Security

A Russian drone strike on a weapons depot near Kyiv killed at least 37 people and forced hundreds to evacuate, prompting an investigation into the storage of munitions near residential areas.

US forces struck two rocket launchers on Iran's Larak Island in the Strait of Hormuz, killing two and injuring two, prompting Iranian retaliatory missile attacks on US bases in Jordan and a drone attack on an air base in the UAE.

Armed gangs killed at least 47 people in Kenscoff, Haiti, on August 24-25, 2026, while a UN report shows gang violence spreading beyond Port-au-Prince despite intensified security operations.

An attempted mutiny by soldiers in Niger's capital Niamey was contained by government forces with support from Russia's Africa Corps, exposing tensions in the military and highlighting the country's shifting security partnerships.

Siemens has disclosed a critical missing authentication vulnerability (CVE-2026-58115) in SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed. An unauthenticated remote attacker could exploit this to execute arbitrary code with maximum privileges. Siemens has released a fix in version V4.3.4.1.

CISA published an advisory on critical vulnerabilities in All-Line Equipment Company Fuel-Boss, affecting multiple product versions. Exploitation could allow remote code execution. Fixes are available for some versions, but not all.

Masked Israeli settlers attacked Palestinians in Qusra, West Bank, trapping residents in homes and injuring several with pepper spray. The IDF intervened but faced accusations of protecting settlers and mistreating Palestinians. Prime Minister Netanyahu condemned the violence.

CISA published an advisory on August 25, 2026, disclosing three vulnerabilities in Bendix EC80 Brake ECU used in commercial vehicles. The flaws include a stack-based buffer overflow, an out-of-bounds write, and use of hard-coded credentials, which could allow an attacker to crash the ECU, execute arbitrary code, inject CAN bus traffic, or disable safety functions like ABS and traction control. Bendix has released firmware updates to address the issues.

CISA published an advisory on August 27, 2026, disclosing two vulnerabilities in the Applied Systems Engineering ASE2000 V2 Communications Test Set (versions 2.25 through 2.37). The vulnerabilities, CVE-2018-1285 (XXE) and CVE-2026-18717 (improper certificate validation), could allow attackers to read/write arbitrary files, issue outbound requests, or intercept and modify TLS-protected communications. The vendor has released version 2.38 to fix both issues. No public exploitation has been reported.

Somali piracy has surged, with at least 13 ships attacked since January, including two seized in the Gulf of Aden last week. The increase is linked to reduced naval patrols due to the US-Iran war and Houthi blockades, and has led to drone strikes that killed 13 people.