Cybersecurity briefing, 2026-08-21

When attackers abuse OAuth grants and app passwords, a password reset is theater.

• Zimbra Flaw Is Being Exploited in the Wild
• Citrix NetScaler Bypass Targets Trust Roles
• Rust Crates Hid Build-Time Malware in Cargo
• GTIG Tracks Three Russian Clusters Abusing Login Flows
• UAT-10147 Turns Public Exploits Into Repeatable Ops
• Firefox Extension Ring Keeps Stealing Wallet Secrets
• GitLab Exploitation Turns Repo History Into a Target
• AI Tools Turn Siemens PLC Exposure into Control Risk
• MLflow SSRF Is Already Harvesting Cloud Credentials
• Defender Zero-Day Now Has a Federal Deadline
• Post-Conference DMs Deliver Malware Through Google Docs
• OpenAI Moves Model Security Into Runtime Containment
• SilkParasite Fields Five New RATs in Central Asia
• Grok Followed Hidden Instructions in Ciphertext Pages
• Oligo Finds Artifactory Metadata Poisoning Flaws
• Hunt.io Finds Dahua Cameras Kept Reconnecting
• NCSC and Meta Show Approved AI Can Still Leak Data
• Manic Android Malware Added a Nearby-Phone Leak Path