Cyber Security News

Hacking Editorial Brief — September 4, 2026

U.S. Government Dismantles Chinese Hacking Infrastructure Targeting Critical Systems

The Department of Justice and FBI seized two hacking platforms—QScan and QTRouter—used by Chinese state-sponsored threat actors to target U.S. critical infrastructure. Court documents filed in the Southern District of California detail the operation, though specific targets and the extent of compromise have not been publicly disclosed. The seizure represents direct action against command-and-control infrastructure rather than post-breach remediation, reflecting an escalation in U.S. response posture to persistent state-sponsored intrusion campaigns. The platforms' technical capabilities and operational timeline remain under investigation.

Google Patches Actively Exploited Chrome Zero-Day in V8 Engine

Google released an emergency security update for Chrome to address CVE-2026-85046, a high-severity type confusion vulnerability in the V8 JavaScript and WebAssembly engine. The flaw is confirmed to be under active exploitation in the wild, though Google has not attributed the attacks or disclosed targets. Type confusion bugs in V8 allow attackers to corrupt memory and achieve arbitrary code execution within the browser sandbox. This marks the latest in a series of in-the-wild V8 exploits over the past year, underscoring continued threat actor focus on browser engine vulnerabilities as an initial access vector.

Sources: Presidential Prayer Team · The Hacker News