Cybersecurity briefing, 2026-08-12

Microsoft starts the day with an exploited Windows zero day in afd.sys.

• Gunra Shifts Ransomware to Perimeter Break-ins
• Kimwolf Offloads Break-ins From Its DDoS Core
• Arista VeloCloud Patch Reaches a Trust Anchor
• Zoom Annotation Flaw Let Attendees Hijack Peers
• Head Mare Turns TrueConf Updates Into Malware Delivery
• CEVA Breach Exposes Steam and Retail Shipping Data
• Hijacked npm Packages Hid C2 in Ethereum
• OpenAI Puts Cyber AI in Partner Hands
• Delta Fake Wi-Fi Drew FBI Scrutiny
• Hostile SIMs Gain Control of Quectel Modems
• SAP Patch Day Mixes Open and Privileged Flaws
• Private APN Became a Bridge Into CHP Controls
• DeadLock Moves Extortion Behind Blockchain Pointers
• AI Hunt Exposes Telecom Core Trust Flaws