Cybersecurity Brief - August 28, 2026

• PaperCut Zero-Day Exploited in Attacks Bad actors are actively exploiting a zero-day vulnerability affecting all versions of PaperCut NG and PaperCut MF print management software. PaperCut has released emergency patches for v25 and v26 and is investigating confirmed customer incidents involving suspicious activity from pc-app.exe and modified server logs. (Source: The Hacker News)

• APT28-Linked HOOKEDGE Backdoor Targets European Organizations A new Windows batch script backdoor, dubbed HOOK/EDGE, has been identified targeting government and diplomatic organizations in Romania, Spain, and Türkiye. The campaign, attributed with moderate confidence to the Russian state-sponsored group APT28, uses macro-enabled Microsoft Word documents with diplomatic lures to deploy the malware. (Source: The Hacker News)

• Picus Security Reveals Low Control Effectiveness in 2026 Report An analysis of 338 million attack simulations by Picus Labs found that existing security controls block only about 10% of certain attacker activities, highlighting significant gaps in exposure management and network visibility. (Source: The Hacker News)