Daily

Today’s Stories, Governance Lens — August 18, 2026 Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware — Internet Chinese AI company Zhipu claims its new model is a better bug-finder than Anthropic, OpenAI — Theregister.com Chinese AI company Zhipu claims its new is a better bug-finder than Anthropic, OpenAI — Theregister.com Stopping a cyberattack while walking your dog - defensive AI security CEO says it’s not ruff to do — Theregister.com Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day — Help Net Security A phone company just lost 1.6 million records to a phone call — The Next Web Dark Web Intelligence Claims US Fitness Data Exposure Involving Body20 — Undercodenews.com The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer The use of Chinese AI company Zhipu’s new model, claiming it’s a better bug-finder than Anthropic and OpenAI, raises concerns about the growing importance of artificial intelligence in cybersecurity. This development highlights the need for boards to assess the potential risks and benefits of relying on foreign-made AI solutions. CISOs should prioritize evaluating the origin and ownership of AI-powered security tools, ensuring that they align with the organization’s values and regulatory requirements. ...

Cybersecurity Headlines — August 18, 2026 Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware — Internet Chinese AI company Zhipu claims its new model is a better bug-finder than Anthropic, OpenAI — Theregister.com Chinese AI company Zhipu claims its new is a better bug-finder than Anthropic, OpenAI — Theregister.com Stopping a cyberattack while walking your dog - defensive AI security CEO says it’s not ruff to do — Theregister.com Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day — Help Net Security A phone company just lost 1.6 million records to a phone call — The Next Web Dark Web Intelligence Claims US Fitness Data Exposure Involving Body20 — Undercodenews.com The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer From the Trenches As a cybersecurity practitioner, I’m seeing a disturbing trend of Chinese companies making headlines for all the wrong reasons. The latest exploit to grab my attention is the suspected China-Nexus Actor’s use of a VMware vCenter flaw to deploy Babuk-Derived Ransomware. This is a clear example of nation-state sponsored attacks, and it highlights the need for organizations to prioritize patching their VMware infrastructure. ...

Today’s Stories, Governance Lens — August 17, 2026 A phone company just lost 1.6 million records to a phone call — The Next Web Dark Web Intelligence Claims US Fitness Data Exposure Involving Body20 — Undercodenews.com The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer Shell investigates ‘potential incident’ after Clop data theft claims — BleepingComputer Hacking Group Claims Mass Data Theft From Shell, Philips, GE, Fiserv, Others — Insurance Journal China’s AI model approaches Anthropic’s Mythos 5 in cyber-defense tests — Crypto Briefing You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News The increasing sophistication of AI-powered threats is a growing concern for organizations, with seven incidents reported in the Agentic AI threat cluster. This cluster highlights the potential exposure of companies to targeted attacks leveraging advanced AI capabilities. ...

Cybersecurity Headlines — August 17, 2026 A phone company just lost 1.6 million records to a phone call — The Next Web Dark Web Intelligence Claims US Fitness Data Exposure Involving Body20 — Undercodenews.com The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer Shell investigates ‘potential incident’ after Clop data theft claims — BleepingComputer Hacking Group Claims Mass Data Theft From Shell, Philips, GE, Fiserv, Others — Insurance Journal China’s AI model approaches Anthropic’s Mythos 5 in cyber-defense tests — Crypto Briefing You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the world of threat intelligence and incident reporting. One story that caught my attention is the claim by Dark Web Intelligence that US fitness data has been exposed on the Body20 platform. This raises serious concerns about the security posture of fitness companies and their ability to protect sensitive customer information. ...

Today’s Stories, Governance Lens — August 16, 2026 The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer Shell investigates ‘potential incident’ after Clop data theft claims — BleepingComputer Hacking Group Claims Mass Data Theft From Shell, Philips, GE, Fiserv, Others — Insurance Journal China’s AI model approaches Anthropic’s Mythos 5 in cyber-defense tests — Crypto Briefing You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News Letters to the editor — TheJournal.ie CISA just changed the rules. Is your vulnerability program ready? — Nextgov The increasing threat of Agentic AI poses a significant business risk to organizations, with potential impacts on data exposure and intellectual property theft. As companies boost their security budgets in response, CISOs must ensure that these investments are targeted and effective. Shell’s recent investigation into a potential incident after Clop data theft claims highlights the need for robust vulnerability management programs. ...

Cybersecurity Headlines — August 16, 2026 The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer Shell investigates ‘potential incident’ after Clop data theft claims — BleepingComputer Hacking Group Claims Mass Data Theft From Shell, Philips, GE, Fiserv, Others — Insurance Journal China’s AI model approaches Anthropic’s Mythos 5 in cyber-defense tests — Crypto Briefing You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News Letters to the editor — TheJournal.ie CISA just changed the rules. Is your vulnerability program ready? — Nextgov From the Trenches As a cybersecurity practitioner, I’m seeing a surge in AI-powered threats that’s making it increasingly difficult for companies to keep up with security measures. The latest reports from Tenable.com and Crypto Briefing highlight two particularly concerning trends: the Agentic AI threat cluster and China’s advancements in AI model development. ...

Today’s Stories, Governance Lens — August 15, 2026 You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News Letters to the editor — TheJournal.ie CISA just changed the rules. Is your vulnerability program ready? — Nextgov GAO official suggests addressing AI risks through existing legislation — Nextgov Curiouser and Curiouser — Talosintelligence.com Microsoft patches LegacyHive Windows zero-day vulnerability — BleepingComputer U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund — Sniffnet.app CISA recently updated its Known Exploited Vulnerabilities catalog, adding Metabase, Windows, and Cisco Secure Firewall flaws. This change highlights the evolving threat landscape and the need for organizations to prioritize vulnerability management. To ensure compliance with regulatory requirements, such as NIST Cybersecurity Framework guidelines, CISOs should review their vulnerability programs and conduct regular assessments to identify potential weaknesses. ...

Cybersecurity Headlines — August 15, 2026 You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News Letters to the editor — TheJournal.ie CISA just changed the rules. Is your vulnerability program ready? — Nextgov GAO official suggests addressing AI risks through existing legislation — Nextgov Curiouser and Curiouser — Talosintelligence.com Microsoft patches LegacyHive Windows zero-day vulnerability — BleepingComputer U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund — Sniffnet.app From the Trenches As a cybersecurity practitioner, I’ve seen firsthand how quickly vulnerabilities can be exploited by attackers. Recently, I came across an article that made me think twice about my own security posture - “You’re easier to find than you think” (Americanthinker.com). The idea that I’m more vulnerable than I realize is a sobering one, and it’s a reminder that no system is completely secure. ...

Today’s Stories, Governance Lens — August 14, 2026 Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) — Help Net Security Palo Alto Networks to run OpenAI cyber models inside customer networks — SiliconANGLE News ‘Near-autonomous’ AI agents attack Taiwan’s nuclear safety agency — Theregister.com Coalition for Health AI Mounts Effort Against Cyberattacks — pymnts.com Disgruntled Researcher Discloses New Zero-Day in Windows Antivirus — PCMag.com LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK — DevOps.com Lazarus hackers exploited Windows zero-day to target defense firms — BleepingComputer Chinese Hackers Created a ‘Near-Autonomous’ Attack Using Open-Source AI — PCMag.com Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure — Infosecurity Magazine A dangerous Zoom screen-sharing bug could have let hackers hijack other devices on a call — TechRadar The growing threat of zero-day exploits in widely used software is a serious concern for organizations. A recent zero-day vulnerability (CVE-2026-20349) was discovered in Cisco firewalls, which could allow attackers to launch devastating denial-of-service attacks. This highlights the need for robust patching and vulnerability management processes to prevent such incidents. ...

Cybersecurity Headlines — August 14, 2026 Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) — Help Net Security Palo Alto Networks to run OpenAI cyber models inside customer networks — SiliconANGLE News ‘Near-autonomous’ AI agents attack Taiwan’s nuclear safety agency — Theregister.com Coalition for Health AI Mounts Effort Against Cyberattacks — pymnts.com Disgruntled Researcher Discloses New Zero-Day in Windows Antivirus — PCMag.com LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK — DevOps.com Lazarus hackers exploited Windows zero-day to target defense firms — BleepingComputer Chinese Hackers Created a ‘Near-Autonomous’ Attack Using Open-Source AI — PCMag.com Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure — Infosecurity Magazine A dangerous Zoom screen-sharing bug could have let hackers hijack other devices on a call — TechRadar From the Trenches The latest batch of cybersecurity news is out, and it’s clear that the threat landscape is getting more complex by the day. Two stories that caught my attention are Palo Alto Networks’ decision to run OpenAI cyber models inside customer networks, and a new zero-day vulnerability in Windows Antivirus. ...