Security

CISA published an advisory on August 27, 2026, disclosing two vulnerabilities in the Applied Systems Engineering ASE2000 V2 Communications Test Set (versions 2.25 through 2.37). The vulnerabilities, CVE-2018-1285 (XXE) and CVE-2026-18717 (improper certificate validation), could allow attackers to read/write arbitrary files, issue outbound requests, or intercept and modify TLS-protected communications. The vendor has released version 2.38 to fix both issues. No public exploitation has been reported.

CISA published an advisory on critical vulnerabilities in All-Line Equipment Company Fuel-Boss, affecting multiple product versions. Exploitation could allow remote code execution. Fixes are available for some versions, but not all.

Greece and Israel have signed a major air defense agreement, the 'Achilles Shield', involving Israeli systems like David's Sling, Barak MX, and SPYDER, valued at around €3.1-4 billion.

Somali piracy has surged, with at least 13 ships attacked since January, including two seized in the Gulf of Aden last week. The increase is linked to reduced naval patrols due to the US-Iran war and Houthi blockades, and has led to drone strikes that killed 13 people.

The UK Ministry of Defence will trial powered paragliders that allow troops to fly up to 200 miles behind enemy lines, with trials starting in coming months.

Masked Israeli settlers attacked Palestinians in Qusra, West Bank, trapping residents in homes and injuring several with pepper spray. The IDF intervened but faced accusations of protecting settlers and mistreating Palestinians. Prime Minister Netanyahu condemned the violence.

An attempted mutiny by soldiers in Niger's capital Niamey was contained by government forces with support from Russia's Africa Corps, exposing tensions in the military and highlighting the country's shifting security partnerships.

Over 850,000 teachers in France return to school on August 31, 2026, with the start of the academic year disrupted in some academies by a cyberattack that occurred in the summer. The attack compromised personal data of tens of thousands of teachers and students, and digital tools remain suspended in the academies of Nantes and Toulouse.

Israeli undercover police arrested a 37-year-old Palestinian man in Nablus overnight, suspected of continued terrorist activity and planning attacks against Israelis.

CISA published an advisory for a medium-severity vulnerability in Rockwell Automation OTTO Fleet Manager (CVE-2026-75112) due to insufficient bcrypt work factor, potentially enabling offline brute-force attacks on password hashes. Fixed in version 2.36.3.