2026-08-27: CISA adds six exploited vulnerabilities to its KEV catalog

Show Notes - 2026-08-27

Stories Covered: - Today: - CISA Adds Six Exploited Vulnerabilities to KEV Catalog (https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog) - AI Infrastructure Gateways Under Active Attack (https://www.microsoft.com/en-us/security/blog/2026/08/26/when-ai-infrastructure-becomes-target-securing-gateways-control-points/) - National Kidney Registry Allegedly Hit by DireWolf Ransomware (https://databreaches.net/2026/08/26/national-kidney-registry-allegedly-hacked-by-direwolf-ransomware-group/) - Chinese-Speaking TA4922 Deploys PackClient RAT Framework (https://www.proofpoint.com/us/blog/threat-insight/carry-compromise-ta4922-packs-packclient) - Dark Caracal Upgrades Arsenal with GoCaracal Malware (https://www.darkreading.com/cyberattacks-data-breaches/dark-caracal-adds-new-malware-cyber-espionage-arsenal) - NovaCookies Phishing Kit Steals Microsoft 365 Sessions for $320/Month (https://thehackernews.com/2026/08/novacookies-campaigns-abuse-genuine.html) - Edge Infrastructure Remains Primary Exploitation Target Across State and Criminal Actors (https://www.sentinelone.com/blog/what-two-independent-datasets-reveal-about-whos-exploiting-your-perimeter/) - Android Malware JarService Hijacks Car Head Unit Update Systems (https://www.darkreading.com/cyberattacks-data-breaches/android-malware-hijacks-update-system-car-head-units) - Entra ID Admin Rights Audit Guidance (https://isc.sans.edu/diary/rss/33284) - Unpatched Kaltura mwEmbed Remote File Read and Code Execution (https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html) - GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 (https://thehackernews.com/2026/08/gputhor-rowhammer-defeats-ecc-on-nvidia.html) - CISA Vulnerability Review Establishes Pre-AI Baseline (https://www.cisa.gov/resources-tools/resources/cisa-vulnerability-review) - FBI Seizes Chinese Hacking Tools Used Against NASA, DOE, US Senate (https://www.theregister.com/security/2026/08/27/fbi-seizes-hacking-tools-it-says-china-used-to-attack-nasa-doe-us-senate-and-other-critical-networks/5292742) - Claude Opus 4.6 Exploits Booking System, Cancels Other Users' Reservations (https://thehackernews.com/2026/08/claude-opus-46-bypasses-gym-booking.html) - Polymorphic Phishing Page with Self-Breaking JavaScript Obfuscation (https://isc.sans.edu/diary/rss/33290) - Over 100 US Water Systems Hit in July Cyberattacks (https://www.theregister.com/cyber-crime/2026/08/26/more-than-100-water-systems-were-hit-in-july-cyberattacks/5292685)

CVEs Referenced: CVE-2015-3246, CVE-2015-5287, CVE-2019-1068, CVE-2021-23758, CVE-2022-0995, CVE-2026-19912, CVE-2026-19913, CVE-2026-42271, CVE-2026-48710, CVE-2026-8452

Indicators of Compromise: IPs: 64.81.30.99, 192.252.180.45

Full brief: https://carolinacleartech.com/brief/2026-08-27/