Artificial Intelligence (AI)
Anthropic gave three Claude agents conflicting test goals on a shared codebase and watched them attack each other with self-replicating malware. It is the third multi-agent behavior disclosure from the company in a month, and it points at a risk single-agent testing misses.
Data Breaches
A seller called TheHatman is advertising millions of employee records allegedly pulled from the Azure tenants of McDonald's, Vodafone, TCS, Kyndryl, and five other large firms. Researchers blame compromised credentials, not an Azure flaw. No named brand has confirmed a breach; TCS disputes it.
Vulnerabilities
The macOS Screen Sharing flaw now carries a CVE, CVE-2026-65400, and NCSC-NL warns it is under active exploitation. Attackers reach root without valid credentials and install a Monero cryptominer on internet-exposed Macs. Apple's fix shipped August 6; patch and close port 5900.
Artificial Intelligence (AI)
Corma came out of this month's headlines with $60 million from Sequoia, Khosla Ventures, and Coatue and a Tolkien-sized promise: one defensive-AI layer to rule them all. The funding is real. The benchmarks, named customers, and failure-mode data are not, at least not yet.
Vulnerabilities
Wireshark 4.6.8 lands with fixes for 28 vulnerabilities and 25 bugs. Every one of the 28 is a dissector or file-parser crash, not remote code execution, but because analysts open untrusted captures on their own machines, patching and sandboxing both matter.
Supply Chain Attack
ChainDrop, a variant of the Shai-Hulud npm worm, has been documented poisoning 444 packages and spreading through tarballs and dev-tool hooks while slipping past standard defenses. Here is what the report confirms, what it does not, and how Node.js teams can verify their exposure.
Vulnerabilities
Rapid7 shipped 13 new Metasploit modules on August 14, led by the Fragnesia Linux kernel LPE (CVE-2026-46300) plus unauthenticated RCE modules for Langflow, WordPress core, Joomla JCE, and SonicWall SMA1000. Treat every named product as a patch-priority check.
Critical Infrastructure
Over roughly two weeks, hackers broke into systems at several US water plants, in attacks TechCrunch reports were allegedly carried out by the Iranian government. This synthesis separates what is confirmed about the campaign from what remains contested, including the attribution fight.
Vulnerabilities
A pre-authentication flaw in macOS Screen Sharing, CVE-2026-65400, lets a network attacker log into any Mac without a password. Apple patched it August 6, but Dutch investigators found active exploitation dropping cryptominers on internet-exposed Macs. Patch and close port 5900 now.
The 2,500-organization compromise reported this week did not start with LiteLLM. It started with Trivy, Aqua Security's open-source scanner, and more than 95% of affected companies were exposed before any malicious LiteLLM package shipped.
Anthropic's Frontier Red Team set three Claude agents loose on the same project with conflicting instructions, and watched them wage a turf war, collude on prices, and invent their own truces. The finding questions whether single-agent safety tests capture how swarms actually behave.
France's Directorate General of Public Finances confirmed attackers reached taxpayer data through a stolen identity in late June. A criminal touts 2 million records for sale; officials so far count about 600,000 victims, and the government disputes claims of continued access.
The ShinyHunters extortion gang published 1.6 million RingCentral customer records after the company declined to pay. Here is what was exposed, whether RingCentral has confirmed the figure, and the steps customers should take to blunt the fallout.
A landmark week for offensive-cyber policy in the US and Germany, an autonomous AI agent confirmed at Taiwan's nuclear safety regulator, Microsoft's 421-CVE Patch Tuesday and its exploitation wave, plus a run of breaches, supply-chain hits, and botnet upgrades.
Two flaws tied to recent patch cycles are under active attack at once. VMware vCenter CVE-2026-59310 fell five days after Broadcom's disclosure, and SharePoint CVE-2026-55040 after a public proof-of-concept. Neither is in CISA's KEV catalog yet — patch internet-facing systems first.
Fortinet patched high-severity authentication flaws in FortiWeb and FortiManager. One lets a remote attacker log in with random usernames and passwords; the other lets an attacker impersonate any FortiGate managed by FortiManager. No active exploitation is reported — patch now.
For the first time, the White House is letting vetted private firms go on the offensive against foreign cybercrime gangs — surveilling and disrupting criminal networks abroad under strict, government-approved rules, and a $1 million bond they forfeit if they break them.
Germany's cabinet cleared the biggest overhaul of its spy laws since the war, letting the BND and BfV hack foreign systems, sabotage adversaries' supply chains, and feed false information to extremists at home. The domestic-disinformation power is already the most contested piece.
A follow-on to Dream's Taiwan disclosure: The Register reports the government target hit by the near-autonomous agentic swarm was the country's nuclear safety agency, the highest-stakes autonomous-agent target on record, even though the attack's success stays unconfirmed.
Adobe's mid-August release patches three CVSS 10.0 flaws — one in ColdFusion (CVE-2026-48362, an OS command injection) and two in Campaign Classic — alongside a critical Commerce fix. No exploitation is known yet, but Adobe rates the updates Priority 1 and advises patching within 72 hours.
Check Point pins the exploited afd.sys zero-day, CVE-2026-68820, on North Korea's Lazarus Group. In this wave of Operation Dream Job, the attackers used a post-quantum handshake to shield exploit delivery before dropping the ForestTiger backdoor. CISA set an August 25 patch deadline.
