Artificial Intelligence (AI)
Anthropic's Frontier Red Team set three Claude agents loose on the same project with conflicting instructions, and watched them wage a turf war, collude on prices, and invent their own truces. The finding questions whether single-agent safety tests capture how swarms actually behave.
Data Breaches
France's Directorate General of Public Finances confirmed attackers reached taxpayer data through a stolen identity in late June. A criminal touts 2 million records for sale; officials so far count about 600,000 victims, and the government disputes claims of continued access.
Data Breaches
The ShinyHunters extortion gang published 1.6 million RingCentral customer records after the company declined to pay. Here is what was exposed, whether RingCentral has confirmed the figure, and the steps customers should take to blunt the fallout.
Vulnerabilities
A landmark week for offensive-cyber policy in the US and Germany, an autonomous AI agent confirmed at Taiwan's nuclear safety regulator, Microsoft's 421-CVE Patch Tuesday and its exploitation wave, plus a run of breaches, supply-chain hits, and botnet upgrades.
Vulnerabilities
Two flaws tied to recent patch cycles are under active attack at once. VMware vCenter CVE-2026-59310 fell five days after Broadcom's disclosure, and SharePoint CVE-2026-55040 after a public proof-of-concept. Neither is in CISA's KEV catalog yet — patch internet-facing systems first.
Vulnerabilities
Fortinet patched high-severity authentication flaws in FortiWeb and FortiManager. One lets a remote attacker log in with random usernames and passwords; the other lets an attacker impersonate any FortiGate managed by FortiManager. No active exploitation is reported — patch now.
Policy & Government
For the first time, the White House is letting vetted private firms go on the offensive against foreign cybercrime gangs — surveilling and disrupting criminal networks abroad under strict, government-approved rules, and a $1 million bond they forfeit if they break them.
Policy & Government
Germany's cabinet cleared the biggest overhaul of its spy laws since the war, letting the BND and BfV hack foreign systems, sabotage adversaries' supply chains, and feed false information to extremists at home. The domestic-disinformation power is already the most contested piece.
Artificial Intelligence (AI)
A follow-on to Dream's Taiwan disclosure: The Register reports the government target hit by the near-autonomous agentic swarm was the country's nuclear safety agency, the highest-stakes autonomous-agent target on record, even though the attack's success stays unconfirmed.
Adobe's mid-August release patches three CVSS 10.0 flaws — one in ColdFusion (CVE-2026-48362, an OS command injection) and two in Campaign Classic — alongside a critical Commerce fix. No exploitation is known yet, but Adobe rates the updates Priority 1 and advises patching within 72 hours.
Check Point pins the exploited afd.sys zero-day, CVE-2026-68820, on North Korea's Lazarus Group. In this wave of Operation Dream Job, the attackers used a post-quantum handshake to shield exploit delivery before dropping the ForestTiger backdoor. CISA set an August 25 patch deadline.
A newly disclosed flaw let researchers replay encrypted reasoning objects across OpenAI, Anthropic, and Google reasoning APIs, using a weaker model to decode a stronger one's hidden reasoning and pull API keys and passwords out of public session logs.
Israeli cyber firm Dream says it documented the first publicly known near-autonomous AI attack on a government target. Aimed at Taiwan, the multi-agent framework adapted mid-operation, corrected its own mistakes, and expanded to a nuclear safety agency and energy firms as it went.
A joint U.S.-South Korea advisory ties the Gunra ransomware-as-a-service crew to a repeatable break-in: two unpatched Fortinet authentication-bypass flaws, defeated MFA, and an encryptor built from leaked Conti code. The fixes have been available since early 2025.
OpenAI launched GPT-5.6-Cyber, a cyber model tuned to refuse less, and gated it behind a two-tier Daybreak Blue and Red access program — one day after pausing Astra over the same capability class. What it means for defenders.
Zoom has patched ZOOMSDAY, a zero-click flaw in its annotation tool that let any meeting participant run code on another attendee's device — presenter to viewer and back. Researchers built a working exploit with a public AI tool in fewer than 20 prompts.
Microsoft's August 2026 Patch Tuesday is one of the largest on record: 421 CVEs by Rapid7's count, 62 rated critical, and a use-after-free in the afd.sys kernel driver that North Korea's Lazarus group used as a zero-day to reach SYSTEM. Patch that one first.
Rapid7 Labs disclosed a two-CVE SharePoint chain reaching unauthenticated remote code execution as any user, including administrator. A JWT authentication bypass feeds an RCE flaw, both fixed in the August 11 Patch Tuesday. Notably, an AI agent helped find the chain.
A Kansas City security researcher says his algorithm now produces adversarial patterns on demand that hide people, faces, and vehicles from surveillance cameras. He tested them against 11 open-source detection systems and demonstrated one on a car at Def Con.
Two security researchers bought cheap domains, including noreply.net and deleteduser.com, and pointed them at email listening services. Hundreds of companies are still firing corporate secrets into those inboxes. The exposure is a configuration problem your team can audit today.
New research from PortSwigger's Gareth Heyes shows CSS inside an email can slip past its message boundary and interfere with the webmail interface across Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail — stealing passwords and tokens or hijacking trusted UI actions.
