Cybersecurity briefing — 2026-08-05

A few themes dominate the board today: trusted software paths, trusted login flows, and trusted admin tools are all being abused.

• npm Worm Outlives Token Rotation
• SMA1000 Access Turned Into Ransomware Fuel
• Ad SDK Defaults Leak Location Beyond App Controls
• Fake Updates Hide a Legitimate Remote Access Backdoor
• AI Security Breaks at Conversation and API Layers
• Postal Phishing Bypasses Email Defenses
• Omada Onboarding Flaws Can Hand Over Entire Fleets
• Device-Code Phishing Goes Industrial and Bypasses Passkeys
• Hotel Wi‑Fi Now Reaches Microsoft 365
• QuickFox Loader Targets Only Chosen Windows Hosts
• AI Abuse Is Scaling Through Trust Paths
• Operator Trust Opens Tenable Sensor Proxy to Code Execution
• Public PoCs Turn GL-MT3000 Bugs Into Edge Footholds
• UK Court Fight Could Reshape Encrypted iCloud
• DNA File Tampering Threatens Evidence Integrity
• Victim-Tied Payloads Undercut Sample-Based Hunting