Cybersecurity briefing, 2026-08-10

Your security telemetry just became something an AI agent will obey, not just evidence it reads.

• Head Mare Turns TrueConf Updates Into Malware Delivery
• Internet-Exposed PLCs Fuel Multistate Water Attacks
• Metabase Exploitation Exposes Connected Databases
• Malicious Python Releases Reach Developer Secrets at Startup
• CEVA Breach Exposes Steam and Retail Shipping Data
• Coruna and DarkSword Go Mass-Market
• Container Escape Turns Old Linux Bug into Host Risk
• CryptoJS Randomness Bug Exposed Wallet Secrets
• Chrome Bug Discovery Is Outrunning Release Cadence
• Rovo's Toggle Fails as a Data Boundary
• Gunra RaaS Turns Edge Access Into Extortion
• SharePoint Patches Didn’t Clear BIT’s Breach
• DeadLock Moves Extortion Behind Blockchain Pointers
• OpenAI Pauses Astra Over Cyber Capability Risk
• Ghostjacking Turns AI Telemetry Into Attack Commands
• AI Patches Still Need Human Eyes
• Cisco's ClamAV Flaws Can Knock Out Endpoint Scanning

Recent editions

• Sunday, August 9, 2026: Metabase Exploitation Exposes Connected Databases · 3 stories
• Saturday, August 8, 2026: Metabase Exploitation Exposes Connected Databases · 15 stories
• Friday, August 7, 2026: Cisco IOS XE Fixes Expose Broader Codebase Weaknesses · 19 stories
• Thursday, August 6, 2026: npm Worm Now Spreads Through Stolen Tokens · 17 stories
• Wednesday, August 5, 2026: npm Worm Now Spreads Through Stolen Tokens · 18 stories
• Tuesday, August 4, 2026: AI Agents Can Carry Poisoned Trust Across Runs · 16 stories
• Monday, August 3, 2026: SMA1000 Access Turned Into Ransomware Fuel · 15 stories