Court Blocks Anthropic’s Supply Chain Risk Designation
A federal court in California halted Pentagon measures against Anthropic. Judge Rita Lin called the government’s actions unconstitutional retaliation for the company’s protected speech.
Tag cybersecurity
Australia Charges Two Men in TeamPCP Software Supply Chain Attack Case
The Australian Federal Police and Western Australia Police Force charged two men as part of an investigation into the TeamPCP campaign. U.S. authorities also unsealed an indictment against Ruben Ian Thomson.
Ledger Fixed Clear-Signing Bug in Ethereum App; Exploitation Not Confirmed
Ledger’s security bulletin warns of a bug in the Ethereum app versions 1.19.0 through 1.22.2. A fix is available in version 1.22.3.
Core Lightning Confirms Undisclosed Vulnerabilities, Advises Nodes to Update or Go Offline
The Core Lightning team reviewed AI-generated security reports and confirmed real bugs in some of them. Fixes are being prepared under an embargo of about two weeks.
PaperCut NG and MF Vulnerability Is Being Actively Exploited
PaperCut confirmed incidents affecting customers and the active exploitation of an as-yet-unspecified flaw in PaperCut NG and PaperCut MF. The risk affects all versions.
CISA Adds JFrog Artifactory Vulnerability to Actively Exploited Vulnerabilities Catalog
On August 27, 2026, CISA added CVE-2026-66384 in JFrog Artifactory to the KEV catalog. Operators of self-hosted instances should verify their version and deploy available patches.
CISA Adds NetScaler ADC and Gateway Flaw to Actively Exploited List
CISA added CVE-2026-8452 in NetScaler ADC and NetScaler Gateway products to its Known Exploited Vulnerabilities catalog. U.S. federal civilian agencies must update the devices by August 29, 2026.
ATF Confirms Serious Cybersecurity Incident in Isolated System
The U.S. ATF confirmed an incident in a system separated from its enterprise network. The agency has not yet confirmed Qilin’s involvement or any data breach.
MAG Confirms Customer Data Breach at Three UK Airports
Manchester Airports Group confirmed that an unauthorized third party obtained some customer data. The incident did not affect airport operations or payment information.
Signal fixes bugs in SGX contact discovery service
V12 researchers flagged two bugs in Signal Contact Discovery Service Icelake. Public commits confirm related server-side fixes, but exploitation in practice has not been confirmed.