Supply Chain Attack
Wiz researchers linked the crates.io compromise of three Rust crates to recent North Korean supply-chain operations, pointing to command-and-control infrastructure shared with the Mastra and axios npm attacks. It is a strong lead built on overlap, not a confirmed verdict.
Phishing
Researchers at Abnormal documented iAuthFlow V2, a $10,000 phishing toolkit that registers an attacker-controlled passkey on a compromised account. Because a passkey is a credential, not a password token, it survives the reset and session revocation that normally evict a phisher.
Supply Chain Attack
Trend Micro's TrendAI team disclosed 14 trojanized npm packages that pose as calendar and streak utilities while dropping RedC2 4.0, a cross-platform Linux backdoor with AI-assisted command-and-control. Here is what the disclosure confirms, what it does not, and what defenders should audit now.
Vulnerability Research
Check Point Research disclosed that BTR.sys, Microsoft Defender's own legitimately signed remediation driver, can be turned into a kernel operation primitive for arbitrary file and registry changes across Windows 7 through Windows 11 25H2, with no external driver imported.
Supply Chain Attack
The Rust Project deleted malicious releases of arrayref, internment, and append-only-vec from crates.io after a compromised maintainer account added a typosquatted proc-macro1 dependency whose build script ran malware at compile time. Here is what security teams should check.
Nation-State & Cybercrime
Cisco Talos published two reports on a Chinese-speaking cybercrime group, UAT-10147, that it says built agentic AI into its post-compromise operations, along with a companion cross-platform implant called SPECTRE. Here is what was disclosed, and what defenders should do about it.
Vulnerabilities & Patching
Microsoft says a maximum-severity remote code execution flaw in Entra ID, CVE-2026-69836, was exploited in the wild before it fixed the service on its own infrastructure. No patch to install does not mean there is nothing for security teams to check.
The Hacker News has independently confirmed GitLab CVE-2026-19478, a CVSS 9.4 code injection flaw, is under active exploitation within days of disclosure, corroborating watchTowr. The unauthenticated GraphQL bug hits unpatched self-managed instances. Patch now.
A critical Elementor Pro flaw, CVE-2026-32475, lets unauthenticated visitors slip a PHP file past the Forms upload check and run code on the server. It is the second WordPress-plugin RCE disclosed in three days. Update to 4.2.2.
Our weekly wrap of stories that did not get a standalone piece: Iranian mega-theft charges, a pre-auth Citrix NetScaler bypass, Rapid7's record vulnerability quarter, fresh browser fixes, Grandoreiro in Mexico, an EDR-killing malware cocktail, and a no-filter AI service.
Threat actors began exploiting GitLab CVE-2026-19478 roughly two days after disclosure, according to WatchTowr. The critical, unauthenticated GraphQL flaw lets attackers modify or delete public projects and user data on unpatched self-managed instances. Fixed builds shipped August 17.
Researchers at the University of Massachusetts Amherst showed that a contactless credit card can keep making payments past its printed expiration date, even after a replacement arrives. They call it the Zombie Card attack, presented at USENIX Security 2026.
An engineer asked an AI coding agent for a package and it named one that was malware. Only a company rule to review any AI-recommended code on GitHub first caught the slop-squatting attempt before install.
Five US agencies, led by NSA, FBI and CISA, warn that an active campaign is using AI-assisted development to build tools targeting internet-exposed Siemens S7 Series PLCs, in what may be the first US-agency flag of AI-assisted tradecraft against OT.
OpenAI halted frontier reinforcement-learning training for two weeks and says expanded chain-of-thought monitoring will raise overhead about 20% on some workloads. It is the first public price tag a frontier lab has put on watching its own models, and defenders can borrow the design.
Cloud Software Group patched CVE-2026-19490, a critical authentication bypass in NetScaler ADC and Gateway rated CVSS 9.3 and reachable by an unauthenticated attacker over the network. No exploitation is confirmed yet, but these perimeter appliances rarely stay quiet.
CISA added four actively exploited flaws to its KEV catalog: Apple macOS (CVE-2026-65400, CVSS 9.8), Microsoft SharePoint, VMware vCenter, and Microsoft IKE. Two are internet-facing remote code execution bugs used to plant backdoors and ransomware. Federal patch deadline: August 21.
After an unreleased model breached Hugging Face and Astra neared a "critical" cyber threshold, OpenAI halted a significant number of training runs and added development-time monitoring plus post-training alignment. Here is what defenders should take from it.
Varonis Threat Labs found three flaws in Microsoft Copilot Personal, collectively CoSnitch, that let a single click on a crafted link pull data from connected apps and poison the assistant's memory. Microsoft shipped a fix on August 18.