📰 Dev.to · NetSecOpsIO

Daily cybersecurity threat intelligence digest for August 27, 2026 - 8 reports covering vulnerabilities, exploits, and security advisories.

Specialty materials manufacturer Alkegen (formerly ASP Unifrax Holdings) has disclosed a data breach that may have exposed the Social Security numbers and perso

A Sophos report released on July 22 finds that attackers are now operationalizing artificial intelligence (AI) to dramatically speed up their attack workflows,

The supply chain industry is being warned about a rising trend of destructive data-wiping attacks. A key example is the March 2026 incident at medical tech firm

A SonicWall report finds that while overall cyberattack volume on the manufacturing sector has dropped, attackers are now using more precise, targeted strikes a

On July 21, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) c

Self-propagating malware worms dubbed Miasma and Hades are continuing their assault on the npm and PyPI open-source ecosystems. Attributed to the financially mo

A Comparitech report reveals a 13% increase in ransomware attacks targeting government entities worldwide in the first half of 2026, with 187 recorded incidents

A sophisticated espionage implant named HollowGraph is using Microsoft 365 calendar events for command-and-control (C2) and data exfiltration. The malware, disc

The U.S. Department of Defense has unexpectedly suspended its planned rollout of the Cybersecurity Maturity Model Certification (CMMC) Phase II, which was sched

According to NCC Group's Q2 2026 threat report, global ransomware attacks increased by 3% to 2,229 incidents. The industrial sector was most targeted, and North

A Forescout report for H1 2026 reveals a 51% surge in published vulnerabilities and a 25% increase in claimed ransomware attacks. The study highlights the growi

A Unit 42 report details the evolution of npm supply chain attacks since the Shai-Hulud worm in 2025. It describes recent 2026 campaigns by the threat actor Tea

A security researcher known as NightmareEclipse has publicly disclosed 'LegacyHive,' a new zero-day vulnerability affecting fully patched Windows systems, just

The INC_RANSOM ransomware group has listed Golden Glasko Haddy and Associates, a Miami-based law firm, as a victim on its dark web leak site. The posting, which

Two unpatched vulnerabilities in Anthropic's 'Claude for Chrome' extension could allow a second, malicious extension to access and exfiltrate a user's Google Wo

A new information-stealing malware for macOS, dubbed 'CrashStealer,' is actively being used in targeted attacks. The malware evades Apple's Gatekeeper by using

The Chaos ransomware group has claimed an attack on Aphena Pharma Solutions, a U.S.-based pharmaceutical contract manufacturer. The group listed the company on

Deutsche Bank has acknowledged a cybersecurity incident at a third-party service provider following claims from the 'Unsafe' ransomware group. The group posted

According to the Sophos 'State of Ransomware 2026' report, compromised identities are now the primary root cause of ransomware attacks, accounting for 79% of in

SonicWall has released urgent security patches for two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA 1000 series appliances. Th

Executive Summary On July 11, 2026, a sophisticated software supply chain attack was...

The Australian Cyber Security Centre (ACSC) has issued a high-priority alert about a large-scale global campaign exploiting at least 17 known vulnerabilities in

A supply chain attack hit the popular `jscrambler` npm package, with malicious versions published to the registry using a compromised maintainer credential. The