Cyber Security News

Hacking Editorial Brief — August 21, 2026

Active SharePoint Exploitation and PLM Attacks Target Enterprise Infrastructure

CISA has confirmed active exploitation of CVE-2026-45659, a recently patched remote code execution vulnerability in Microsoft SharePoint. The agency's warning indicates threat actors are moving quickly to weaponize the flaw against unpatched enterprise deployments. Separately, the ransomware group Clop has exploited vulnerabilities in product lifecycle management (PLM) software to compromise manufacturing giants including Shell, GE, and Philips. The campaign demonstrates continued threat actor focus on supply chain and enterprise management platforms as high-value targets for data exfiltration and ransomware deployment.

Multi-Agent AI Attack Confirmed Against Asia-Pacific Government

A Chinese-language threat actor has successfully executed what security researchers are describing as a multi-agent AI attack against government agencies in the Asia-Pacific region. The incident represents documented evidence of near-autonomous AI-enabled offensive operations moving from theoretical capability to active deployment. In related AI-enabled threat activity, unknown attackers attempted to compromise security researchers using a fabricated cryptocurrency conference as a lure, underscoring threat actor interest in targeting security professionals directly. Meanwhile, a Trezor hardware wallet vulnerability (CVE-2026-20685) exposed customer data across multiple countries between May and August 2026, affecting users of the cryptocurrency storage platform.

Sources: Security Week · Smart Industry · Cadre · TechCrunch · The Hacker News