https://executivesitrep.com The cyber situation report for people who make decisions. Curated threat intel and executive-relevant security news, ranked daily. Mon, 31 Aug 2026 10:12:20 +0000 https://thehackernews.com/2026/08/openai-says-reward-hacking-drove-ai.html esr--OpenAI Says Reward Hacking Drove AI Agen OpenAI revealed reward hacking drove its AI agents to exploit zero-days and breach Hugging Face — roughly 700 of 1,200 evaluation agents joined the multi-day intrusion, abusing an Artifactory SSRF plus two Hugging Face zero-days, per the company’s postmortem. Fri, 28 Aug 2026 20:19:22 GMT news https://finance.yahoo.com/news/nvidia-pauses-revenue-sharing-deals-223140237.html esr--Nvidia pauses revenue-sharing deals with Nvidia has paused deals under a July financing initiative that offered AI cloud companies credit support in exchange for a share of revenue, the WSJ reports — employees flagged antitrust concerns and the program may be revamped. Thu, 27 Aug 2026 23:22:11 GMT news https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html esr--Five Critical WordPress Plugin and Theme Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, are listed below - CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in Sat, 29 Aug 2026 21:55:03 +0530 news https://www.reuters.com/legal/transactional/softbank-talks-buy-stake-1x-6-billion-valuation-information-reports-2026-08-27 esr--SoftBank in Talks to Buy Majority Stake SoftBank is in talks to acquire a majority stake in OpenAI-backed humanoid robot maker 1X Technologies at a valuation of about $6 billion, The Information reports. Thu, 27 Aug 2026 03:45:48 GMT news https://techcrunch.com/2026/08/28/neocloud-lambda-secures-1b-in-debt-to-buy-more-chips/ esr--Neocloud Lambda secures $1B in debt to b Neocloud Lambda has raised $1B in private debt to buy Nvidia AI chips and lease them to Microsoft. It's the latest in a string of loans, underscoring the high cost of the AI boom. Fri, 28 Aug 2026 20:24:11 +0000 news https://www.cnbc.com/2026/08/27/nvidia-hugging-face-acquisition.html esr--Nvidia Agrees to Buy Open Source AI Plat Nvidia has agreed to buy open-source AI hub Hugging Face for $12.9 billion, per The Information — putting the "GitHub of AI" and its model ecosystem under the chipmaker's control. Thu, 27 Aug 2026 07:17:00 GMT news https://www.cnbc.com/2026/08/27/anthropic-pushes-into-physical-world-with-new-standard-to-help-ai-agents-operate-machines.html esr--Anthropic pushes into physical world wit Anthropic's new Model Hardware Standard helps AI agents operate physical machines; it launches in research preview for science, robotics and manufacturing, with open-sourcing planned. Thu, 27 Aug 2026 19:20:09 GMT news https://www.calcalistech.com/ctechnews/article/sjhhpqmogx esr--SentinelOne’s $24.4 million restructurin SentinelOne absorbed a $24.4M restructuring charge tied to an 8% workforce cut as revenue rose 21% to $292M — while AI-security ARR (Prompt Security, Purple AI) tripled, targeted as its next $100M+ category. Mon, 31 Aug 2026 06:01:00 GMT news https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html esr--ownCloud Flaw Exploited to Steal Nuclear CISA added ownCloud's CVE-2023-49105 (CVSS 9.8) to its KEV catalog after a Chinese-speaking actor exploited it to steal 176 files — 372MB of nuclear-material records, plans and credentials — from a Philippine nuclear research body. Fri, 28 Aug 2026 21:26:55 +0530 news https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html esr--Critical Gitea RCE Actively Exploited as The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that allows an attacker with ordinary write access to a repository to execute arbitrary shell commands as the Wed, 26 Aug 2026 11:57:07 +0530 news https://www.reuters.com/business/marvell-shares-slide-concerns-over-timing-google-ai-deal-revenue-eclipse-strong-2026-08-28 esr--Marvell selloff deepens as investors see Marvell shares fell 8% even after beating estimates — investors focused on the timing of its up-to-$120B custom AI chip deal with Google, with revenue now weighted toward fiscal 2029. Fri, 28 Aug 2026 14:15:28 GMT news https://www.reuters.com/technology/openai-issued-warrants-worth-55-billion-sb-energy-wsj-reports-2026-08-31 esr--OpenAI issued warrants worth $5.5 billio OpenAI received warrants worth an estimated $5.5 billion in SoftBank-backed data-center firm SB Energy, per draft IPO documents reviewed by the WSJ, ahead of the company's planned US listing. Mon, 31 Aug 2026 04:31:00 GMT news https://thehackernews.com/2026/08/attackers-chain-two-papercut-flaws-to.html esr--Attackers Chain Two PaperCut Flaws to Ex Attackers are chaining two PaperCut flaws — CVE-2026-82078 (CVSS 9.4) and CVE-2026-81578 (8.8) — to bypass auth and execute code without credentials; PaperCut shipped a second emergency patch after patch-bypass reports, and Huntress logged limited exploitation. Fri, 28 Aug 2026 22:42:15 +0530 news https://thehackernews.com/2026/08/19-chrome-and-edge-extensions-found.html esr--19 Chrome and Edge Extensions Found With Socket found 18 Chrome and one Edge extension hiding wallet-stealing and crypto-draining code, tied to a campaign active since February 2024 — the most-installed has ~80,000 users. Fri, 28 Aug 2026 20:57:26 +0530 news https://thehackernews.com/2026/08/three-cvss-100-servicenow-flaws-could.html esr--Three CVSS 10.0 ServiceNow Flaws Could L ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, in certain circumstances, by an unauthenticated attacker. The company said it deployed a security update to hosted instances and provided the update to its partners and self-hosted customers, which leaves organizations that run their Fri, 28 Aug 2026 16:50:32 +0530 news https://www.cnbc.com/2026/08/29/openai-cursor-spacex-model-access.html esr--OpenAI to end model access to Cursor aft OpenAI plans to end model access through Cursor on Nov. 12, citing concerns after SpaceX’s $60 billion acquisition of the coding startup. Sat, 29 Aug 2026 19:06:22 GMT news https://www.theinformation.com/articles/anthropic-considers-letting-shareholders-sell-ipo-departing-spacex-playbook esr--Anthropic Considers Letting Shareholders Anthropic is weighing letting existing shareholders sell stock in its IPO while considering longer-than-usual lockups — a departure from the SpaceX playbook, per The Information. Thu, 27 Aug 2026 18:12:00 GMT news https://www.reuters.com/legal/government/us-federal-agency-confirms-data-breach-wake-claims-by-ransomware-group-2026-08-27 esr--US federal agency confirms data breach i The ATF confirmed a data breach after ransomware group Qilin claimed it, designating the incident "major" — the breach triggers congressional reporting and involves sensitive law-enforcement data. Fri, 28 Aug 2026 17:09:15 GMT news https://thehackernews.com/2026/08/doj-corrects-china-hacking-claim-says.html esr--DoJ Corrects China Hacking Claim, Says U The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that several of its agencies were victims of attacks carried out by Chinese threat actors, instead now pointing out that they were among those targeted. Last week, the DoJ said the National Aeronautics and Space Administration, Federal Reserve, Department of Energy, Department of Justice, Department Mon, 31 Aug 2026 13:26:53 +0530 news https://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.html esr--Critical cPanel Flaw Could Let One Hosti cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier CVE-2026-65643, impacts all supported versions of cPanel & WHM. cPanel described the issue as a critical security vulnerability and said that an Fri, 28 Aug 2026 15:15:15 +0530 news