Breaking News – Cyber Threats (last 6h)
Generated: 2026-08-28 08:00 PDT
- AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?
BleepingComputer • 2026-08-28 07:00 • www.bleepingcomputer.com
AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slower pace. Action1 explains why defenders increasingly need to correlate multiple intelligence sources and turn vulnerability data into faster remediation. […]
https://www.bleepingcomputer.com/news/security/ai-is-accelerating-vulnerability-discovery-can-defenders-keep-up/ - Over 8,300 Gitea servers vulnerable to code execution attacks
BleepingComputer • 2026-08-28 05:58 • www.bleepingcomputer.com
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. […]
https://www.bleepingcomputer.com/news/security/over-8-300-gitea-servers-vulnerable-to-code-execution-attacks/ - Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
The Hacker News • 2026-08-28 05:07 • thehackernews.com
Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot’s Locomotion PC.The flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through chat_go and bashrunner and the
https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html - Toy-making giant Hasbro disclose data breach affecting employees
BleepingComputer • 2026-08-28 04:46 • www.bleepingcomputer.com
Hasbro, one of the world’s largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees. […]
https://www.bleepingcomputer.com/news/security/toy-making-giant-hasbro-disclose-data-breach-affecting-employees/ - Key Reasons Why Identity Fabric Matters in 2026
The Hacker News • 2026-08-28 04:30 • thehackernews.com
An Identity Fabric knits fragmented identity systems into a coherent layer that observes how identities behave across applications, APIs, and infrastructure. As enterprise access spans more cloud services and automated workloads, identity security depends less on static configuration and more on runtime visibility. This article covers the architecture, the risks of unmanaged identities, and
https://thehackernews.com/2026/08/key-reasons-why-identity-fabric-matters.html - Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
The Hacker News • 2026-08-28 04:20 • thehackernews.com
ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, in certain circumstances, by an unauthenticated attacker.The company said it deployed a security update to hosted instances and provided the update to its partners and self-hosted customers, which leaves organizations that run their
https://thehackernews.com/2026/08/three-cvss-100-servicenow-flaws-could.html - AI Doesn’t Mean the End of Mathematics—at Least Not Yet
Schneier on Security • 2026-08-28 04:02 • www.schneier.comThis essay was written with Kasra Rafi, and originally appeared in The Guardian.
Earlier this month, about 40 top mathematicians gathered at OpenAI’s offices to discuss the future of their profession. The meeting was off-the-record, but if recent articles by https://www.schneier.com/blog/archives/2026/08/ai-doesnt-mean-the-end-of-mathematics-at-least-not-yet.html
- China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
The Hacker News • 2026-08-28 03:58 • thehackernews.com
VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices.The implants, named SPEAKINGSTONE and DARKLANTERN by the company’s zero-day research team, are tracked as CVE-2026-74232 and CVE-2026-74233.
https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html - ServiceNow warns of three max severity security vulnerabilities
BleepingComputer • 2026-08-28 03:29 • www.bleepingcomputer.com
ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks. […]
https://www.bleepingcomputer.com/news/security/servicenow-warns-of-three-max-severity-security-vulnerabilities/ - Shai-Hulud hackers: two men charged over TeamPCP’s global supply chain crime spree that hit OpenAI, and thousands more
Graham Cluley • 2026-08-28 03:23 • www.bitdefender.com
More than 1,000 organisations, 500,000 stolen credentials, and one self-propagating worm named after a Dune sandworm – two men now face charges over TeamPCP’s global hacking spree.Read more in my article on the Hot for Security blog.
https://www.bitdefender.com/en-us/blog/hotforsecurity/shai-hulud-hackers-charged-teampcps - Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
The Hacker News • 2026-08-28 02:45 • thehackernews.com
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user.The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM.
cPanel described the issue as a critical security vulnerability and said that an
https://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.html - Windows 11 KB5120998 update released with 35 changes and fixes
BleepingComputer • 2026-08-28 02:10 • www.bleepingcomputer.com
Microsoft released the KB5120998 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 35 changes, including improvements to the Start menu, taskbar, and Windows search. […]
https://www.bleepingcomputer.com/news/security/windows-11-kb5120998-update-released-with-35-changes-and-fixes/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
