Cybersecurity briefing, 2026-08-11

Here is a thought for standup.

• VulnCheck chains SharePoint bypass into RCE
• Kimwolf offloads break-ins from its DDoS core
• Head Mare turns TrueConf updates into malware delivery
• DeadLock moves extortion behind blockchain pointers
• CEVA breach exposes Steam and retail shipping data
• Arista VeloCloud patch reaches a trust anchor
• Internet-exposed PLCs fuel multistate water attacks
• Zoom fixes four annotation flaws after disclosure
• Sandworm used private APN to reach CHP controls
• Sandworm lures Ukrainian admins through fake hiring
• Gunra RaaS turns edge access into extortion
• OpenAI puts cyber AI in partner hands
• Ghostjacking turns AI telemetry into attack commands
• Delta fake Wi-Fi drew FBI scrutiny
• FBI probe validates North Korean remote-hire threat
• OpenAI pauses Astra over cyber capability risk
• Hostile SIMs gain control of Quectel modems
• SAP Commerce Cloud faces probing days after patch

Recent editions

• Monday, August 10, 2026: Head Mare turns TrueConf updates into malware delivery · 17 stories
• Sunday, August 9, 2026: Metabase exploitation exposes connected databases · 3 stories
• Saturday, August 8, 2026: SharePoint patches didn’t clear BIT’s breach · 15 stories
• Friday, August 7, 2026: Cisco IOS XE fixes expose broader codebase weaknesses · 19 stories
• Thursday, August 6, 2026: npm worm now spreads through stolen tokens · 17 stories
• Wednesday, August 5, 2026: Imported agents become server commands in Paperclip · 18 stories
• Tuesday, August 4, 2026: AI agents can carry poisoned trust across runs · 16 stories