Cybersecurity briefing, 2026-08-03

An AI agent that can browse the web and take actions is one compromise away from becoming the attacker itself.

• SMA1000 access turned into ransomware fuel
• Microsoft confirmation turns hotel Wi‑Fi into attack surface
• Beneficial ownership Register breach hits AML control point
• React2Shell exploitation now turns into credential theft fast
• PLC access reaches past disruption into lockout
• Model repos now behave like code in diffusers
• Device-code phishing goes industrial and bypasses passkeys
• Chrome passkeys become reusable after Windows malware
• Water OT campaign reaches seven states
• Chrome bug discovery is outrunning release cadence
• Android TV boxes now double as residential proxies
• Repo trust can run code before the first prompt
• Cloud repositories widen Amgen breach blast radius
• Published staff contacts raise the value of phishing
• Hardcoded backdoor gives WordPress sites away

Recent editions

• Sunday, August 2, 2026: Coldcard patch leaves old seeds exposed · 5 stories
• Saturday, August 1, 2026: PLC access reaches past disruption into lockout · 14 stories
• Friday, July 31, 2026: OWA access now survives resets and reimaging · 15 stories
• Thursday, July 30, 2026: Shared PLC exposure turns one attack into many · 16 stories
• Wednesday, July 29, 2026: One malicious page can reach Android root · 17 stories
• Tuesday, July 28, 2026: BMCs stay crackable before login · 17 stories
• Monday, July 27, 2026: Spring Boot fat-JARs stay exposed after Fastjson bypass · 16 stories