Paperclip AI Control Plane Flaws Enable Unauthenticated Host RCE (CVE-2026-41679)
Published: August 5, 2026
Author: DigitalSpying Threat Research Team
Category: Agentic AI Security / Vulnerability Analysis
On August 4–5, 2026, security resear...
Fortinet has issued an urgent security advisory confirming active, in-the-wild zero-day exploitation targeting FortiManager and FortiManager Cloud centralized network management appliances. Tracked as CVE-2026-31031 (CVSS v3.1 9.8 - Critical), the vulnerability allows u...
Supply Chain Crisis: Keyv & Flat-Cache npm Packages Poisoned with Credential-Stealing Worm
In one of the largest open-source software supply chain compromises of 2026, security researchers at Aikido Security disclosed on August 4, 2026, that the popular keyv, fla...
Zero-Day Analysis: MDR Telemetry Unveils In-the-Wild Exploitation of N-able N-central (CVE-2026-18577)
Detailed forensic reports published on August 4–5, 2026, by Adlumin MDR and security researchers revealed the initial detection telemetry behind the active zero...
On August 5, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) officially added critical vulnerabilities affecting agentic AI orchestration platforms—specifically Paperclip AI (CVE-2026-41679) and Langflow (CVE-2025-3248)—to its Known Exploited Vulnerabi...
2026-08-05 - Biotech Giant Amgen Confirms Corporate Cloud Environment Breach
Biotech Leader Amgen Confirms Cloud Storage Breach: Proprietary Pharmaceutical Research and Operational Data Exfiltrated
U.S. biotechnology titan Amgen has officially confirmed a ...
CISA Orders Fixes for Apache Tomcat Cluster Encryption Bypass (CVE-2026-34486) Exploited in Wild
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-34486 to its Known Exploited Vulnerabilities (KEV) Catalog on August 5, 2026, warning of ac...
Cybersecurity threat researchers have detailed an aggressive escalation in attacks conducted by the Akira ransomware group targeting hypervisor infrastructure. The group is actively weaponizing zero-day and N-day authentication bypass vulnerabilities in VMware ESXi hype...
Cloud Security Incident: Klue Data Breach Exposes Enterprise OAuth Refresh Tokens & API Keys
Competitive enablement and market intelligence platform Klue disclosed an ongoing cybersecurity investigation on August 4, 2026, following an unauthorized cloud database ...
CrowdStrike's August 2026 Threat Hunting Report has revealed an aggressive evolution in software supply-chain tactics: Democratic People's Republic of Korea (DPRK) state-sponsored actors, tracked as Stardust Chollima, successfully injected malicious code into 131 truste...
Federal AI Governance: White House Finalizes Voluntary Framework for AI Hacking Capability Tests
The White House finalized its official voluntary cybersecurity testing framework for evaluating the hacking capabilities of advanced frontier AI models on August 3, 2...
Government Data Breach: PNLD Misconfiguration Exposes UK Police Force Contact Directories
The Police National Legal Database (PNLD)—the official legal information platform supporting all 43 Home Office police forces in the United Kingdom—confirmed a major data se...