VulnHub

CISA has added a new vulnerability, identified as CVE-2026-85706, to its Known Exploited Vulnerabilities Catalog. This vulnerability affects both the GitLab Community Edition and the GitLab Enterprise Edition and allows for path traversal, which can be exploited by attackers to gain unauthorized access to sensitive files. Federal agencies are required to prioritize addressing this high-risk vulnerability under the Binding Operational Directive 26-04, which emphasizes rapid remediation of vulnerabilities that could allow total control over affected systems. Although this directive applies specifically to federal agencies, CISA encourages all organizations to adopt similar risk-based strategies to manage vulnerabilities. Organizations aware of other exploited vulnerabilities not listed in the catalog can submit them for potential inclusion.

Recent discussions among security experts emphasize that identifying critical vulnerabilities is only part of the equation. While many organizations excel at spotting these vulnerabilities, the real challenge lies in assessing which ones pose actual risks. A vulnerability might appear severe on a report, but if it's protected by strong security measures such as segmentation and identity controls, it may not present a significant threat. This shift in focus is crucial for organizations, as it encourages them to prioritize their defenses based on real-world exploitability rather than just the severity ratings of vulnerabilities. By refining their approach, security teams can better allocate resources and enhance their overall security posture.

Check Point has issued patches for two critical vulnerabilities tracked as CVE-2026-85102 and CVE-2026-85103. These vulnerabilities pose a significant risk as they could be exploited by attackers to execute code remotely, which could allow unauthorized access to affected systems. Organizations using Check Point's VPN solutions need to prioritize applying these patches to safeguard their networks. The potential for remote code execution means that if these vulnerabilities are exploited, attackers could gain control over sensitive data and systems, leading to serious security breaches. It’s crucial for users to stay informed and take action to mitigate the risks associated with these vulnerabilities.

A threat actor has developed an exploit for vulnerabilities in PaperCut print management software, which they then used to breach 395 organizations across 48 countries. The attacker, believed to be Russian-speaking, created a private lab to test these vulnerabilities before deploying AI agents to automate the infiltration of these systems. As a result, at least 440 instances of PaperCut were compromised, raising concerns about the security of print management systems and the effectiveness of current defenses against automated attacks. This incident underscores the need for organizations using PaperCut to assess their security measures and patch any known vulnerabilities promptly.

Anthropic has reported that Russian hackers are targeting AI companies to exploit their technology for malicious purposes. In a recent incident, these attackers used the Claude AI model to automate their malware evasion techniques, which helped them evade detection while carrying out their operations. This breach highlights a concerning trend where cybercriminals are not only stealing intellectual property, like a pre-release Claude model, but also misusing advanced AI tools to enhance their cyberattacks. The implications are significant, as it raises questions about the security of AI systems and the potential for their misuse in future attacks. Companies in the tech sector need to bolster their defenses against such tactics to protect their infrastructure and intellectual property.

A Russian hacker group has harnessed artificial intelligence to exploit vulnerabilities in PaperCut software, impacting hundreds of organizations around the globe. These attacks involve creating and deploying sophisticated exploits that take advantage of specific flaws in the software. PaperCut is widely used for print management, making many businesses vulnerable to these AI-driven attacks. The implications are serious, as compromised systems can lead to unauthorized access to sensitive data and disruption of services. Companies using PaperCut should take immediate action to patch their systems and protect against these evolving threats.

Trezor, a cryptocurrency hardware wallet provider, recently reported that phishing attacks have affected its users following a data breach at Brevo, a third-party email service provider. The attackers targeted approximately 347,000 email addresses, with about 2,500 users having clicked on a malicious link in the phishing emails. This incident raises concerns about the security of customer data and the effectiveness of existing phishing defenses. Users are advised to be cautious and verify communications from Trezor and other services to avoid falling victim to similar scams. The situation underscores the ongoing risks associated with email-based attacks in the cryptocurrency space.

Attackers have exploited two vulnerabilities in JFrog Artifactory, a tool used to manage software packages for build pipelines, to gain admin access to self-hosted servers. This allowed them to install backdoors, enabling ongoing access and control. The attacks were observed between August 15 and September 8, but JFrog had already patched the vulnerabilities prior to the attacks. Therefore, only those servers that had not yet been updated were at risk. This incident underscores the importance of timely software updates, as failure to do so can leave systems vulnerable to exploitation by malicious actors. Organizations using JFrog Artifactory should ensure they are running the latest version to protect against these types of attacks.

A serious vulnerability in SonicWall products was exploited in a cyberattack against the Borough Council of King’s Lynn and West Norfolk, which was announced on July 17, 2026. Attackers used this flaw to expose user credentials and facilitate theft of Active Directory information. This breach raises concerns about the security of local government services, as sensitive data may have been compromised. The rapid weaponization of this vulnerability highlights the importance of timely updates and monitoring for SonicWall users. Anyone using affected SonicWall products should prioritize implementing security patches to mitigate risks associated with this incident.

PaperCut has released a new security maintenance update to address two significant vulnerabilities in its software that were being actively exploited. The updates are available for users of PaperCut NG/MF versions 26.0.5, 25.0.13, and 24.1.10. This move replaces earlier emergency patches that were initially issued to tackle these issues. It's crucial for users running these versions to apply the updates promptly to protect their systems from potential attacks. The vulnerabilities pose risks to the security of printing services and could allow unauthorized access or manipulation of sensitive information.