Top stories.
- Attackers begin exploiting critical Ruby on Rails flaw.
- PaperCut issues emergency patch for a second zero-day.
- Two Nigerians extradited to US over sextortion schemes.
Attackers begin exploiting critical Ruby on Rails flaw.
Threat actors are now exploiting a critical Ruby on Rails flaw (CVE-2026-66066) that was patched at the end of July, SecurityWeek reports. The vulnerability, nicknamed "KindaRails2Shell," can allow unauthenticated attackers "to read arbitrary files accessible to the Rails process, including environment variables and application secrets," the exposure of which can lead to remote code execution and lateral movement. Researchers at VulnCheck observed exploitation targeting honeypots in Singapore, Israel and the United Kingdom last week.
PaperCut issues emergency patch for a second zero-day.
Print management software provider PaperCut on Friday issued an emergency patch for a second actively exploited flaw in its NG/MF products, BleepingComputer reports. The company warned of an initial zero-day (CVE-2026-81578) last Thursday, urging customers to immediately restrict web access to trusted, internal IP addresses.
The second flaw (CVE-2026-82078) is a critical unsafe dynamic class loading vulnerability that can allow an attacker to execute "arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process." PaperCut is still working on an official release, and advises all customers to install the emergency patch as soon as possible.
Two Nigerians extradited to US over sextortion schemes.
Two Nigerian nationals have been extradited to the United States for their alleged involvement in sextortion schemes that led to the suicides of two teenagers in Mississippi and North Carolina. The two suspects, 26-year-old Adebola Festus Adekunle and 24-year-old Mudasiru Afeez Olawale, are facing life in prison, with a minimum of 30 years for the sexual exploitation of a minor resulting in death.
The two men were arrested in 2023 as part of the FBI-led Operation Artemis, an international initiative targeting Nigeria-based sextortion rings.
