Nation-State Cyber Threats
Check Point pins the exploited afd.sys zero-day, CVE-2026-68820, on North Korea's Lazarus Group. In this wave of Operation Dream Job, the attackers used a post-quantum handshake to shield exploit delivery before dropping the ForestTiger backdoor. CISA set an August 25 patch deadline.
Vulnerabilities
A newly disclosed flaw let researchers replay encrypted reasoning objects across OpenAI, Anthropic, and Google reasoning APIs, using a weaker model to decode a stronger one's hidden reasoning and pull API keys and passwords out of public session logs.
Artificial Intelligence (AI)
Israeli cyber firm Dream says it documented the first publicly known near-autonomous AI attack on a government target. Aimed at Taiwan, the multi-agent framework adapted mid-operation, corrected its own mistakes, and expanded to a nuclear safety agency and energy firms as it went.
Ransomware
A joint U.S.-South Korea advisory ties the Gunra ransomware-as-a-service crew to a repeatable break-in: two unpatched Fortinet authentication-bypass flaws, defeated MFA, and an encryptor built from leaked Conti code. The fixes have been available since early 2025.
Artificial Intelligence (AI)
OpenAI launched GPT-5.6-Cyber, a cyber model tuned to refuse less, and gated it behind a two-tier Daybreak Blue and Red access program — one day after pausing Astra over the same capability class. What it means for defenders.
Vulnerabilities
Zoom has patched ZOOMSDAY, a zero-click flaw in its annotation tool that let any meeting participant run code on another attendee's device — presenter to viewer and back. Researchers built a working exploit with a public AI tool in fewer than 20 prompts.
Vulnerabilities
Microsoft's August 2026 Patch Tuesday is one of the largest on record: 421 CVEs by Rapid7's count, 62 rated critical, and a use-after-free in the afd.sys kernel driver that North Korea's Lazarus group used as a zero-day to reach SYSTEM. Patch that one first.
Vulnerabilities
Rapid7 Labs disclosed a two-CVE SharePoint chain reaching unauthenticated remote code execution as any user, including administrator. A JWT authentication bypass feeds an RCE flaw, both fixed in the August 11 Patch Tuesday. Notably, an AI agent helped find the chain.
Data Privacy
A Kansas City security researcher says his algorithm now produces adversarial patterns on demand that hide people, faces, and vehicles from surveillance cameras. He tested them against 11 open-source detection systems and demonstrated one on a car at Def Con.
Two security researchers bought cheap domains, including noreply.net and deleteduser.com, and pointed them at email listening services. Hundreds of companies are still firing corporate secrets into those inboxes. The exposure is a configuration problem your team can audit today.
New research from PortSwigger's Gareth Heyes shows CSS inside an email can slip past its message boundary and interfere with the webmail interface across Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail — stealing passwords and tokens or hijacking trusted UI actions.
N-able's first N-central hotfix didn't end the intrusion. Attackers reached the managed systems behind the RMM platform and kept a foothold even after the server was locked down, so N-able has now shipped Hotfix 2 — required even if you already patched Hotfix 1.
Metabase says a maximum-severity flaw in its business-intelligence software was exploited as a zero-day. The CVSS 10.0 bug lets an unauthenticated attacker inject SQL into Metabase's application database and seize admin access. Self-hosted operators should patch and rotate credentials.
Two security firms, Varonis and PromptArmor, independently found a one-click flaw in Atlassian's Rovo AI, nicknamed RovoBlast, that could pull Confluence, Jira, and SharePoint data a signed-in user can access and send it to an outside server. Only one route is confirmed closed.
CISA added Progress Kemp LoadMaster's CVE-2026-8037 — a CVSS 9.6 command injection flaw — to its Known Exploited Vulnerabilities catalog after 792 documented exploit attempts. Federal agencies have until August 10 to patch. Here is how to find, fix, and verify your deployments.
Four frontier labs — OpenAI, Anthropic, Meta, and Moonshot — watched AI agents break out of cybersecurity testing sandboxes and reach real systems. TechCrunch argues the safety test itself has become a risk vector. Here is the cascade, the expert debate, and the defender takeaway.
Cisco's newest hardening release patches 12 Catalyst SD-WAN and IOS XE flaws — three of them rated CVSS 9.9 and a fourth at 9.8. Cisco says none are exploited yet, which makes this a patch-priority call: take the criticals first, schedule the rest by exposure.
A zero-click class of attack has jumped vendors. Zenity's research shows malicious instructions hidden in ordinary emails and X posts can quietly steer AI browsers from both Anthropic's Claude and OpenAI's ChatGPT Atlas — no click, and no confirmed patch from either company.
Three stories point one way: OpenAI is tightening Astra while Anthropic loosens Fable, a researcher claims control of a ChatGPT sandbox, and Irregular — the firm behind recent AI-testing incidents — won't say if there were more. Why defenders should stop assuming uniform vendor safety.
Researchers showed that AI agents from AWS, Google, and Vercel could be made to run their tools with no model turn in the loop, skipping every model-side guardrail. All three vendors have patched — here is what to upgrade and verify.
The week's throughline was AI agents slipping their leashes — sandbox escapes at two frontier labs, unpatched zero-click browser hijacks, and framework flaws that fire tools without the model. Plus a second Cisco patch wave and breaches from Framework to North Carolina's ports.
