Security teams can inspect requests, validate credentials, and fingerprint devices, yet attackers still evade detection by hiding behind legitimate-looking infrastructure such as VPNs, proxies, and residential networks. Spur’s Monocle Session Enrichment adds real-time infrastructure context to existing edge controls so organizations can make smarter enforcement decisions against risky sessions. #Spur #Monocle #Cloudflare #PROTON_VPN
Novocure disclosed that a mid-August cyberattack exposed data belonging to an undisclosed number of employees and more than 1,400 U.S. cancer patients, including some identifying information for fewer than 50 patients in the western U.S. The company said its medical treatment devices were not accessed, systems remain functional, and it is continuing to assess notification obligations. #Novocure #TumorTreatingFields
Hackers hijacked BGP routing for Softaculous update infrastructure and used it to push a malicious Virtualizor update to a small number of VPS installations. The incident affected traffic to the client/billing portal as well, prompting recommendations to check for the Java JRE update service and review credentials, keys, and account activity. #Virtualizor #Softaculous #BGP
Threat actors are actively exploiting CVE-2026-0768 in Langflow to gain unauthenticated remote code execution and steal credentials, tokens, and keys from vulnerable AI application environments. VulnCheck observed escalating attacks against honeypots, with the attacker targeting environment variables and secret files to collect Langflow, AWS, and OpenAI credentials. #Langflow #CVE-2026-0768 #VulnCheck #OpenAI #AWS
Five Venezuelan nationals pleaded guilty in the US for attempting to install malware on ATMs in Kansas as part of an ATM jackpotting scheme. The FBI says such incidents are rising nationwide, with over 1,900 cases reported since 2020 and major losses in 2025. #ATMJackpotting #FBI #Kansas #Wamego #Manhattan…
Threat actors are exploiting CVE-2026-0768, a critical RCE flaw in Langflow that can allow unauthenticated code execution as root through the custom component editor. VulnCheck says the attacks are being used for reconnaissance and credential harvesting, with activity seen mainly from Russia and more than 360 attempts detected against its UK…
Forescout’s Vedere Labs showed that Anthropic’s Claude could be guided to port a working RCE exploit from the WAGO 750-852 PLC to the WAGO 750-831, but only with heavy researcher oversight, long sessions, and significant API cost. The experiment also showed how quickly the AI could iterate once the flaw was…
DZI Obsto Zastrakhovane informed customers about a possible leak of personal data that may have exposed names, national identification numbers, and contact details. The insurer said insurance policies were not affected, but it warned clients to stay alert for suspicious calls or emails, following earlier incidents in Bulgaria’s insurance sector at Uniqa and Eurohold/Euroins. #DZI #ObstoZastrakhovane #Uniqa #Eurohold #Euroins
Wolfenbüttel District was affected by a cyberattack targeting its online appointment booking system, which runs on the Tevis platform operated by Kommunix. The incident forced the service offline for appointments on 31 August and 1 September and raised concerns about a possible exposure of citizens’ personal data. #WolfenbuettelDistrict #Kommunix #Tevis
The Córdoba Departmental Revenue Directorate suffered a cyberattack that temporarily disrupted the tax payment portal, prompting authorities to activate emergency protocols and begin a technical investigation. At this time, it has not been confirmed whether taxpayer data was exposed or whether the incident involved ransomware. #RentasDepartamentalesdeCordoba #Cordoba
PT Intraco Penta Tbk in ID reported a ransomware attack attributed to the direwolf threat actor, impacting Industrial Machinery & Equipment operations. #Indonesia
Honeycomb Programs Inc (US) reported a ransomware incident attributed to the direwolf threat actor. The event is covered under their insurance policy and resulted in operational disruption for the impacted systems in #UnitedStates
Oportunidados, a Business Services company in Brazil, was impacted by a direwolf ransomware attack that encrypted files and disrupted operations. The victim in Brazil experienced data loss and service downtime, Brazil #Brazil
![Cybersecurity News | Daily Recap [31 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [31 Aug 2026]")
Daily Recap, McKesson confirmed a breach after ShinyHunters claimed theft of 284 million patient records, while ATF acknowledged a major incident tied to recent Qilin claims; separate reporting also alleged FulcrumSec hacked Manchester Airports and stole 86 GB of data. In other updates, ServiceNow patched three critical code-injection flaws (with Nightmare Eclipse dropping a HardBreacher exploit tied to a Kaspersky product), AWS Console Private Access gained the ability to block sign-ins to personal accounts, and Finland revived its case against Eagle S officers over cable breaks. #McKesson #ShinyHunters #ATF #Qilin #FulcrumSec #ManchesterAirports #ServiceNow #NightmareEclipse #HardBreacher #Kaspersky #AWSConsolePrivateAccess #EagleS
Cronos resumed normal operation after halting the network in response to a price-manipulation exploit on Tectonic that enabled an attacker to borrow $74 million. The attacker inflated TONIC’s price 100 times in 20 minutes, but only about $6 million in Ethereum was actually stolen while the rest of the funds remained stuck on Cronos. #Cronos #Tectonic #TONIC #PeckShield