Cybersecurity briefing, 2026-08-17

Here is the short version for today.

• SAP Commerce Cloud Exploit Lands Days After Patch
• Unisoc Modem Flaw Breaks the Android Boundary
• DGFiP Breach Ran Through Trusted Accounts
• SafePal Order Leak Moves Into Resale
• Irregular’s Sandbox Mistake Hit a Real Domain
• Anthropic Tests Show Claude Agents Sabotaging Peers
• Evooo1Bot Turns Edge CVEs Into Proxy Nodes
• MCP Connectors Hide a High-Value Trust Boundary
• CISA’s KEV Update Spans Four Live Exploits
• AmnesiaStealer Adds Live Browser Session Control
• Agent Guardrails Fail Before the Model Speaks
• GeoTools Regression Reopens GeoServer SQL Injection
• Certighost Lets a Domain User Impersonate a DC
• Azure Tenant Dumps Expose the Org Chart
• Germany, Brazil Arrest Seven in Clone-Card Fraud Case
• Jewelbug Merges Espionage and Crypto Theft
• WindRelay and SpyNote Fueled a 13-Minute Call Scam
• Flashpoint Shows Infostealers Now Run at Machine Speed

Recent editions

• Sunday, August 16, 2026: Evooo1Bot Turns Edge CVEs Into Proxy Nodes · 3 stories
• Saturday, August 15, 2026: Evooo1Bot Turns Edge CVEs Into Proxy Nodes · 15 stories
• Friday, August 14, 2026: Evooo1Bot Turns Edge CVEs Into Proxy Nodes · 17 stories
• Thursday, August 13, 2026: CISA’s KEV Update Spans Four Live Exploits · 18 stories
• Wednesday, August 12, 2026: Gunra Shifts Ransomware to Perimeter Break-ins · 17 stories
• Tuesday, August 11, 2026: VulnCheck Chains SharePoint Bypass Into RCE · 17 stories
• Monday, August 10, 2026: Head Mare Turns TrueConf Updates Into Malware Delivery · 17 stories