgent security warning about a vulnerability chain being actively exploited in the wild. The flaws, affecting all versions of PaperCut NG and MF, can be chained to achieve pre-authentication remote code execution (RCE). The attack combines an authentication bypass (CVE-2026-81578, CVSS 8.8) with an unsafe dynamic class-loading issue (CVE-2026-82078, CVSS 9.4). PaperCut has released emergency patches and strongly advises customers with internet-facing servers to apply them immediately or restrict access via firewall rules. Security firm Huntress has confirmed observing exploitation in customer environments.

Severity: Critical

Categories: Vulnerability, Patch Management, Cyberattack

Article Type: Advisory

Reading Time: 6 minutes

Meta Description: PaperCut has released emergency patches for a critical, actively exploited zero-day vulnerability chain (CVE-2026-81578, CVE-2026-82078) that allows for RCE.

Article Slug: papercut-warns-of-actively-exploited-zero-day-rce-vulnerability

Published Date: Sat, 29 Aug 2026 00:00:00 GMT

Created Date: Sat, 29 Aug 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 12:00:00 GMT

Update Count: 1

Update History: 1 update recorded

Read Full Article →

Summary:
SonicWall has issued urgent patches for two zero-day vulnerabilities, CVE-2026-83548 and CVE-2026-83549, affecting its SMA 1000 series appliances. The flaws, a critical server-side request forgery (SSRF) and a command injection, are being actively chained by threat actors to achieve unauthenticated remote code execution. This marks the second time in seven weeks a similar SSRF-to-injection attack chain has targeted the product line, indicating a persistent architectural weakness. Organizations are urged to apply the patches immediately to prevent compromise.

Severity: Critical

Categories: Vulnerability, Cyberattack, Patch Management

Meta Description: SonicWall has patched two actively exploited zero-day vulnerabilities, including a critical SSRF (CVE-2026-83548), in its SMA 1000 series appliances.

Article Slug: sonicwall-sma1000-zero-day-vulnerabilities-actively-exploited

Published Date: Wed, 02 Sep 2026 00:00:00 GMT

Created Date: Wed, 02 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 00:00:00 GMT

Update Count: 2

Update History: 2 updates recorded

Read Full Article →

Summary:
Google has released a security update for its Chrome browser, version 152.0.7977.75 for Windows/Mac and 152.0.7977.76 for Linux, addressing 26 vulnerabilities. The patch includes fixes for two critical use-after-free flaws, CVE-2026-84353 in Shared Tab Groups and CVE-2026-84352 in WebGL. These vulnerabilities could allow a remote attacker to execute arbitrary code on a victim's device by luring them to a malicious website. Google reports no evidence of active exploitation.

Severity: High

Categories: Vulnerability, Patch Management

Meta Description: Google has released a security update for Chrome, patching 26 flaws, including two critical use-after-free vulnerabilities (CVE-2026-84353, CVE-2026-84352).

Article Slug: google-patches-critical-use-after-free-vulnerabilities-in-chrome

Published Date: Wed, 02 Sep 2026 00:00:00 GMT

Created Date: Wed, 02 Sep 2026 15:00:00 GMT

Updated Date: Thu, 03 Sep 2026 00:00:00 GMT

Update Count: 1

Update History: 1 update recorded

Read Full Article →