Cybersecurity News | Daily Recap [06 Aug 2026]

AI Browser Threats

• AI-powered browsers and assistants are being abused through zero-click attacks and prompt exposure, exposing a growing enterprise browser security gap and risks for tools like Claude and ChatGPT Atlas – AI Browser Gap, Zero-Click AI, Poison Claude
• A new attack technique shows malware can hijack passkey-protected accounts, undermining a key modern authentication defense – Passkey Hijack

Vulnerabilities & Patching

• Cisco released fixes for critical SD-WAN, IOS XE, and FMC flaws as defenders race to reduce exposure to high-severity network device bugs – Cisco Patches
• A critical Paperclip flaw enabled admin access and code execution, highlighting how a single bug can fully compromise affected systems – Paperclip Flaw
• CISA warned that attackers are actively exploiting flaws in Langflow, N-central, and Apache Tomcat, underscoring urgent patching needs across widely used platforms – CISA Warns
• Attackers have begun exploiting a recent JetBrains TeamCity vulnerability in the wild, confirming rapid weaponization of newly disclosed bugs – TeamCity Exploited
• A $50,000 exploit chain turned Bixby against Samsung phones, showing how chained weaknesses can lead to device compromise – Bixby Chain

Malware & Backdoors

• Chinese-made Zbtlink routers are shipping with a built-in backdoor that opens unauthenticated root shells, creating a major supply-chain risk – Router Backdoor
• Hackers are running the khunt post-exploitation toolkit from an Oracle database, demonstrating living-off-the-land abuse inside enterprise environments – Khunt Toolkit
• A phishing campaign targeting a COLDCARD security audit deployed a remote access tool, illustrating how trust-themed lures are used to plant persistent access – COLDCARD Phish
• More than 250 ClickFix domains are using browser fingerprinting to conceal macOS malware lures from security analysis – ClickFix Domains

Cloud, Telecom & Crypto Cases

• Connor Moucka has pleaded guilty in the Snowflake cloud data-theft spree and faces up to 32 years in prison, while a separate Canadian defendant also admitted guilt in related attacks – Snowflake Guilty, Canadian Guilty
• Ransom Cartel ransomware creator was sentenced to 16 years in prison, marking another major law-enforcement win against extortion crews – Ransom Cartel
• Chinese telecom firms still maintain a deep U.S. presence despite ties to Salt Typhoon, according to a House committee report – Telco Links

Threat Landscape & Strategy

• OpenAI disrupted the Poipet scam network, which had been using ChatGPT across multiple fraud schemes, highlighting AI abuse in criminal operations – Poipet Scam
• A podcast conversation with Edna Conway argues that compliance alone won’t reduce cyber risk, emphasizing broader resilience and governance approaches – Cyber Risk
• Tom Cotton is urging Treasury tax-code changes to help modernize OT, reflecting policy efforts tied to critical infrastructure security – OT Modernize
• Cyber operations are increasingly shaping global conflict, with the digital domain emerging as a true fourth battlefield – Fourth Battlefield
• Black Hat USA 2026 vendor announcements spotlighted ongoing defensive innovation and product launches across the security industry – Black Hat 2026

Cybersecurity News | Daily Recap – hendryadrian.com