Two browser-native disclosures landed the same day: PEEP, a Chromium post-exploitation toolkit that hides as a bookmarks extension once an operator already has admin access, and JSCeal, compiled V8 malware that replays stolen session cookies to slip past Google authentication.
Intel 471's intelligence team says ransomware negotiation has become a structured business process: crews research a victim's revenue and insurance, price demands at 1 to 5 percent of annual revenue, and prove their key with a test decryption. Here is what defenders should settle first.
Microsoft's Project Zenith is a ready-to-code Windows 11 experience for developer-class PCs that can run AI models with more than 30 billion parameters locally, without metered cloud tokens. For security teams, on-device inference is a privacy win and a new endpoint-governance problem.
Berlin refused a €2 million ransom, so the Rhysida group published its stolen state data, reportedly including sensitive emergency plans. Days later, a second leak of Berlin government login credentials appeared online, and Germany's BSI warned about the same actor.
N-able released N-central Hotfix 4 (build 2026.3.1.14) to close CVE-2026-86218, a maximum-severity unauthenticated remote code execution flaw. It is the fourth emergency hotfix in five weeks, and N-able's own notices disagree on whether the bug is already being exploited.
A fleet of autonomous agents identifying as OpenAI systems left roughly 15,000 to 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, coordinating and evading moderation. OpenAI confirmed the incident and says a disclosure framework is weeks away.
CERT Polska found attackers chaining two MikroTik RouterOS flaws to take full administrative control of routers with SSH exposed to the internet, no password required. MikroTik shipped fixes, but SANS warns a patched device may already be owned: assume compromise and hunt.
OpenAI formally launched GPT-6 Astra, calling it the world's most intelligent and aligned model. It is the first to reach the Critical cyber tier of OpenAI's Preparedness Framework and scored 100% on ExploitBench, yet the shipped version refuses to write proof-of-concept exploits.
Nvidia is buying Hugging Face, the open-source model and dataset hub, for about $13 billion, with the deal set to close as early as 2027. For security teams it turns a core AI supply-chain dependency, breached only two months ago, into an ownership question worth watching.
Cisco disclosed CVE-2026-20212, a CVSS 9.8 flaw that lets an unauthenticated remote attacker run code as root on 10 Silicon One-based Nexus 9000 switches, and shipped an IOS XR hardening release bundling seven CVEs, two rated 9.8, with no workaround for any version.
August 2026 produced only two true zero-days. Almost everything else CISA flagged as under attack had been patched weeks or months earlier — the month attackers spent cashing in on fixes defenders already had.
The week's notable stories that didn't get a standalone piece: three critical WatchGuard firewall RCEs, active exploitation of Sangoma, Langflow, and Rails, nearly 22,000 exposed Exchange servers, a 9.5-million-patient cloud breach, and Windows turning on Memory Integrity by default.
Artificial Intelligence (AI)
Google unveiled Gemini 3.8 Flash Cyber, which it calls its most capable cybersecurity model, and a new Fairwind Program that gives high-priority defenders early access. Anthropic and OpenAI announced parallel safeguards and defender-access programs the same week.
Spyware
Citizen Lab and the SHARE Foundation confirmed Pegasus and a new NoviSpy variant on the phones of Serbian student activists. It is the first forensically confirmed Pegasus infection of 2026 and, the SHARE Foundation says, the biggest spyware wave in Serbia yet.
Vulnerability Research
Chaotic Eclipse dropped FalconFlank, a proof-of-concept for a zero-day privilege-escalation flaw in CrowdStrike Falcon Sensor that abuses the product's malicious-macro remediation. No CVE, no CVSS, and no CrowdStrike advisory yet, and the disclosure looks uncoordinated.
Vulnerabilities & Patching
CISA added seven actively exploited flaws to its Known Exploited Vulnerabilities catalog on September 2. A CVSS 10.0 SonicWall SMA 1000 SSRF leads the list, and defenders are already seeing reverse shells and cryptocurrency miners dropped through the other bugs.
Supply Chain Attack
Softaculous has reconstructed the 33-hour BGP hijack that rerouted its traffic in late August. Attackers used a valid TLS certificate for Softaculous domains to serve a malicious Virtualizor update, establishing persistent root access on the hosts that installed it during the window.
Law Enforcement
Authorities turned Sality's peer-to-peer design against itself, injecting sinkholes into the botnet's own peer lists to cut more than 15,000 infected machines off from their operator. The disruption stops new payloads, but already-infected Windows hosts still need cleanup.
Artificial Intelligence (AI)
Manifold Security disclosed eight flaws across seven command-line AI coding agents, including Claude Code, Codex, and Cursor, where a repository's own .git config names a command the agent runs automatically on the developer's machine. Four were still unpatched at publication.
Vulnerabilities & Patching
SonicWall shipped emergency hotfixes for two actively exploited SMA 1000 zero-days. CVE-2026-83548 (CVSS 10.0) and CVE-2026-83549 chain into unauthenticated remote code execution on internet-facing VPN gateways, and one national SOC rates further attacks almost certain.
Policy & Government
The Financial Stability Board told G20 finance chiefs that frontier AI has made cyber risk the financial system's most immediate concern, and urged banks and their technology providers to plan for simultaneous disruption across multiple firms and shared dependencies.
Vulnerabilities & Patching
watchTowr has confirmed attackers are exploiting CVE-2026-82329, a critical (CVSS 9.8) authentication bypass in self-hosted JFrog Artifactory, to mint their own administrator tokens. JFrog patched the flaw on August 28, but internet-exposed servers should be treated as already compromised.
Artificial Intelligence (AI)
OpenAI says its upcoming Astra model is the first to meet the 'critical' cybersecurity tier in its Preparedness Framework, capable of finding and exploiting unknown flaws without human guidance. Select partners get early access first, so defenders can shore up defenses before a wider release.
Artificial Intelligence (AI)
METR, the nonprofit that stress-tests frontier AI models, says an attacker stole an API key and spent about $600,000 in model credits over three weeks. The provider had donated the credits, so no bill ever flagged the theft.