Cybersecurity briefing, 2026-08-11

Exposed edge devices, trusted software channels, and AI tooling are all showing up in active attacks this week.

• Gunra RaaS Turns Edge Access Into Extortion
• Head Mare Turns TrueConf Updates Into Malware Delivery
• Internet-Exposed PLCs Fuel Multistate Water Attacks
• Private APNs Hid a Second Heat Plant Intrusion
• Ghostjacking Turns AI Telemetry Into Attack Commands
• DeadLock Uses Decentralized Services to Keep Extortion Alive
• OpenAI Pauses Astra Over Cyber Capability Risk
• CEVA Breach Exposes Steam and Retail Shipping Data
• Kimsuky Builds Offline AI Pipeline for Phishing
• Paste One Command, Lose Mac Passwords and Wallets
• Coruna and DarkSword Go Mass-Market
• Aeternum Moves Malware Control Onto Polygon
• Metabase Zero-Day Hits Self-Hosted Analytics Instances
• Passkeys Fell to Session and Sync Abuse