Cybersecurity briefing, 2026-08-25

When an exploit can forge your git history, your audit log records the attacker's story, not yours.

• Defender flaw now has a PoC and federal clock
• Iran-Linked Attack Took UK Generator Offline
• Doubloon Dredger Hijacks Notion Trust for Token Theft
• CISA Turns Logging into an Operating Blueprint
• WordlistLoader and SynkLoader Abuse Trusted Surfaces
• Leaked AWS Keys Stay Live for Years
• miniOrange SAML Flaws Hand Attackers WordPress Admin
• GitLab Exploitation Turns Repo History Into a Target
• Firefox Extension Ring Keeps Stealing Wallet Secrets
• TikTok Settles COPPA Suit, Cleans Up Legacy Liability
• AliExpress Fingerprinting Exposed Browser Audio Side Effects
• Apollo Confirms Cloud Breach, SSNs Exposed
• Keycloak Reset Bypass Reaches Every App Behind SSO
• ShinyHunters Leak Fueled a Fake Security Pitch
• Atlassian Fans One Library Fix Across Its Stack
• Pen Test Partners Found Wi-Fi Bridging OT Segmentation
• ToxicPanda 2.0 Turns Android Permissions Into Persistence