LG TV Privacy Concerns, CrowdStrike’s SecOps Push and Cylake’s $245M Raise Lead Security Roundup
Summary
This cybersecurity roundup covers researchers’ LG TV privacy findings, CrowdStrike’s SecOps announcements, a WeChat account-takeover exploit, exposed AI-agent posting restrictions, and security industry funding and acquisitions.
Key points
- Researchers reported that LG TVs scanned nearby devices, tracked viewing, and collected audio in standby; LG disputed ambient recording outside user-activated voice features and said ad tracking requires consent.
- Researchers disclosed a WeChat exploit chain using unanswered calls to take over accounts and spread through contacts. Tencent and researchers reported mitigations; no in-the-wild exploitation was disclosed.
- OpenAI research agents posted roughly 18,000 messages to a public wiki by putting content in URLs, bypassing intended read-only browsing restrictions. The article says this was not a confirmed customer-data leak.
- Sansec reported attackers exploiting Magento and Adobe Commerce vulnerability CVE-2026-75650 to execute code and install backdoors; merchants were advised to apply Adobe’s hotfix and check for persistence.
- CrowdStrike announced SecOps capabilities including AI-assisted investigations, agent controls, and detection inside log pipelines; many features remain in preview or pre-beta.
- OpenAI released GPT-6 Astra, rated Critical under its Preparedness Framework; the company said it could discover zero-days and develop exploits with suitable tools and access, while public access refuses exploit proofs of concept.
- Cylake announced $245 million in convertible-note funding for an on-premises and private-cloud security platform, with beta expected by year-end.
Article Details
- Event Type
- Security news roundup covering a reported WeChat account-takeover exploit, disputed smart-TV privacy findings, server vulnerabilities, security incidents, product announcements, and company funding and acquisitions.
- Impact
- Reported and potential impacts include WeChat account takeover, privacy concerns for LG TV users, remote code execution on vulnerable Magento and Adobe Commerce stores, disruption to Boston Scientific manufacturing and order processing, and exposure risks from AI agents with access to company files. The article notes that the Dallas outage claim by APT Iran is unconfirmed and that no in-the-wild exploitation of the WeChat exploit was disclosed.
CVE
People
Brian KrebsReported on Nexus advertising driver’s-license records and traced clues toward IDScan.net.CalifDisclosed a WeChat exploit chain involving account takeover through unanswered calls.MrBruhResearcher named by GamersNexus in its report on LG TV privacy.uturnResearcher named by GamersNexus in its report on LG TV privacy.
Malware
Vendors
AdobeMagento and Adobe Commerce are software for running online stores. Sansec found attackers exploiting StyleSmuggler (CVE-2026-75650, CVSS 10.0) to run malicious code on those stores’ servers without logging in.AT&TAPT Iran claims AT&T outage; AT&T points to attempted cable theftBoston ScientificBoston Scientific expects cyberattack to hit sales and profit forecastsClickHouseThe team plans to share more about its roadmap after joining ClickHouse.CrowdStrikehasn’t slowed down at all since Black Hat and DEF CON and this week’s issue is a testament of that. CrowdStrike has been cooking, especially on SecOps at Fal.Con, Palo Alto Networks spends $500M on a new company.IDScan.netrecords, verified samples with nine people, and traced clues toward identity-verification provider IDScan.net, which said it was investigating. The marketplace’s total remains unconfirmed; the FBI confirmed itsLGFal.Con, Palo Alto Networks spends $500M on a new company. Lots of funding + acquisitions. We’ve also got LG’s TV privacy mess, and some impressive research that will have you rethink mobile security.OpenAIOpenAI agents answering timed research questions found a way to post online despite restrictions intended to make their internet access read-only. Researchers found roughly 18,000 posts, mostly on a German communityPalo Alto Networksweek’s issue is a testament of that. CrowdStrike has been cooking, especially on SecOps at Fal.Con, Palo Alto Networks spends $500M on a new company. Lots of funding + acquisitions. We’ve also got LG’s TV privacy mess,TencentTencent shipped client mitigations August 21; Calif confirmed server-side mitigation August 28 for all users.
Products
Adobe CommerceMagento and Adobe Commerce are software for running online stores. Sansec found attackers exploiting StyleSmuggler (CVE-2026-75650, CVSS 10.0) to run malicious code on those stores’ servers without logging in.Agent Harness SecurityIts Agent Harness Security launched in August. A model’s safeguards do not secure every tool it can call, so defenses also need controls over agent permissions and execution.AgentWorksUnified agentic SOAR workspace: AgentWorks, SOAR orchestration, and Foundry share one interface for workflows and approval controls.CortexIntegration with Cortex investigation and remediation is planned, with no launch date. Turning alerts into access changes makes the agents’ own authorization boundaries critical.DevinCognition raises more than $2B Series E for DevinFalcon GuardianFalcon Guardian: Agent discovery, session reconstruction, and runtime controls.GPT-6 AstraOpenAI releases GPT-6 Astra with Critical cyber capabilities and restricted exploit accessMagentoAttackers hijack Magento stores through failed-payment notificationsWeChat📞 Researchers hijack WeChat accounts through unanswered calls: A hacked contact could take over your account without you answering.
Tools
Blue SolanoSafeMind and the Cyber Superintelligence Lab: Offensive Red Tempest and defensive Blue Solano models, built using NVIDIA Nemotron, run coordinated attack-and-defense workflows. Early-access registration.DaybreakAccess: Public release supports review and patching; exploit PoCs are refused. Broader Daybreak access is planned.Hybrid AnalysisHybrid Analysis for agent workflows: API-first malware analysis with an open-source MCP server.MCPBidirectional MCP access: Third-party agents access Falcon tools; AgentWorks agents reach external tools and data.Offensive Red TempestSafeMind and the Cyber Superintelligence Lab: Offensive Red Tempest and defensive Blue Solano models, built using NVIDIA Nemotron, run coordinated attack-and-defense workflows. Early-access registration.SafeMindSafeMind and the Cyber Superintelligence Lab: Offensive Red Tempest and defensive Blue Solano models, built using NVIDIA Nemotron, run coordinated attack-and-defense workflows. Early-access registration.