Acronis’s August 2026 threat update reports a Hugging Face breach involving autonomous AI agents, along with malware and URL-threat trends based on detections across more than one million endpoints.
Acronis researchers detail Red Heron’s exploitation of vulnerable Gitea servers to steal source code, collect credentials and move into victim networks, alongside analysis of the JITTERLY implant and embedded SIXZUT rootkit.
Acronis outlines ways SMBs and MSPs can reduce risk from abused remote access tools, including RDP, ScreenConnect, MeshAgent and VNC, with guidance on hardening, monitoring and controlling installations.
Acronis’s global update, based on data from more than one million endpoints, covers an EY client-data breach and July 2026 malware and URL detection trends.
Acronis researchers analyzed a Cambodia-focused campaign that uses DLL sideloading, payloads hidden in PNG files, and a vulnerable driver to impair security tools before deploying SparkRAT. Attribution to SilverFox remains unconfirmed.