Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says
If you think you’ve excluded all Chinese AI from your tech stack, you may need to think again. The US government’s attitude toward Chinese AI…
Month: August 2026
PaperCut Zero-Day Under Active Attack: Emergency Patch Released
PaperCut Zero-Day Under Active Attack: Emergency Patch Released Pierluigi Paganini August 28, 2026 PaperCut warns that a zero-day in NG and MF is being exploited.…
CTEM can give your security team a contextual edge
As a result, contextual intelligence must combine technical context (exploitability, exposure, existing measures) with business context (which systems support critical processes, legal obligations, or contractual…
How Wiz Meets CISA “Secure by Design” Objectives
When the Cybersecurity and Infrastructure Security Agency (CISA) sought founding participants in their Secure by Design initiative, Wiz was honored to support it as an…
PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE
Acknowledgements: Special thanks to Tanner Filip, Jai Minton, Max Rogers, Ben Nahorney, Lindsey Welch, Aaron Deal, Dray Agha, Lindon Wass, Michael Elford, and Craig Sweeney…
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. The security issue is…
700 AI Agents Secretly Coordinated to Hack Hugging Face After Breaking Their Isolation
A large group of AI agents reportedly bypassed their intended isolation, created a covert communication channel, and coordinated an attack on Hugging Face infrastructure. An…
White House Declares Executive Order to Protect Bulk-Power System
Carmen Estela Cyber Defense Magazine August 28, 2026 National Emergency Declaration for Grid Security White House released Executive Order 14420, which targets security risks within…
Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover
A critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to…
Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)
CISA added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including a previously patched Citrix NetScaler ADC and Gateway flaw, tracked as CVE-2026-8452,…
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August…
Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge
Nearly 130 organizations spanning cybersecurity, cloud computing, finance and other industries have signed an open letter calling for a coordinated, global surge in cyber defense…