AI is pushing software development to machine speed, creating far more code, dependencies, and security findings than traditional review processes can handle. The webinar “The True Cost of Building at Machine Speed” shows how security teams can adapt controls and governance so risk does not scale faster than development. #Chainguard…
Researchers used a fake DeFi startup, Ballena Azul LTD / Blue Whale LTD, to recruit suspected Famous Chollima operatives and observe how a DPRK IT worker operation behaves after hire. The investigation exposed forged identities, remote access workflows, AI-assisted tooling, mule bank accounts, AstrillVPN exit nodes, and multiple operatives’ infrastructure and…
Akira ransomware targeted One Vision Imaging, a team passionate about photographic printing and framing, threatening to exfiltrate and encrypt their corporate data, including employee personal information, HR files, sources, contracts, agreements, and client information. #Unknown
Verona 83 in IT reported a ransomware incident attributed to bravox, impacting its integrated services spanning logistics and event management. The threat resulted in disruption across Verona 83’s operations in #Italy
Coggins Insurance Agency in Florida, United States reported a ransomware incident by the Global Secret Group, impacting its systems and encrypting 85.9 GB across 245,768 files in 26,563 folders. The victim’s insurance operations (cogginsinsurance.com) faced service disruption and data access loss, with the event occurring in the United States. #UnitedStates
An actor posting as exfilar claims ArtNexus left a backend database publicly readable, exposing 3,314 unique email addresses, 3,455 user accounts, and 834 physical addresses with phone numbers across 37 countries. The alleged dump also includes payment source tokens, purchase records, and private negotiation messages, but the claim remains unverified and…
CISA says ransomware gangs are now exploiting two recently patched SonicWall SMA1000 flaws, including a maximum-severity SSRF vulnerability tracked as CVE-2026-15409. The issues were previously used in zero-day attacks by UTA0533 to deploy KNUCKLEBALL, Sou5, ROOTRUN, and ORANGETAIL against exposed SMA1000 appliances. #SonicWall #SMA1000 #CVE-2026-15409 #CVE-2026-15410 #UTA0533 #KNUCKLEBALL #Sou5 #ROOTRUN #ORANGETAIL
Enterprise teams are discovering that agentic AI has created a second workforce with little to no onboarding, leaving major gaps in inventory, identity, attribution, and governance. The article argues that organizations need real-time, end-to-end controls for agents across endpoints, browsers, networks, and AI gateways to manage risk, cost, and compliance. #Island #AgentBaiting #StealC #MCP
![Cybersecurity News | Daily Recap [08 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [08 Aug 2026]")
Daily Recap, this edition highlights supply-chain and application risks, including TrueConf installers being trojanized with backdoors, nearly 800 malicious npm packages delivering a cross-platform RAT and infostealer, and ClickFix macOS stealers draining crypto wallets. It also covers enterprise and exposure concerns such as an Atlassian Rovo one-click flaw leaking Jira and Confluence content, Metabase SQLi zero-day exploitation, UNC6671 vishing targeting personal phones for SaaS data theft, plus breaches at Levi Strauss & Co. and Unlimited Technology Systems.
#TrueConf #RAT #infostealer #ClickFix #macOS #crypto wallets #Atlassian Rovo #Jira #Confluence #Metabase #SQLi #UNC6671 #vishing #Levi Strauss #Unlimited Technology Systems #U.S. Coast Guard #North Carolina ports #DEF CON #Water Watch Center #Adam Cassady #AI patches
AI agents are becoming a major target for prompt injection attacks, with researchers and audits showing serious risks across tools like Claude, Vercel, and the Agent Skills ecosystem. The article argues for governed, transparent AI architectures with protocols like MCP, plus UEBA, NDR, and human oversight to contain threats at machine speed. #Claude #Vercel #AgentSkills #ModelContextProtocol #Mozilla #MITREATTCK #NIST
A 20-year-old man in the United Kingdom was sentenced to two years in prison after admitting to an online abuse campaign that victimized 117 girls across multiple countries while he was associated with The Com. The National Crime Agency linked him to sextortion, blackmail, and child sexual abuse offenses carried out through Snapchat, Telegram, and Discord. #TheCom #NationalCrimeAgency #JustinSwaddle
Cisco warned that its Secure Endpoint Connector products on Windows, macOS, and Linux are affected by seven ClamAV vulnerabilities that can cause denial-of-service conditions, with public proof-of-concept code available for two of them. The flaws were fixed in ClamAV 1.5.4, and Cisco says no exploitation in the wild is known so…
AI accelerators and neo-clouds are rapidly expanding, but their specialized hardware creates security blind spots that traditional cybersecurity tools cannot easily monitor. The article highlights how stealthy compromise of accelerator-based cloud infrastructure could enable supply chain attacks, model poisoning, and cross-tenant leakage, and how Stealthium aims to detect such threats through…
OpenAI has paused parts of Astra’s internal development after evaluations suggested the unreleased model may reach its “critical” cybersecurity risk threshold under the company’s Preparedness Framework. To reduce the danger of autonomous exploit building and end-to-end attack execution, OpenAI has added strict isolation, network limits, and monitoring controls. #OpenAI #Astra #PreparednessFramework…
The Minor Food Group in Thailand, a major Asia-Pacific food and beverage operator founded in 1980 and part of Minor International (MINT), is reportedly affected by ransomware activity attributed to the Panzer threat actor. The Minor Food Group’s extensive outlet network and digitized operations across Asia-Pacific are cited as potential targets of the incident. #Thailand