NowRift — Software & Technology News Platform

CybersecurityRIFT LEAD

Claude Code Aids Reverse Engineering of Papercut NG N-day Vulnerability

AI code assistant accelerates the process of transforming a security patch into a working exploit for Papercut NG.

5 Sept 2026

Newsletter

THE DAILY RIFT

Five shifts. Five minutes. No noise.

•Verified technology intelligence
•Emerging patterns before the hype
•Direct action steps for builders & founders

No spam. Unsubscribe anytime. Powered by Beehiiv.

All Intelligence AI Models Developers Cybersecurity Hardware Founders Creators Data Science

Today's Intelligence

CybersecuritySep 5

Sangoma Switchvox CVE-2026-9586 Exploited in the Wild

A critical RCE vulnerability in Sangoma's Switchvox phone system is actively being exploited, posing a significant risk to businesses.

●Builder Action:Developers managing Sangoma Switchvox instances must immediately update to patched versions. The vulnerability allows unauthenticated RCE with root privileges, meaning any custom integrations or configurations interacting with the web interface could be compromised. Focus on verifying system integrity post-patch and monitoring for any signs of persistent access.

CybersecuritySep 5

GeoNetwork RCE Flaw Exposes 121 Government Deployments to Attack

Four critical vulnerabilities in GeoNetwork allow unauthenticated remote code execution, impacting government geospatial data systems.

●Builder Action:Developers managing GeoNetwork instances must immediately verify that the latest security patches addressing CVEs related to file upload and XSLT processing have been applied. Review custom XSLT transformations for any potential injection points and ensure file upload validation is robust. Consider implementing additional network-level controls if immediate patching is not feasible.

CybersecuritySep 5

IIS AppPool to SYSTEM: New AD CS Exploit Uncovered

A novel privilege escalation path allows attackers to move from a compromised IIS application pool to NT AUTHORITY/SYSTEM.

●Builder Action:Developers running IIS applications that require interaction with Active Directory Certificate Services must audit their service account permissions. Ensure the IIS AppPool identity has the absolute minimum privileges necessary, ideally no direct RPC access to AD CS. Re-evaluate any custom scripts or application logic that interacts with AD CS endpoints for potential abuse vectors. Consider implementing more stringent input validation and sanitization for any data passed to AD CS APIs.

Original Deep Intelligence

RIFT REPORTDEEP INTELLIGENCE

Weekly Rift: AI Agents Mature, Security Looms Large, and Efficiency Drives Innovation

This week's tech news highlights the growing pains of AI agents, critical security vulnerabilities, and a renewed focus on efficiency and cost optimization across the industry.

3 minread time

Updated:31 Aug 2026