Hiding Prompt Injection in Legal Filing
What security leaders need to know about the affected systems.
Month: August 2026
Aurora Ransomware Group Leverages AI Coding Tool in Targeted Intrusions
Researchers have linked the Russian-speaking Aurora ransomware operation to the use of Cursor, an AI-powered…
PaperCut NG/MF Unsafe Reflection Vulnerability Added to CISA’s Known Exploited Vulnerabilities Catalogue
CVE-2026-82078 allows arbitrary Java bytecode execution under the PaperCut server process and can be chained…
ChatGPT Work Combines Agentic Capabilities With an Open Security Question
OpenAI's new ChatGPT Work product bundles code execution, full browser automation, a persistent filesystem, and…
AI Kill Switch Legislation Is Coming — and Organisations Are Not Ready
Proposed laws that would require companies to throttle, suspend, or shut down AI agents raise…
ZBT Routers Shipped With Two Factory-Installed Implants Granting Root Access Without Authentication
VulnCheck has identified two undocumented backdoors embedded in firmware from Chinese router manufacturer Shenzhen Zhibotong…
Two Australians Arrested Over TeamPCP Supply Chain Attacks
The Australian Federal Police have charged two Western Australia men linked to a cybercrime collective…
CISA Adds Six Actively Exploited Vulnerabilities Spanning Microsoft, Linux, Red Hat and Citrix
The US cybersecurity agency's Known Exploited Vulnerabilities catalogue grew by six entries on 26 August,…
CISA Adds Six-Year-Old Microsoft SQL Server RCE Flaw to Known Exploited Vulnerabilities Catalogue
CVE-2019-1068 carries a CISA-mandated remediation deadline of 29 August 2026, giving organisations a finite window…
US Authorities Disrupt Eight-Year Chinese Espionage Operation Targeting Federal Agencies and Critical Infrastructure
The FBI and Justice Department seized domains and exposed a Chinese government-linked front company whose…