Cybersecurity briefing, 2026-08-11

Here is a thought for standup.

• VulnCheck Chains SharePoint Bypass Into RCE
• Kimwolf Offloads Break-ins From Its DDoS Core
• Head Mare Turns TrueConf Updates Into Malware Delivery
• DeadLock Moves Extortion Behind Blockchain Pointers
• CEVA Breach Exposes Steam and Retail Shipping Data
• Arista VeloCloud Patch Reaches a Trust Anchor
• Internet-Exposed PLCs Fuel Multistate Water Attacks
• Zoom Fixes Four Annotation Flaws After Disclosure
• Sandworm Used Private APN to Reach CHP Controls
• Sandworm Lures Ukrainian Admins Through Fake Hiring
• Gunra RaaS Turns Edge Access Into Extortion
• OpenAI Puts Cyber AI in Partner Hands
• Ghostjacking Turns AI Telemetry Into Attack Commands
• Delta Fake Wi-Fi Drew FBI Scrutiny
• FBI Probe Validates North Korean Remote-Hire Threat
• OpenAI Pauses Astra Over Cyber Capability Risk
• Hostile SIMs Gain Control of Quectel Modems