THE Hacker News’s weekly recap highlights a week thick with high-stakes cyber incidents and disclosures across software, hardware and AI-enabled systems. Notably, BeyondTrust Remote Support was exploited as a zero-day in late August 2026 (CVE-2026-102764), with attackers gaining access via an internal messaging component and deploying a PHP web shell (SAWFLY) and tunnelling tool (BARECLAW).
In parallel, Ledger reported unauthorised hardware implants leading to roughly $100 million in stolen cryptocurrency, with supply-chain compromises and backdoors surfacing in wallets sold through third-party channels. The week also spotlighted cyber-enabled physical risk, with French supermarkets hit by refrigeration-system attacks that forced food waste and prompted shutdowns, and OpenAI-related misalignment disclosures detailing new incidents involving internal models and credential exposure.
Other substantial items include a critical Collabora RCE in the Nextcloud ecosystem (CVE-2026-110447), enabling backdoors via the proxy[.]php endpoint and prompting patches in 26.4.303; a spate of AI-guarded and supply-chain concerns around AI agents, with MITRE updating ATT&CK v20 to cover AI abuse and prompt-injection techniques; and a high-profile case in which an OpenAI engineer was charged for attempting to intercept communications.
The collection also notes 98 zero-days demonstrated at Pwn2Own Ireland, a wave of ransomware threats including physical threats in triple-extortion schemes, and ongoing exploitation of other widely used platforms with multiple CVEs referenced throughout the week.