Cybersecurity briefing, 2026-08-31

The AI threat model just changed shape.

• PaperCut’s Exploit Chain Splits Into Two CVEs
• Hugging Face Incident Shows Agents as Privileged Identities
• Claude Sessions Stolen to Burn Paid Usage
• US Seizure Cuts Off QTFY’s Hidden Traffic Layer
• Signed Adware Became a ValleyRAT Delivery Path
• Fire Ant Moves Into Cisco Router Control Planes
• Rails File-Read Flaw Opens Secret Theft and RCE
• Cosmos EVM Flaw Drained Six Chains
• npm Provenance Could Not Save OpenAPI Codegen
• Gitea Docker Defaults Open a Route to RCE
• Berlin Confirms Rhysida Data Theft After Leak Claim
• UAC-0099 Uses AI Guardrails Against Analysts
• FulcrumSec Turns MAG Breach Into Leak Threat
• Superior Weaponized Trusted Browser Extensions
• APT28 Uses Word Lures and Webhooks for HOOKEDGE
• Tenable Fixed Four Security Center Flaws
• AWS Console Private Access Brings Lockout Risk
• CISA’s Red Team Split Exposed SOC Blind Spots