Major Incidents or Breaches

  • Unlimited Technology Systems, a healthcare software company, reported a data breach impacting more than 3.8 million people, with the incident occurring in October 2025 [17].
  • Levi Strauss & Co. disclosed a cyberattack where hackers used social engineering on three employees to steal corporate data from their machines [18].
  • The North Carolina Ports Authority confirmed a cyberattack that disrupted IT systems and slowed operations at multiple port locations [20][22].
  • Metabase instances were breached in zero-day attacks exploiting a critical SQL injection vulnerability, resulting in customer data theft for organisations including Framework and Tally [2][16].

Newly Discovered Vulnerabilities

  • A maximum-severity zero-day vulnerability in Metabase’s business intelligence software allows admin access without authentication and has been actively exploited in the wild [2][16].
  • Progress Kemp LoadMaster is affected by a critical vulnerability now added to CISA’s Known Exploited Vulnerabilities (KEV) catalogue, following 792 reported exploitation attempts [4].
  • WordPress patched a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen affecting all versions, which could allow PHP code execution [8].
  • An 18-year-old use-after-free bug in Linux’s SCTP networking code can allow local users to gain root privileges and escape containers [10].
  • Security researcher Malcolm Stagg disclosed NatJack, a new attack class that manipulates NAT tables to hijack TCP sessions and spoof DNS responses [11].
  • Vulnerabilities in Claude Code and Gemini CLI allowed a GitHub issue from a non-privileged account to execute code on CI runners behind Anthropic’s and Google’s repositories, exposing workflow secrets [15].
  • Apple released a patch for a high-severity authentication bypass, and Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint [26].
  • A Bendix EC80 truck brake controller safety recall also addressed remote code execution and denial-of-service vulnerabilities, which were not publicly disclosed at the time [24].

Notable Threat Actor Activity

  • The UNC6671 group, previously known as BlackFile, has been linked to a wave of vishing attacks targeting financial services, private equity, and professional services. The group has rebranded under the names Redact, Pink, Helix, and Falcon and continues to use voice phishing (vishing) and personal phone targeting to steal SaaS data for extortion [7][23].
  • Nearly 800 malicious npm packages were published as part of a campaign to deliver cross-platform remote access trojans (RATs) and infostealers targeting Windows, Mac, and Linux systems [5].
  • ClickFix-style attacks are being used to deliver a Go-based macOS stealer capable of draining cryptocurrency wallets and exfiltrating browser, iCloud Keychain, and cached credentials [6].
  • A widespread phishing campaign employing adversary-in-the-middle (AitM) techniques is hijacking Microsoft 365 accounts to collect payroll and financial emails [12].
  • Malware can abuse Windows Hello for Business keys to maintain persistent access to Microsoft Entra ID without user awareness [14].
  • Gen’s H1 2026 Threat Report highlights two attack chains: one using compromised business inboxes and browser manipulation in banking malware campaigns, and another using clipboard hijacking to redirect payments [19].
  • IEH Corporation’s mailbox was breached via phishing [22].

Trends, Tools, or Tactics of Interest

  • Attackers reached managed systems and established persistence through exploitation of a recently disclosed flaw in N-able N-central, prompting the release of additional hotfixes [3].
  • AI-assisted research tool HTTP Terminator identified new HTTP desynchronization techniques and discovered a novel Apache zero-day [13].
  • AI-generated patches were found to fail or introduce new bugs in approximately half of cases, according to a study of over 6,000 patches [21].
  • AI chat bots are being used to send friend requests in League of Legends, indicating evolving social engineering tactics in gaming environments [27].

Regulatory or Policy Developments Affecting the Security Industry

  • Meta was ordered by a court to pay $942 million in fines and required to improve its age assurance tools to address harm to children [28].
  • The US imposed a ban on Chinese data center technology, as reported among noteworthy regulatory developments [22].

[2]: https://thehackernews.com/2026/08/metabase-zero-day-exploited-in-wild.html
[3]: https://thehackernews.com/2026/08/n-central-attackers-reach-managed.html
[4]: https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html
[5]: https://thehackernews.com/2026/08/nearly-800-malicious-npm-packages.html
[6]: https://thehackernews.com/2026/08/clickfix-attacks-deliver-macos-stealer.html
[7]: https://thehackernews.com/2026/08/unc6671-vishing-attacks-target-personal.html
[8]: https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html
[10]: https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html
[11]: https://thehackernews.com/2026/08/new-natjack-attacks-hijack-tcp-sessions.html
[12]: https://thehackernews.com/2026/08/microsoft-365-aitm-phishing-hijacks.html
[13]: https://thehackernews.com/2026/08/ai-assisted-http-terminator-finds-novel.html
[14]: https://thehackernews.com/2026/08/malware-can-abuse-windows-hello-for.html
[15]: https://thehackernews.com/2026/08/claude-code-and-gemini-cli-flaws-let.html
[16]: https://www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/
[17]: https://www.bleepingcomputer.com/news/security/unlimited-technology-systems-breach-impacts-38-million-people/
[18]: https://www.bleepingcomputer.com/news/security/levi-strauss-and-co-says-hackers-stole-corporate-data-in-cyberattack/
[19]: https://www.bleepingcomputer.com/news/security/real-emails-hijacked-payments-two-h1-2026-attack-chains/
[20]: https://www.bleepingcomputer.com/news/security/north-carolina-ports-confirms-cyberattack-disrupting-operations/
[21]: https://www.darkreading.com/application-security/ai-generated-patches-fail-half-time
[22]: https://www.securityweek.com/in-other-news-ai-slop-limits-apple-bounties-north-carolina-port-attacks-hackers-target-wall-street/
[23]: https://www.securityweek.com/vishing-extortion-group-unc6671-rebrands-after-making-millions/
[24]: https://www.securityweek.com/truck-brake-controllers-safety-recall-doubled-as-hidden-security-fix/
[26]: https://www.securityweek.com/microsoft-apple-release-fresh-security-updates/
[27]: https://www.malwarebytes.com/blog/ai/2026/08/ai-chat-bots-are-sliding-into-league-of-legends-friend-requests
[28]: https://www.malwarebytes.com/blog/uncategorized/2026/08/meta-ordered-to-pay-942-million-over-harm-to-children

Sources#

  1. Unlimited Technology Systems breach impacts 3.8 million people - bleepingcomputer.com
  2. Levi Strauss & Co. says hackers stole corporate data in cyberattack - bleepingcomputer.com
  3. North Carolina Ports confirms cyberattack disrupting operations - bleepingcomputer.com
  4. In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street - securityweek.com
  5. Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication - thehackernews.com
  6. Metabase SQLi zero-day exploited in customer data-theft attacks - bleepingcomputer.com
  7. Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts - thehackernews.com
  8. New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP - thehackernews.com
  9. 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers - thehackernews.com
  10. New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables - thehackernews.com
  11. Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets - thehackernews.com
  12. Microsoft, Apple Release Fresh Security Updates - securityweek.com
  13. Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix - securityweek.com
  14. UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data - thehackernews.com
  15. Vishing Extortion Group UNC6671 Rebrands After Making Millions - securityweek.com
  16. Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer - thehackernews.com
  17. ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets - thehackernews.com
  18. Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails - thehackernews.com
  19. Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access - thehackernews.com
  20. Real emails, hijacked payments: Two H1 2026 attack chains - bleepingcomputer.com
  21. N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist - thehackernews.com
  22. AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day - thehackernews.com
  23. AI-Generated Patches Fail Half the Time - darkreading.com
  24. AI chat bots are sliding into League of Legends friend requests - malwarebytes.com
  25. Meta ordered to pay $942 million over harm to children - malwarebytes.com