Cybersecurity briefing, 2026-08-10

Here is the briefing for August 10.

• SharePoint Patches Didn’t Clear BIT’s Breach
• Metabase Breach Exposes Downstream Databases
• Malicious Python Releases Reach Developer Secrets at Startup
• Container Escape Turns Old Linux Bug into Host Risk
• Agent Guardrails Fail Before the Model Speaks
• Session Theft Bypasses MFA and Sign-In Alerts
• Agent Harness Bugs Expose CI Secrets
• One Terraform State Leak Can Cross Cloud Boundaries
• Cisco IOS XE Fixes Expose Broader Codebase Weaknesses
• Chrome Bug Discovery Is Outrunning Release Cadence
• AI Patches Still Need Human Eyes
• Redact Rebrand Hides the Same Extortion Playbook
• Prompts Pass Through a Reseller’s Hands
• Shared NAT Is Not a Safe Isolation Boundary