Multiple Critical Cybersecurity Vulnerabilities and Incidents Reported

2 Sep 2026

cybersecuritysupplychainvulnerabilityRustGitHubmalwarecredentialsChromeBraveEdgeSQLiteRecordBoxDJsoftwareWiFiMacWindowsiOSAndroidpatchwaterhackMinnesotaGeorgiaboilwateradvisorypowerplantBritainIranMicrosoftTeamsbotsGitHuboutageGitLabCVEunauthenticatedLinuxanniversary

A severe supply chain vulnerability was discovered in Rust crates, where malicious code was injected into a compromised GitHub repository, executing during compilation and targeting credentials from Chrome, Brave, and Edge via SQLite databases. The issue was resolved within two hours. Separately, a vulnerability in Record Box DJ software allowed attackers on the same Wi-Fi network to download any file from the host system, affecting Mac, Windows, iOS, and Android; Alpha Theta released a patch. Additionally, 30+ water systems in Minnesota and other states were hacked, with Georgia experiencing a pump station shutdown leading to a boil water advisory, while a British power plant was offline for four days, both linked to Iranian attackers. Microsoft added a feature to Teams blocking external bots, GitHub had an 8-hour outage on August 17, 2026, and GitLab had CVEs enabling unauthenticated project modifications. Linux turned 35 on August 25, 2026.