ZeroFox Weekly Intelligence Brief - August 29, 2026

ZeroFox Weekly Intelligence Brief – August 29, 2026

ZeroFox’s Weekly Intelligence Briefing highlights the major developments and trends across the threat landscape, including digital, cyber, and physical threats. ZeroFox Intelligence is derived from a variety of sources, including—but not limited to—curated open-source accesses, vetted social media, proprietary data sources, and direct access to threat actors and groups through covert communication channels. Information relied upon to complete any report cannot always be independently verified. As such, ZeroFox applies rigorous analytic standards and tradecraft in accordance with best practices and includes caveat language and source citations to clearly identify the veracity of our Intelligence reporting and substantiate our assessments and recommendations. All sources used in this particular Intelligence product were identified prior to 6:00 AM (EST) on August 27, 2026; per cyber hygiene best practices, caution is advised when clicking on any third-party links.

Read the Brief

View the full report here

Norway's Government Digital Infrastructure Hit by DDoS

What we know:

• A large distributed denial-of-service (DDoS) attack has reportedly disrupted Norway's shared government digital infrastructure, affecting public sector services operated by the Norwegian Digitalization Agency (Digdir) and its operations provider, Vivicta.

ShinyHunters Claims Major Breach Targeting U.S. Data Center Operator

What we know:

• Threat group ShinyHunters has claimed to have targeted a major U.S. data center operator and has demanded USD 13 million in ransom.
• As of writing, the group has not published any sample data.

China-Linked Threat Group Targets 170,000 Web Servers in Al-Assisted Attacks

What we know:

• China-linked threat group UAT-10147 is reportedly integrating artificial intelligence (Al) across its attack chain, using Al-powered tools such as DeepAudit and PentestGPT for vulnerability scanning, exploit development, reconnaissance, payload generation, troubleshooting, and post-exploitation.