The Edge of the Cyber World See the latest
A single AWS key sitting in a public commit is still the fastest way for an attacker to skip past every firewall a company owns. GitGuardian’s State of Secrets Sprawl 2026 report puts a number on how often that happens: 28.6 million new secrets turned up in public GitHub commits in 2025 alone, a 34%…
PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578. The post More Details Emerge on Exploited PaperCut Vulnerabilities appeared first on SecurityWeek.
OpenAI has quietly set an execution date for one of the three products at the center of the AI browser race. ChatGPT Atlas, the desktop browser OpenAI launched with a splashy demo in October 2025, stopped functioning as a browser on August 9, 2026, according to OpenAI’s own help documentation. Meanwhile, Perplexity’s Comet just landed…
Solana-based neobank Avici confirmed on August 29, 2026 that it will fully reimburse 1,685 users hit by a security breach tied to an outdated card smart contract, with credits processed automatically over the coming weeks. Avici’s own figures put the confirmed card-balance loss at $500,859.22, while the broader on-chain laundering trail traced by researchers pushed…
A critical flaw in SAP Commerce Cloud went from patch release to active exploitation in roughly 72 hours this month, and by August 31 security teams are still scrambling to close the gap. The bug, tracked as CVE-2026-58231, carries a CVSS score of 10.0, the maximum possible rating, and sits inside the Data Hub Adapter…
PaperCut Software spent the final week of August 2026 doing something few vendors want to do twice in 48 hours: shipping an emergency patch, watching researchers break it, then shipping a second one. On August 27, the print-management company confirmed active, in-the-wild exploitation of a chained vulnerability affecting PaperCut NG and PaperCut MF, its widely…
Palo Alto Networks Chief Information Officer Meerah Rajavel has delivered a warning to the cybersecurity industry that runs against the grain of most enterprise threat briefings: the danger isn’t the newest, most powerful AI model. It’s the cheap one that trails a few months behind. In a report published by Business Standard on August 30,…
Enterprise AI has entered a new era. Organizations are rapidly moving beyond assistants that answer questions to autonomous agents capable of reasoning, invoking tools, accessing enterprise applications, coordinating with other agents, and completing multi-step business workflows with minimal human intervention.This shift represents a fundamental change in how software operates. Traditional applications execute predefined logic written…
Every public-facing app is now a target, and the web application firewall (WAF) market has split into three very different philosophies for stopping the attacks. As of August 30, 2026, Cloudflare, AWS, and Imperva (now part of Thales) are running three distinct plays: a flat-rate edge network bundle, a granular pay-as-you-go AWS-native tool, and a…
Three of the biggest names in cyber threat intelligence spent the past 18 months getting bought, merged into hyperscalers, or bolted onto payment networks — and the buying decision for security teams has gotten more confusing, not less. Mastercard closed its $2.65 billion purchase of Recorded Future in December 2024. Google folded Mandiant and VirusTotal…
