ROME, September 1 — The Log4j RCE scare has resurfaced, but developers are downplaying the alarm. An Apache Log4j 2 vulnerability raised concerns about a critical remote code execution, yet Log4j maintainers called it a “known security non-finding.” They confirmed the theoretical risk but stressed the narrow conditions needed for exploitation, saying volunteer effort is better focused elsewhere. The roundup notes that Log4j flaws can be severe, citing the Log4Shell incident from a few years ago as proof of potential impact.
Meanwhile, U.S. Bancorp denied direct compromise, stating ransomware claims tied to its name likely originated from a fourth-party provider outside its systems, with no evidence of breach so far despite LockBit threats. Minimus, the hardened container image provider, is shutting down after raising $51 million in 2025, citing tough business conditions; Echo announced acquisition of its technology shortly after the shutdown notice.
Truffle Security found over 700 still-active corporate AWS keys with full privileges among 10,616 exposed keys reviewed from 2022 to 2026, while Intruder scanned 3.5 million hosts and uncovered 28,000 exposed Git repositories, revealing thousands of active cloud and service tokens. Zimperium reported 30 mobile malware families targeting over 800 banking and fintech apps across 44 EMEA countries, noting increased use of AI in attack chains.
Troy Hunt analyzed the alleged Carhartt breach and found roughly half of the 24.8 million email addresses were synthetic TPC-DS benchmark data, meaning real customer exposure was far less than claimed by ShinyHunters. Paylogix confirmed attackers stole files over several days in November, exposing Social Security numbers, financial and health data, medical records, passport numbers and taxpayer IDs, affecting at least 67,789 people across South Carolina, New Hampshire and Vermont; Akira ransomware group claimed responsibility.
Leaked records from Bauman University show a long-running program training about 250 students for Russian military cyber roles, with graduates tied to APT28 and Sandworm. Manchester Airports Group disclosed hackers accessed personal data of roughly 8.7 million customers, including emails, phone numbers, vehicle registrations and postcodes; MAG refused ransom demands but confirmed no impact to operations or safety.
The U.S. Treasury sanctioned Iranian cyber actors linked to MOIS for compromising critical infrastructure and financial theft, naming Keyvan Fayyaz Ghareh Blagh, Saber Shahbazi Balujeh and Mohammad Reza Kadkhoda’i; four of the 17 Iranian actors previously charged by the FBI were included in this action. Watch this space — the trend underneath is clear: old flaws linger, new exposures grow, and the line between noise and real threat keeps shifting.
