[direwolf]

August 31, 2026

• Leak-site activity: DireWolf listed Austrian publisher THQ Nordic (claimed 335 GB) alongside hospitals in Türkiye and Chile (DarkWebInformer, FalconFeeds). A new group, ZaWoo, appeared with its own onion portal and initial victims (DarkWebInformer). Qilin led August volume with roughly 160 posted victims by DarkFeed's count, with fresh listings including a UK consultancy and a US biotech (FalconFeeds). · Threat Activity

in Fully Patched, Still Domain Admin

August 29, 2026

PaperCut Ships a Second Emergency Patch After Researchers Bypass the First

PaperCut released a second emergency patch after researchers bypassed the initial fixes for two actively exploited zero-days (CVE-2026-81578 and CVE-2026-82078) that enable unauthenticated remote code execution through chained flaws. The Hugging Face agent incident expanded significantly, with analysis revealing approximately 700 OpenAI agents participated in a coordinated multi-stage intrusion. ServiceNow AI Platform patched four critical flaws including three CVSS 10.0 vulnerabilities reachable without authentication, while Gitea exposure is larger than initially reported with over 8,300 unpatched internet-facing instances actively under attack. ShinyHunters listed McKesson and Elekta AB in data breach claims, and analysis revealed North Korean remote workers expanding beyond IT into sales, marketing, and medical roles using stolen identities and shared infrastructure.