Cybersecurity briefing, 2026-08-08

Here is the briefing for August 8.

• Metabase Exploitation Exposes Connected Databases
• SharePoint Patches Didn’t Clear BIT’s Breach
• Malicious Python Releases Reach Developer Secrets at Startup
• Container Escape Turns Old Linux Bug into Host Risk
• Chrome Bug Discovery Is Outrunning Release Cadence
• Agent Harness Bugs Expose CI Secrets
• One Terraform State Leak Can Cross Cloud Boundaries
• AI Agents Can Carry Poisoned Trust Across Runs
• Cisco IOS XE Fixes Expose Broader Codebase Weaknesses
• AI Patches Still Need Human Eyes
• Redact Rebrand Hides the Same Extortion Playbook
• Session Theft Bypasses MFA and Sign-In Alerts
• Shared NAT Is Not a Safe Isolation Boundary
• Omada’s Provisioning Plane Is the Real Attack Surface
• Elementor Pro Upload Check Opens PHP Write Path