Cybersecurity briefing, 2026-08-20

Dahua camera persistence remained after password resets, with planted accounts and P2P relays keeping devices reachable.

• Hunt.io Finds Dahua Cameras Kept Reconnecting
• AI Tools Turn Siemens PLC Exposure into Control Risk
• GitLab Exploitation Turns Repo History Into a Target
• OpenAI Moves Model Security Into Runtime Containment
• UAT-10147 Turns Public Exploits Into Repeatable Ops
• Zimbra Flaw Is Being Exploited in the Wild
• Citrix NetScaler Bypass Targets Trust Roles
• MLflow SSRF Is Already Harvesting Cloud Credentials
• CareCloud Breach Count Jumps Into Millions
• Clop’s Windchill Backdoor Turns Credentials Loose
• SilkParasite Fields Five New RATs in Central Asia
• Rust Crates Hid Build-Time Malware in Cargo
• Medusa Turns Brokered Access Into Faster Intrusions
• Defender Zero-Day Now Has a Federal Deadline
• Froxlor API Leak Exposes Password Hashes and 2FA Seeds
• NCSC and Meta Show Approved AI Can Still Leak Data
• GTIG Tracks Three Russian Clusters Abusing Login Flows
• Mabna Charges Expose Academic Data Resale Network
• White House Opens Door to Vetted Offensive Cyber Firms