Cybersecurity briefing, 2026-08-01

Here is the quick read for August 1.

• Coldcard Patch Leaves Old Seeds Exposed
• PLC Access Reaches Past Disruption Into Lockout
• Android TV Boxes Now Double as Residential Proxies
• One CareCloud Breach Reaches Thousands of Practices
• Ad Tag Compromise Turns Trusted Sites Into Stealers
• Cosmos DB Gateway Secret Breaks Tenant Boundaries
• A Rehearsed npm Playbook Reached Major Packages
• Microsoft Confirmation Turns Hotel Wi‑Fi Into Attack Surface
• AI Eval Misconfigurations Reached Real Production Systems
• Chrome Bug Discovery Is Outrunning Release Cadence
• SBOM Baseline Expands to AI and SaaS
• Memory-Only Backdoors Evade Disk-Based Hunting
• SAML Login Bypass Opens Web Help Desk Admin Access
• GitHub Mailboxes Hide a Persistent Law Firm Foothold

Recent editions

• Friday, July 31, 2026: OWA Access Now Survives Resets and Reimaging · 15 stories
• Thursday, July 30, 2026: OWA Access Now Survives Resets and Reimaging · 16 stories
• Wednesday, July 29, 2026: OWA Access Now Survives Resets and Reimaging · 17 stories
• Tuesday, July 28, 2026: BMCs Stay Crackable Before Login · 17 stories
• Monday, July 27, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 16 stories
• Sunday, July 26, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 5 stories
• Saturday, July 25, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 14 stories