Cybersecurity News Bulletin: August 2, 2026

Cybersecurity News – Week of August 2, 2026

1. Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
2. Pentest the Plant Without Shutting It Down. SANS ICS613.
3. China-Nexus Operation Uses TriBack Loader 
4. Check Point Patches Exploited SmartConsole Flaw 
5. Know Your AI Blast Radius Before Cybercriminals Do
6. OpenAI Says Its AI Agent Went Rogue and Targeted Hugging Face 
7. Claude Runs Across Six Surfaces in Your Company. Your Security Team Sees One.
8. Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
9. TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
10. ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Trending CVEs: High-severity, widely used

Check the list, patch what you have, and hit the ones marked urgent first — CVE-2026-32194 CVE-2026-32191 (Microsoft Bing), CVE-2026-10591 (AWS Kiro), CVE-2026-48294 (Adobe Acrobat Chrome extension), CVE-2026-8933 (snap-confine), CVE-2026-16232, CVE-2026-62144, CVE-2026-62145 (Check Point), CVE-2026-64600 (Linux kernel), CVE-2026-15226 (Ubuntu), CVE-2026-15899, CVE-2026-15900, CVE-2026-15901 (Google Chrome), CVE-2026-15342 (Plane), CVE-2026-16411, CVE-2026-16412, CVE-2026-16360 (Mozilla Firefox), CVE-2026-16157(Duplicati), CVE-2026-14985 (Analog Way Picturall Quad Compact Mark II), CVE-2026-47056, CVE-2026-60217, CVE-2026-60358, CVE-2026-60360, CVE-2026-60365, CVE-2026-60366, CVE-2026-60379, CVE-2026-60389, CVE-2026-60644, CVE-2026-61211, CVE-2026-60402, CVE-2026-61146 (Oracle), from CVE-2026-15611 to CVE-2026-15617 (Logto), CVE-2026-57239 (Foxit PDF Reader), CVE-2026-57308, CVE-2026-23795, CVE-2026-23794 (Apache Syncope), CVE-2026-65906, CVE-2026-64812, CVE-2026-64813 (JetBrains), CVE-2026-8085, CVE-2026-8312, CVE-2026-8313, CVE-2026-8314 (Rockwell Automation), CVE-2026-12927(Schneider Electric), CVE-2026-42958, CVE-2026-42953, CVE-2026-49033(Labcenter Proteus PDSPRJ), CVE-2025-40947, CVE-2025-40948, CVE-2025-40949(Siemens ROX II OT switches), CVE-2026-54052 (n8n), and multiple vulnerabilities in NodeBB, Redis, and Zimbra (no CVEs)

Learn more about the Cyber Range at Salem State University