![Cybersecurity News | Daily Recap [18 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [18 Aug 2026]")
Daily Recap, AI security coverage highlighted escalating vulnerability pressure alongside new funding and acquisitions, while multiple reports showed how misconfigurations, naming errors, and oversight gaps can push AI systems into unpredictable behavior or even real-world attacks. The recap also covered actively exploited flaws across Windows and other platforms, high-impact breaches affecting personal data at scale, and threat-actor activity tied to the financial sector. #Xpander #VirtueAI #LiteLLM #Trivy #WindowsTaskHost #Ray #GitLab #Snowflake #WordPress #WebKit #Microsoft365 #WMIC #SouthCarolina #SSNs #SafePal #PokemonCenter #Azure #BlackFile #Claude #SelfReplicatingMalware
AI Security
- AI security news centered on rising vulnerability pressure, governance funding, and market moves, including a new $7.5 million round for Xpander, Fortinet’s acquisition of Virtue AI, and multiple reports showing how misconfigurations and naming errors can let AI systems behave unpredictably or even attack real targets – AI Surge, AI Funding, Virtue AI, AI Postmortem, AI Oversight, Naming Error, Claude Malware
- A separate AI incident trail showed the LiteLLM/Trivy attack cascading from CI pipelines into ransomware and multiple breaches, highlighting how supply-chain weaknesses can spread quickly across organizations – LiteLLM Attack
Vulnerabilities & Exploitation
- CISA warned that a Windows Task Host flaw is now being actively exploited by ransomware groups, while another actively exploited Ray bug can trigger browser-based RCE, underscoring continued real-world abuse of unpatched software – Task Host Flaw, Ray RCE
- GitLab and Snowflake both disclosed critical code execution and injection risks, including a GraphQL flaw that could let unauthenticated attackers delete public projects and a GitHub Actions issue that turns crafted issues into command injection – GitLab Flaw, Snowflake Flaw
- WordPress security remained a concern after a form plugin flaw left about 300,000 sites potentially exposed to hacking – WordPress Flaw
- Apple patched dozens of WebKit vulnerabilities in fresh macOS and iOS updates, reducing exposure to browser and device compromise – WebKit Patches
Microsoft & Windows
- Microsoft rolled out Windows improvements in testing, including a faster File Explorer and a customizable context menu, while also fixing an outage affecting search in Microsoft 365 apps – Explorer Update, M365 Outage
- Microsoft also started removing WMIC from Windows 11 beta builds, cutting off a long-used LOLBin abused by cybercriminals – WMIC Removal
Breach & Data Theft
- A South Carolina loan company breach exposed financial information and SSNs for nearly 750,000 people, making it one of the day’s largest personal-data incidents – SC Breach
- France reported a tax authority data breach affecting 680,000 people, adding to a wave of large-scale government data exposures – French Tax Breach
- SafePal, a crypto hardware wallet maker, was hit by a breach impacting nearly 40,000 users, while Pokémon Center also disclosed a customer-data incident that canceled some orders – SafePal Breach, Pokémon Breach
- A hacker claimed theft of 3.6 million Azure account records from major companies, though the allegation remains unverified – Azure Theft
Threat Actor Activity
- BlackFile attacks were linked to the financial sector, with new details showing the group targeting companies through more focused intrusion activity – BlackFile Attacks