Cyber Security News

Hacking Editorial Brief — August 25, 2026

Chinese State-Linked Groups Weaponize DeepSeek AI for Overseas Attack Operations

Chinese government-affiliated hacking groups are actively exploiting the domestically developed DeepSeek artificial intelligence model to scale cyberattacks against overseas targets, according to South Korean intelligence reporting. The campaign represents a significant evolution in how state-sponsored actors leverage open-source AI capabilities for offensive operations, with threat actors using DeepSeek to automate reconnaissance, generate malicious code, and accelerate attack workflows against foreign infrastructure. The reporting suggests lax security controls around the Chinese AI platform have enabled its weaponization, raising broader concerns about how nation-state adversaries are integrating large language models into their operational tradecraft. This marks the second confirmed instance in recent weeks of AI systems being used in offensive cyber operations, following last week's federal advisory on AI-assisted attacks targeting U.S. industrial control systems.

Active Exploitation Confirmed for Splunk and WordPress Authentication Flaws

A critical Splunk Enterprise vulnerability (CVE-2026-20253) is under active exploitation and can be chained into unauthenticated remote code execution, prompting urgent patching guidance for organizations running affected versions. Separately, attackers are targeting two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress in active campaigns against websites using the authentication platform. An unpatched vulnerability in Calix GS7 residential routers deployed by multiple U.S. broadband providers also surfaced, allowing remote attackers to bypass network address translation and expose internal devices without authentication. The trio of actively exploited or weaponized flaws underscores continued attacker focus on authentication bypass and remote code execution chains across enterprise and consumer infrastructure.

Sources: Chosun · Bleeping Computer · Bleeping Computer · Data Breach Today