Cybersecurity briefing, 2026-08-23

Car head unit malware is now arriving through trusted updater paths, turning vehicles into proxy botnet infrastructure.

• BadBox reaches car head units through DoFun updaters
• ToxicPanda 2.0 turns Android permissions into persistence
• Microsoft broadens AI Gateway abuse to three workloads

Recent editions

• Saturday, August 22, 2026: XZ Utils showed build inputs are part of the attack surface · 17 stories
• Friday, August 21, 2026: UAT-10147 turns public exploits into repeatable ops · 16 stories
• Thursday, August 20, 2026: Hunt.io finds Dahua cameras kept reconnecting · 18 stories
• Wednesday, August 19, 2026: Clop’s Windchill backdoor turns credentials loose · 18 stories
• Tuesday, August 18, 2026: MLflow SSRF is already harvesting cloud credentials · 17 stories
• Monday, August 17, 2026: SAP Commerce Cloud exploit lands days after patch · 19 stories
• Sunday, August 16, 2026: Evooo1Bot turns edge CVEs into proxy nodes · 3 stories