Cybersecurity briefing, 2026-08-07

Stolen tokens, agent flaws, and exposed industrial controls are driving the biggest risks today.

• Oracle SQL Injection Crosses Into Host Compromise
• Agent Guardrails Fail Before the Model Speaks
• npm Worm Now Spreads Through Stolen Tokens
• Compromised Packages Become Reusable Intrusion Pipelines
• Embedded MongoDB Leaves Zenon Users Exposed
• AI Agents Rebuild After Containment
• Thousands of Rockwell PLCs Are Still Publicly Reachable
• TeamPCP’s Reach Extends Into AI Infrastructure
• Defender’s Cleanup Path Becomes the Attack Surface
• Snowflake Plea Locks In Identity-Layer Blast Radius
• Jenkins Control Plane Leaves Secrets Exposed
• Adobe Campaign Classic Gets a Trust-Breaking Flaw Cluster
• Imported Agents Become Server Commands in Paperclip
• Cheap Claude Access Puts Prompts in One Operator's Hands
• Nuxt DevTools HMR Port Can Run Commands