🔴 Panzer RaaS lists 16 victims across 11 countries, 🟠 APT28 deploys HOOKEDGE backdoor in Europe, 🔵 PostgreSQL 12-year-old flaw enables code execution via backup accounts, 🟢 AI agents breach enterprise in under 10 hours, 🟣 Qilin claims ATF breach, 🟡 HiveMQ and Element Messenger abused as C2 channels

A new ransomware-as-a-service operation called Panzer has listed 16 alleged victims across 11 countries on its leak site, which first went live on August 5. The victim list spans Thailand, Italy, Indonesia, Serbia, Curacao, South Korea, Spain, the Czech Republic, Germany, Nigeria, and Switzerland, hitting technology, manufacturing, government, agriculture, energy, education, and retail sectors. The mix of targets from critical infrastructure alongside commercial enterprises suggests affiliate-driven opportunistic operations rather than a focused campaign, and Panzer's rapid accumulation of 16 victims within its first month indicates an aggressive affiliate recruitment model.

Russian state-sponsored group APT28, also tracked as BlueDelta and Fancy Bear, has deployed a new lightweight Windows backdoor called HOOKEDGE in espionage campaigns against European government, diplomatic, and defense-manufacturing organizations. PolySwarm documented the activity targeting entities in Romania, Spain, and Turkey between late September 2025 and early April 2026, with newer variants appearing in June and July 2026. The infection chain uses spearphishing with macro-enabled Word documents that display a fake error message while AutoOpen() runs a multi-stage infection in the background, establishing persistence via a Windows Scheduled Task that launches HOOKEDGE at configured intervals.

A critical vulnerability dubbed PostGREShell in PostgreSQL's logical replication mechanism went undetected for roughly 12 years, from version 9.4 in 2014 through August 2026. CVE-2026-6471, discovered by Cyera Research, allows low-privileged replication accounts to execute arbitrary code and escalate to database superuser privileges by abusing the CREATE_REPLICATION_SLOT workflow to load a malicious plugin. Organizations commonly grant REPLICATION attributes to service accounts for backups, standby databases, change data capture, migrations, and analytics, making the attack surface broad.

Palo Alto Networks Unit 42 documented an incident where a threat actor used frontier AI models and agentic frameworks to breach an enterprise environment, harvest root credentials, and hijack cloud AI infrastructure in under 10 hours. The attack chain compressed operations that typically require multiple human operators and roughly two weeks into a single machine-speed campaign, with the agents collectively executing more than 50 MITRE ATT&CK techniques. The actor did not use novel vulnerabilities; existing attack methods were applied at a higher operational tempo than human operators typically achieve.

Toy Ghouls has expanded its malware arsenal with two new Windows backdoors that abuse HiveMQ's public MQTT infrastructure and the Matrix-based Element messaging platform for command-and-control communications. The use of legitimate messaging infrastructure for C2 is a growing trend, as MQTT brokers and Matrix servers provide encrypted, resilient communication channels that blend with normal enterprise traffic, making detection more difficult for defenders.

Used-car platform CARS24 has filed a police complaint alleging that approximately 3,100 customer records were extracted by insiders and sold to a competing business and external dealers for roughly Rs 1,000 per lead. The data included names, phone numbers, vehicle details, appointment information, inspection reports, and pricing data. The FIR names five individuals, and the structured pricing model suggests this was a deliberate, profit-driven insider operation rather than a random breach.

Qilin has been running a sustained campaign since at least August 10, hitting at least seven organizations across Canada, the US, the UK, and Cyprus. The most consequential claim is the US Bureau of Alcohol, Tobacco, Firearms and Explosives, which confirmed a "major incident" involving a standalone system and launched DOJ-coordinated forensics. The campaign shows Qilin operating with broad geographic and sectoral ambition, with two Canadian hits suggesting sustained focus on that market.

Citrix disclosed CVE-2026-19490 in mid-August, a CVSS 9.3 authentication bypass affecting NetScaler ADC and Gateway appliances. As of September 3, exploitation attempts are confirmed in the wild, with Previdian's NetScaler sensors detecting requests matching a published proof-of-concept from three distinct source IPs. NetScaler appliances typically sit at the network edge enforcing authentication for remote access, so compromise bypasses the entire authentication layer.

A critical vulnerability in Sangoma Switchvox enterprise VoIP systems is being actively exploited in the wild. CVE-2026-9586 is an unauthenticated SQL injection flaw that allows remote code execution, and it is already on CISA's Known Exploited Vulnerabilities list. The flaw was patched in Switchvox version 8.4.0.2, and the unauthenticated nature of the attack means no credentials are required for exploitation.

Cisco patched a critical remote code execution vulnerability in Nexus 9000 Series switches equipped with Silicon One ASICs. CVE-2026-20212 scores 9.8 on CVSS v3.1, exposing TCP ports 43210 and 43211 through the default Layer 3 VRF instance, allowing unauthenticated attackers to connect and execute arbitrary code with root privileges. Nexus 9000 switches sit at the core of enterprise and data-center networks, making root-level compromise a priority patch.

Akira claimed three ransomware attacks between August 26 and September 4, targeting small to mid-sized firms in healthcare, manufacturing, and energy across three countries. Oral and Maxillofacial Surgery in Brockton, MA was hit with a claimed 14GB data exfil including patient records and employee PII, creating HIPAA exposure and direct harm risk. Two European manufacturing targets in Germany and Austria were threatened with 119GB and 50GB of corporate data respectively.

Watchlist: emergency-patch PostgreSQL CVE-2026-6471 and audit replication-enabled accounts for signs of compromise dating back to 2014; monitor for HOOKEDGE indicators in European government and defense networks; review AI agent permissions and cloud infrastructure for automated intrusion signals; audit HiveMQ and Element Messenger traffic for anomalous C2 channels; patch Citrix NetScaler CVE-2026-19490, Sangoma Switchvox CVE-2026-9586, and Cisco Nexus 9000 CVE-2026-20212 immediately; SonicWall SMA1000 CISA remediation deadline is today, September 5; track Qilin's leak site for additional ATF disclosures and DOJ investigation findings.