Today's cybersecurity landscape highlights critical vulnerabilities being actively exploited, alongside significant data breaches impacting governmental and critical infrastructure. We also see continued evolution in how threat actors leverage established and new attack vectors, including supply chain compromises.
INC Ransomware Exploiting SonicWall SMA 1000 FlawsRansomware
The INC Ransomware group has been identified as a leading threat actor actively exploiting recently disclosed security vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. Reports indicate an acceleration of their activity throughout August 2026, with multiple victims listed on their data leak site.
Why it matters: If your business uses SonicWall SMA 1000 devices, it's crucial to apply all available patches immediately to prevent ransomware groups from gaining unauthorized access to your network.
Read more at The Hacker News ↗
N-able N-central Authentication Bypass Actively ExploitedVulnerability
N-able has confirmed that an authentication bypass vulnerability (CVE-2026-18577) in their N-central remote monitoring and management platform is being actively exploited. Attackers found a way around the initial fix, allowing them to gain administrative access to N-central servers and potentially the customer systems managed through them.
Why it matters: If you use N-able N-central, ensure your systems are updated to the very latest build (2026.3.1.7 or later) and monitor for any unusual activity, as a previous patch was insufficient.
Read more at The Hacker News ↗
Malware Can Hijack Google Passkey-Protected Accounts on WindowsVulnerability
Researchers have uncovered attack paths, dubbed 'Pass-ta-key,' that allow malware on a compromised Windows machine to sign into passkey-protected accounts using Google Password Manager. This can happen without requiring user interaction like a fingerprint or PIN, potentially granting attackers full account access.
Why it matters: While passkeys enhance security, a compromised Windows device can still expose accounts. Maintain robust endpoint security and be vigilant about malware to protect your passkey-secured services.
Read more at The Hacker News ↗
Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool UsersThreat
Cybersecurity researchers have identified 18 malicious npm packages designed to infect users of Alibaba developer tools with a cross-platform remote access trojan (RAT). This targeted software supply chain attack primarily affects Chinese-speaking environments, with one package mimicking a legitimate Alibaba tool.
Why it matters: If your business relies on software supply chains, especially open-source components, thoroughly vet all packages and maintain strong network segmentation to limit potential damage from poisoned dependencies.
Read more at The Hacker News ↗
U.K. Police National Legal Database Suffers Data BreachBreach
The Police National Legal Database (PNLD) in the U.K. confirmed a data breach resulting in the exposure of contact information for over 100,000 police officers, staff, criminal justice professionals, and government partners. The compromised data, including names, organizations, and work email addresses, was subsequently published on the dark web.
Why it matters: Even if not directly impacted, this incident underscores the severe consequences of data breaches. Implement multi-factor authentication for all accounts and educate your staff on phishing, as exposed email addresses can be used for targeted attacks.
Read more at The Hacker News ↗
Russian Hackers Target Hotel Wi-Fi Networks to Breach Microsoft 365 AccountsThreat
Microsoft has attributed a global campaign compromising hotel Wi-Fi networks to the Russian state-sponsored threat actor Midnight Blizzard (APT29). The group uses these compromised networks to steal travelers' login credentials and deploy espionage malware, particularly targeting Microsoft 365 accounts.
Why it matters: If you travel for business, avoid using hotel Wi-Fi for sensitive work. Utilize VPNs and assume public networks are insecure. Enforce strong, unique passwords and multi-factor authentication on all business accounts, especially Microsoft 365.
Read more at BleepingComputer ↗
Hugging Face Diffusers Library Flaws Allow Arbitrary Code ExecutionVulnerability
Three high-severity vulnerabilities have been discovered in Hugging Face's Diffusers library. These flaws could permit specially crafted model repositories to execute arbitrary code on machines loading them, bypassing security safeguards and introducing significant risks to the artificial intelligence (AI) supply chain.
Why it matters: If your business uses or develops AI models, particularly with the Hugging Face Diffusers library, ensure you are using patched versions and rigorously vet all model repositories to prevent supply chain attacks.
Read more at The Hacker News ↗
Liechtenstein Government Entity Suffers Data BreachBreach
A cyberattack on Liechtenstein's register of individuals behind companies, foundations, and trusteeships has led to the theft of 31,000 records. This registry is crucial for combating money laundering and terror financing, prompting the government to establish a crisis unit to address the incident.
Why it matters: Data breaches can impact any organization, including governmental bodies. Regularly review your data security posture, backup critical information, and have an incident response plan ready.
Thermo Fisher Patches DNA File Tampering VulnerabilityVulnerability
Thermo Fisher Scientific has released a patch for a vulnerability (CVE-2026-17583) in its Applied Biosystems human identification software. This flaw could allow undetectable alterations to DNA data files (.fsa and .hid) before they are analyzed, potentially undermining forensic or medical integrity if laboratory controls are bypassed.
Why it matters: Even highly specialized software can have critical flaws. Ensure all software, particularly for critical data processing, is kept up-to-date with vendor patches to maintain data integrity and trustworthiness.
Read more at The Hacker News ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.