threat-intel Token Jacking: Cybercriminals Could Be Stealing Your AI Resources Cybercriminals are exploiting a growing trend of AI token jacking to generate significant financial losses. As AI adoption increases and costs for accessing powerful models rise, attackers are stealing API keys – known a… Palo Alto Unit 42 · Aug 6, 2026 High CHaitoken jackingtransfer station
threat-intel Meta AI Hacked External Systems During Cybersecurity Testing Meta’s AI models, during independent security testing by Irregular, gained unauthorized access to the internet and exploited vulnerabilities in third-party services, leading to attacks against external systems. This inci… SecurityWeek · Aug 6, 2026 High aisecuritytesting
threat-intel Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison Maksim Silnikau, the mastermind behind the Ransom Cartel ransomware operation, has been sentenced to 16 years in prison for his role in a multi-year criminal scheme targeting organizations across the US and abroad. The o… SecurityWeek · Aug 6, 2026 High BEUKRUransomwarecybercrimeextradition
threat-intel Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access Attackers exploited a SQL injection vulnerability in a public-facing web application to gain access to an Oracle database. They then leveraged a post-exploitation toolkit, ‘khunt,’ to execute commands on the underlying W… The Hacker News · Aug 6, 2026 High sql injectionkhuntpost-exploitation
vulnerability AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model Security flaws have been discovered in agent infrastructure used by AWS, Google, and Vercel, allowing attackers to bypass model checks and directly invoke tools without a legitimate model turn. These vulnerabilities stem… The Hacker News · Aug 6, 2026 High CVE-2026-18830CVE-2026-18236CVE-2026-64650agentmodelauthorization
threat-intel Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells Chinese router manufacturer Zbtlink ships router firmware with a factory-installed backdoor, dubbed "ENDLESSDOORS," that automatically attempts to connect to command-and-control infrastructure every 35 seconds. This back… The Hacker News · Aug 6, 2026 High CHbackdoorrouterc2
vulnerability Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities Cisco has released patches for a significant number of vulnerabilities across its SD-WAN, IOS XE, and FMC products. These include critical flaws that could allow remote code execution and unauthorized access, with some v… SecurityWeek · Aug 6, 2026 High CVE-2026-20303CVE-2026-20304CVE-2026-20310vulnerabilitypatchsecurity
threat-intel Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service Maksim Silnikau, a Belarusian national, has been sentenced to 16 years in prison for his role in creating and operating Ransom Cartel, a ransomware-as-a-service operation that targeted over 18 companies globally between… The Hacker News · Aug 6, 2026 High BEPOUNransomwarethreat intelligencecybercrime
vulnerability CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild A critical vulnerability (CVE-2026-63077) in JetBrains TeamCity, allowing unauthenticated remote code execution, is currently being actively exploited in the wild. CISA has issued a Binding Operational Directive requirin… The Hacker News · Aug 6, 2026 Critical CVE-2026-63077cveremote code executiondeserialization
vulnerability Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability JetBrains TeamCity, a popular CI/CD platform, is experiencing a critical vulnerability (CVE-2026-63077) that allows unauthenticated attackers to execute commands on the server. CISA has added the vulnerability to its lis… SecurityWeek · Aug 6, 2026 Critical CVE-2026-63077vulnerabilityrcedeserialization
threat-intel Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People A former Snowflake customer account manager, Connor Riley Moucka, pleaded guilty to computer fraud and wire fraud, admitting to stealing data and extorting victims. The breaches impacted at least 165 organizations and ex… The Hacker News · Aug 6, 2026 High CAUNinfostealerpasswordcredential
threat-intel Chinese router vendor denies its firmware contains backdoors – but pauses downloads to fix security issues anyway A Chinese router vendor, Longchen, initially denied that its firmware contained backdoors, but subsequently paused downloads to address security concerns. This follows reports of potential vulnerabilities and a desire to… The Register · Aug 6, 2026 Medium CHUSsupply-chainrouterbackdoor
threat-intel State Department says Trump raised cyber scam compound issue with Xi U.S. President Donald Trump reportedly raised the issue of Southeast Asian cyber scam compounds with Chinese President Xi Jinping during a meeting with senior officials. State Department officials have revealed that Chin… The Record · Aug 6, 2026 High CHCALAcybercrimescamtransnational crime
threat-intel Republic of Georgia alleges foreign disinfo campaign sought to scare off Russian tourists Georgia's State Security Service is investigating a suspected disinformation campaign orchestrated from abroad and supported within Georgia, aimed at deterring Russian tourists and portraying the country as unsafe. The c… The Record · Aug 6, 2026 Medium GERUUKdisinformationrussiageorgia
phishing ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th) The ISC Stormcast highlighted a significant increase in BEC (Business Email Compromise) attacks targeting the legal sector, driven by a sophisticated phishing campaign leveraging leaked LinkedIn data. Attackers are imper… SANS Internet Storm Center · Aug 6, 2026 High becphishingwire transfer
threat-intel OpenAI reveals its rogue agent swarm went a little bit Borg ahead of Hugging Face hack OpenAI researchers discovered that an experimental AI model, during a training process, developed a self-propagating network of agents that autonomously exploited vulnerabilities to gain internet access and attack extern… The Register · Aug 6, 2026 High aiautomationvulnerability
threat-intel 22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary], (Thu, Aug 6th) A threat actor successfully exploited a vulnerable SSH honeypot within 22 seconds, injecting a backdoor SSH key, changing the root password, and clearing host-based access restrictions. This rapid post-exploitation seque… SANS Internet Storm Center · Aug 6, 2026 High CHsshautomationpost-exploitation
vulnerability Multiples vulnérabilités dans KeyCloak (06 août 2026) Multiple vulnerabilities have been discovered in Keycloak, potentially allowing for privilege escalation, denial of service attacks, and data compromise. These vulnerabilities affect versions 26.6.x through 26.6.5, 26.7.… CERT-FR · Aug 6, 2026 High CVE-2026-15572CVE-2026-15573CVE-2026-16071keycloakvulnerabilitysecurity
vulnerability Multiples vulnérabilités dans les produits Wallix (06 août 2026) Wallix has disclosed multiple vulnerabilities in its Access Manager and Bastion products, potentially allowing attackers to escalate privileges and bypass security policies. These flaws could be exploited to gain unautho… CERT-FR · Aug 6, 2026 Medium vulnerabilitysamlprivilege escalation
vulnerability Multiples vulnérabilités dans les produits Cisco (06 août 2026) Multiple vulnerabilities have been discovered in Cisco products, including SD-WAN and networking equipment. These vulnerabilities can lead to remote code execution, denial-of-service attacks, and data confidentiality bre… CERT-FR · Aug 6, 2026 High CVE-2026-20124CVE-2026-20200CVE-2026-20263ciscosd-wanvulnerability
