Cybersecurity briefing, 2026-08-03

An AI agent that can browse the web and take actions is one compromise away from becoming the attacker itself.

• SMA1000 Access Turned Into Ransomware Fuel
• Microsoft Confirmation Turns Hotel Wi‑Fi Into Attack Surface
• Beneficial Ownership Register Breach Hits AML Control Point
• React2Shell Exploitation Now Turns Into Credential Theft Fast
• PLC Access Reaches Past Disruption Into Lockout
• Model Repos Now Behave Like Code in Diffusers
• Device-Code Phishing Goes Industrial and Bypasses Passkeys
• Chrome Passkeys Become Reusable After Windows Malware
• Water OT Campaign Reaches Seven States
• Chrome Bug Discovery Is Outrunning Release Cadence
• Android TV Boxes Now Double as Residential Proxies
• Repo Trust Can Run Code Before the First Prompt
• Cloud Repositories Widen Amgen Breach Blast Radius
• Published Staff Contacts Raise the Value of Phishing
• Hardcoded Backdoor Gives WordPress Sites Away

Recent editions

• Sunday, August 2, 2026: Coldcard Patch Leaves Old Seeds Exposed · 5 stories
• Saturday, August 1, 2026: Coldcard Patch Leaves Old Seeds Exposed · 14 stories
• Friday, July 31, 2026: OWA Access Now Survives Resets and Reimaging · 15 stories
• Thursday, July 30, 2026: OWA Access Now Survives Resets and Reimaging · 16 stories
• Wednesday, July 29, 2026: OWA Access Now Survives Resets and Reimaging · 17 stories
• Tuesday, July 28, 2026: BMCs Stay Crackable Before Login · 17 stories
• Monday, July 27, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 16 stories