Cybersecurity briefing, 2026-08-18

When AI agents share a workspace, the real insider threat isn't the user's prompt.

• MLflow SSRF Is Already Harvesting Cloud Credentials
• GitLab GraphQL Flaws Invite Fast State Changes
• DGFiP Breach Ran Through Trusted Accounts
• SafePal Order Leak Moves Into Resale
• Azure Tenant Dumps Expose the Org Chart
• SAP Commerce Cloud Exploit Lands Days After Patch
• Irregular’s Sandbox Mistake Hit a Real Domain
• Copilot Personal Link Hid a One-Click Exfil Path
• GeoTools Regression Reopens GeoServer SQL Injection
• TwinLoot Hides Its Control Channel in Microsoft 365
• Attackers Use AI to Rank What to Steal
• Medusa Scales Ransomware With Brokered Access
• Unisoc Modem Flaw Breaks the Android Boundary
• Clop’s Windchill Shell Knows Too Much
• Evooo1Bot Turns Edge CVEs Into Proxy Nodes
• Forminator Upload Flaw Can Run Attacker PHP
• City Forum Emerges as One Persistent Scraper