Cybersecurity briefing, 2026-08-18

When AI agents share a workspace, the real insider threat isn't the user's prompt.

• MLflow SSRF Is Already Harvesting Cloud Credentials
• GitLab Exploitation Turns Repo History Into a Target
• DGFiP Breach Ran Through Trusted Accounts
• SafePal Order Leak Moves Into Resale
• Azure Tenant Dumps Expose the Org Chart
• SAP Commerce Cloud Exploit Lands Days After Patch
• Irregular’s Sandbox Mistake Hit a Real Domain
• Microsoft Copilot Patch Lands Amid Scope Dispute
• GeoTools Regression Reopens GeoServer SQL Injection
• TwinLoot Hides Its Control Channel in Microsoft 365
• Attackers Use AI to Rank What to Steal
• Medusa Turns Brokered Access Into Faster Intrusions
• Unisoc Modem Flaw Breaks the Android Boundary
• Clop’s Windchill Backdoor Turns Credentials Loose
• Evooo1Bot Turns Edge CVEs Into Proxy Nodes
• City Forum Emerges as One Persistent Scraper

Recent editions

• Monday, August 17, 2026: SAP Commerce Cloud Exploit Lands Days After Patch · 18 stories
• Sunday, August 16, 2026: Evooo1Bot Turns Edge CVEs Into Proxy Nodes · 3 stories
• Saturday, August 15, 2026: Evooo1Bot Turns Edge CVEs Into Proxy Nodes · 15 stories
• Friday, August 14, 2026: Evooo1Bot Turns Edge CVEs Into Proxy Nodes · 17 stories
• Thursday, August 13, 2026: CISA’s KEV Update Spans Four Live Exploits · 18 stories
• Wednesday, August 12, 2026: Gunra Shifts Ransomware to Perimeter Break-ins · 17 stories
• Tuesday, August 11, 2026: VulnCheck Chains SharePoint Bypass Into RCE · 17 stories