COGNOSCERE Daily Tech Review — Issue T224 · Monday, August 31, 2026

Or visit Intelligence Overview for deeper analysis.

ACTPaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

Two critical zero-day vulnerabilities (CVE-2026-81578, CVSS 8.8; CVE-2026-82078, CVSS 9.4) in PaperCut NG and MF print management software are being actively exploited in the wild, enabling unauthenticated remote code execution. PaperCut confirmed customer incidents and issued emergency patches for versions 24–26, urging all internet-facing deployments to be isolated or restricted immediately.

The Hacker News · Cybersecurity / Vulnerability Management · Relevance: 0.9 · Source →

zero-day, RCE, print-management, enterprise-security, patch, vulnerability, active-exploitation

PREPAREWhite House bans foreign-made equipment for power generation over cyber backdoor concerns

President Trump signed Executive Order 14420 on August 26, declaring a national emergency and banning acquisition of foreign-produced bulk-power system equipment — including transformers, inverters, batteries, and associated software — citing risks of digital backdoors and remote access by foreign adversaries. The Department of Energy has until December 24, 2026, to publish implementing rules; the prohibition on new transactions is effective immediately.

The Record from Recorded Future News · Critical Infrastructure / Policy · Relevance: 0.9 · Source →

executive-order, critical-infrastructure, supply-chain, bulk-power, national-security, foreign-equipment, energy-grid

PREPAREMLflow CVE-2026-64849 SSRF Flaw Exposes Enterprise AI Infrastructure to Cloud Metadata Theft

CVE-2026-64849, a critical unauthenticated server-side request forgery vulnerability in MLflow, allows attackers to pivot from internet-exposed AI/ML infrastructure into internal cloud environments, exposing metadata and credentials. The flaw highlights the growing attack surface created by deploying AI development tooling on internet-accessible infrastructure.

NetworkTigers · Cybersecurity / AI Infrastructure · Relevance: 0.8 · Source →

MLflow, SSRF, AI-infrastructure, cloud-security, vulnerability, CVE, ML-pipeline

PREPAREVMware Subscription Transition Forcing Enterprise IT Strategy Overhaul Ahead of vSphere 8 End-of-Support

Organizations are accelerating decisions on virtualization strategy as VMware ends support for vSphere 8 perpetual licenses in October 2027 and shifts fully to subscription pricing. A survey of 269 global IT infrastructure and security leaders surfaced widespread uncertainty about migration paths, with alternatives including competing hypervisors, cloud-native workloads, and container platforms under active evaluation.

Database Trends and Applications (DBTA) · Cloud Infrastructure / Enterprise Software · Relevance: 0.8 · Source →

VMware, virtualization, subscription, cloud-migration, enterprise-infrastructure, licensing, end-of-support

WATCHBoston Scientific Cyberattack Disrupts Global Operations, Order Processing, and Cardiac Device Monitoring

A cybersecurity incident detected on August 25 caused a global network outage at Boston Scientific, disrupting manufacturing, order processing, shipping, and new cardiac-device remote-monitoring activations. As of August 28, no full-restoration timeline was available, ransomware attribution remained unresolved, and the incident had not yet been confirmed to expose confidential patient data.

CrunchAtlas · Cybersecurity / Incident Response · Relevance: 0.9 · Source →

ransomware, cyberattack, healthcare-IT, operational-disruption, medical-devices, supply-chain, incident-response

WATCHInfoblox Completes Kentik Acquisition to Bring Together Authoritative DNS, Asset Visibility and Real-Time Network Intelligence

Infoblox completed its acquisition of network intelligence and observability platform Kentik, combining authoritative DNS and IP address management with real-time traffic flow, routing, and performance data. The combined platform is positioned to serve as a unified operational foundation for AI-driven networking and security operations across hybrid and multi-cloud environments.

GlobeNewswire / The Globe and Mail · Networking / M&A · Relevance: 0.8 · Source →

acquisition, network-observability, DNS, hybrid-cloud, agentic-ops, network-intelligence, security

ACTEU AI Act Transparency and GPAI Enforcement Begins August 2, 2026 — What Actually Applies

As of August 2, 2026, the EU AI Act's transparency obligations (Article 50 — chatbot disclosure, synthetic content marking, deepfake labelling) and general-purpose AI model rules became enforceable; however, the AI Omnibus Regulation (EU 2026/1744) deferred high-risk standalone AI system compliance to December 2027 and embedded-product AI to August 2028. Organizations must now comply with GPAI and transparency requirements while high-risk system timelines have been extended.

Technology.org · AI Regulation / Governance · Relevance: 0.9 · Source →

EU-AI-Act, GPAI, transparency, deepfake, compliance, regulation, AI-governance, Article-50

PREPARECalifornia's AI Transparency Act Becomes Operative in August 2026; Texas TRAIGA AG Complaint Mechanism Activates in September

California's AI Transparency Act (SB 942/AB 853) became operative in August 2026, adding to a set of active US state AI obligations including Texas, Illinois, and Utah. Texas TRAIGA's attorney general complaint mechanism activates in September 2026, creating an enforcement escalation point; no enacted federal law preempts state-level AI duties, leaving enterprises managing a complex patchwork of obligations.

Vorp Labs · AI Regulation / US State Law · Relevance: 0.9 · Source →

AI-regulation, state-law, California, Texas, compliance, transparency, AI-governance, enforcement

WATCHAI Agent Startups Are Raising Record Rounds — August 2026 Funding Surge

Enterprise AI agent startups closed approximately $633 million in funding in the first 12 days of August 2026, led by HappyRobot ($150M Series C at $1.2B valuation), Zenity ($125M), and Cognition AI reportedly negotiating a $1B+ raise at a $40B+ valuation. Investor focus has shifted from generic AI chatbots to agents demonstrating measurable workflow replacement, security, and enterprise orchestration.

The Agent Report · Agentic AI / Venture Capital · Relevance: 0.9 · Source →

agentic-AI, venture-capital, funding, enterprise-agents, AI-security, orchestration, market-growth

WATCHDatabricks Ventures Makes First UK Investment, Backing Advancing Analytics to Scale Enterprise AI Delivery

Databricks Ventures made a strategic growth investment in UK-based data consultancy Advancing Analytics — its first investment in a UK-headquartered consulting firm — alongside growth equity firm Tercera. The investment signals Databricks' intent to expand its enterprise AI delivery ecosystem in Europe through partner-channel deepening.

Solutions Review · Analytics / Venture Investment · Relevance: 0.8 · Source →

Databricks, analytics, enterprise-AI, UK, investment, data-engineering, partner-ecosystem

WATCHPhonePe Launches PulsePro BI Platform Using Aggregated UPI Transaction Data for Enterprise Market Intelligence

PhonePe launched PulsePro, a business intelligence platform that converts aggregated Unified Payments Interface transaction data into consumer spending and market activity insights for enterprise clients, without sharing individual customer details. The launch exemplifies a growing pattern of payments companies monetizing transaction data through analytics products beyond their core processing services.

Precedence Research · Business Intelligence / Data Products · Relevance: 0.7 · Source →

business-intelligence, payments-data, analytics, market-intelligence, data-monetization, fintech, UPI

WATCHICRA Launches Integrated Risk & Analytics Platform Following Acquisitions of D2K Technologies and Fintellix

ICRA Limited launched ICRA Risk & Analytics as a unified brand consolidating its analytics, risk, and technology businesses following the strategic acquisitions of D2K Technologies and Fintellix. The platform is designed to serve financial institutions with an integrated, technology-led suite covering credit risk, regulatory compliance, and analytics.

Investment Guru India · Risk Analytics / Platform Launch · Relevance: 0.7 · Source →

risk-analytics, financial-services, platform-launch, M&A, credit-risk, regulatory-compliance, data-platform