2026-08-28: PaperCut ships emergency patches for an actively exploited zero-day hitting all NG/MF versions

Show Notes - 2026-08-28

Stories Covered: - Today: - PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions (https://thehackernews.com/2026/08/papercut-zero-day-exploited-in-attacks.html) - CISA Adds Three Known Exploited Vulnerabilities to Catalog (https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog) - Next.js Critical AVIF and Windows Path Traversal Flaws Enable Unauthenticated RCE (https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html) - ATF Responds to 'Major' Cybersecurity Incident After Ransomware Gang's Claims (https://www.theregister.com/security/2026/08/27/atf-responds-to-major-cybersecurity-incident-after-ransomware-gangs-claims/5292990) - Swarm of 700 AI Bots Went Rogue in Hacking Attack (https://databreaches.net/2026/08/27/swarm-of-700-ai-bots-went-rogue-in-hacking-attack/) - Two Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks (https://thehackernews.com/2026/08/alleged-teampcp-hackers-charged-in.html) - Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers (https://thehackernews.com/2026/08/amazon-kiro-prompt-injection-can.html) - Manchester Airports Group Confirms Cyber Attack Exposed Customer Data (https://databreaches.net/2026/08/27/manchester-airports-group-confirms-cyber-attack-exposed-customer-emails-phone-numbers-and-vehicle-details/) - Microsoft Security: August 2026 Updates (https://www.microsoft.com/en-us/security/blog/2026/08/27/whats-new-in-microsoft-security-august-2026/) - CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69550) - Unit 42 Warns AI Has Shifted Balance of Power From Defenders to Attackers (https://cyberscoop.com/unit-42-palo-alto-networks-warning-agentic-ai-frontier-models/) - Live Operator-Driven Phishing Framework "JWR" Discovered (https://thehackernews.com/2026/08/threatsday-296k-iot-botnet-100-water.html) - Android Fraud Bot "Octagon" Sold as MaaS (https://thehackernews.com/2026/08/threatsday-296k-iot-botnet-100-water.html) - Russians Posing as Signal Support to Launch Phishing Attacks (https://www.theregister.com/security/2026/08/27/atf-responds-to-major-cybersecurity-incident-after-ransomware-gangs-claims/5292990) - Social Engineering Attempt Against ReliaQuest Employee Fails (https://thehackernews.com/2026/08/threatsday-296k-iot-botnet-100-water.html) - Trojanized Productivity Apps Distribute Malware (https://thehackernews.com/2026/08/threatsday-296k-iot-botnet-100-water.html) - ICS/OT Vulnerabilities (https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-02) - Joomla Extensions Under Active Exploitation (https://www.theregister.com/security/2026/08/27/atf-responds-to-major-cybersecurity-incident-after-ransomware-gangs-claims/5292990)

CVEs Referenced: CVE-2018-1285, CVE-2018-19518, CVE-2019-11043, CVE-2023-27350, CVE-2023-49105, CVE-2025-3511, CVE-2026-10591, CVE-2026-18717, CVE-2026-53362, CVE-2026-66384, CVE-2026-69550, CVE-2026-73125, CVE-2026-75112, CVE-2026-75604, CVE-2026-76943, CVE-2026-77977, CVE-2026-78037, CVE-2026-78239

Full brief: https://carolinacleartech.com/brief/2026-08-28/