Cybersecurity briefing, 2026-08-17

Here is the short version for today.

• Evooo1Bot Uses Routers as Stealth Proxy Nodes
• SAP Data Hub Adapter Draws Fast Exploitation Pressure
• Exposed Mac Screen Sharing Is Already Getting Rooted
• HoneyMyte Adds a Signed Driver to CoolClient
• Jewelbug Merges Espionage and Crypto Theft
• Power Pages Misconfigurations Exposed D365 Data
• AmnesiaStealer Adds Live Browser Session Control
• GeoServer Flaw Draws Fast Probing, Possible Server Takeover
• LiteLLM Breach Grew Into CI Secret Spill
• Beacon Breach Traced to Leaked AWS Key
• RecruitTrap Uses Job Lures for Account Takeover
• Agent Guardrails Fail Before the Model Speaks
• RingCentral Leak Creates a Phishing List
• WindRelay and SpyNote Fueled a 13-Minute Call Scam
• White House Lets Contractors Join Offensive Cyber Operations
• AWS ACM Drops Email Validation by 2027