Cybersecurity briefing, 2026-08-29

Cosmos EVM balance handling was exploited across six chains, forcing coordinated upgrades or halts.

• GTIG Sees AI Speed Up Real Attacks
• Cosmos EVM Flaw Drained Six Chains
• FulcrumSec Turns MAG Breach Into Leak Threat
• npm Provenance Could Not Save OpenAPI Codegen
• Hasbro Breach Exposes Payroll Fraud Risk
• PaperCut’s Exploit Chain Splits Into Two CVEs
• ZBT Firmware Implants Expose White-Label Routers
• Gitea Docker Defaults Open a Route to RCE
• Metasploit Adds Forgejo and Planyo Attack Modules
• Unitree G1 EDU Flaws Reach Root Over BLE
• ATF Confirms Isolated System Hit in Qilin Claim
• TeamPCP Arrests Open a Forensic Phase
• WordPress Plugin Flaws Broaden Into Site Takeovers
• CISA’s Red Team Split Exposed SOC Blind Spots

Recent editions

• Friday, August 28, 2026: PaperCut’s Exploit Chain Splits Into Two CVEs · 18 stories
• Thursday, August 27, 2026: TeamPCP Arrests Open a Forensic Phase · 17 stories
• Wednesday, August 26, 2026: miniOrange SAML Bugs Now See PoC Scanning · 16 stories
• Tuesday, August 25, 2026: miniOrange SAML Bugs Now See PoC Scanning · 17 stories
• Monday, August 24, 2026: Defender flaw now has a PoC and federal clock · 18 stories
• Sunday, August 23, 2026: BadBox Reaches Car Head Units Through DoFun Updaters · 3 stories
• Saturday, August 22, 2026: XZ Utils Showed Build Inputs Are Part of the Attack Surface · 17 stories