2026-08-06
- vulnerabilities
Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities
Cisco released patches for approximately two dozen vulnerabilities across SD-WAN, IOS XE, and Firewall Management Center products, including at least one vulnerability with publicly available proof-of-concept code.
Why it matters: Organizations running Cisco SD-WAN, IOS XE, or FMC infrastructure need to assess their exposure to these critical vulnerabilities, particularly those with public exploits, and prioritize patching.
- vulnerabilitiesCVE-2026-63077
Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability
A critical, unauthenticated remote code execution vulnerability in JetBrains TeamCity (CVE-2026-63077) is now being actively exploited by threat actors in the wild. The flaw requires no prior authentication to trigger, making it accessible to any attacker with network access to an affected instance.
Why it matters: Organizations running TeamCity must immediately apply patches or implement network controls, as attackers are already weaponizing this vulnerability to gain code execution on their servers.
- ai security
OWASP 2026 LLM Top 10: “The model will be fooled”
OWASP released the 2026 edition of its Top 10 for LLM Applications, with input from real-world incidents for the first time. Prompt Injection and Sensitive Information Disclosure remain the top two risks, though the rankings below them shifted more significantly than in previous years.
Why it matters: Developers and security teams building with large language models need to understand the current risk landscape and prioritize controls for the most prevalent threats in production systems.
- cloud saas
Browser security is where software, data, and AI meet
A browser security executive discusses how organizations lack control over the browser environment where their application logic, customer data, and AI systems converge during user interactions. The interview highlights the limitations of existing browser security mechanisms like Content Security Policy and Subresource Integrity, and addresses risks from third-party AI scripts executing in the browser.
Why it matters: Security practitioners need to understand that browsers present a critical attack surface where companies cannot control devices, extensions, or network paths, yet depend on them to protect sensitive customer data and AI integrations.
- threat intel
Suppliers, logins, and AI tools are all becoming attack paths
CrowdStrike's 2026 Threat Hunting Report documents a 4% increase in intrusion activity, driven by attackers exploiting trusted identities, cloud services, software supply chains, and AI tools to evade detection. The growth reflects a shift toward more targeted campaigns that leverage legitimate infrastructure and access paths rather than traditional attack vectors.
Why it matters: Security teams must expand their monitoring and access controls to cover supply chain relationships, cloud services, and AI integrations, as attackers are prioritizing these trusted pathways to avoid triggering alerts.
- identity access
Non-human identities are 91% of everything active in production
Non-human identities (service accounts, API keys, and machine credentials) represent 91% of all active identity activity in production environments. Most non-human activity operates outside standard business hours, making unauthorized use of stolen credentials difficult to detect through normal monitoring patterns.
Why it matters: Security teams managing identity and access controls must account for the vast majority of production activity being machine-driven; defenders unable to monitor non-human credential usage risk missing lateral movement and privilege escalation by attackers who steal service accounts.
- threat intel
Srsly Risky Biz: Being a North Korean Hacker Is About to Be Less Fun
North Korea arrested former military intelligence operatives who conducted unauthorized cyberattacks against domestic banks to steal funds for personal use. Officials expressed alarm at the scale of the scheme, and reports indicate severe punishment, including potential harm to family members, will follow.
Why it matters: Security teams should monitor for operational changes in North Korean threat groups, as internal purges and reorganization could shift targeting patterns, capabilities, or group compositions that affect attribution and defense strategies.
- ai security
Cloudflare OS goes open source with a record of everything its agents read
Cloudflare open sourced Cloudflare OS, an agent platform that tracks every resource accessed by agents and enforces data access controls on downstream consumers. The platform maintains a record of all reads linked to agent outputs, and validates viewer permissions against the underlying data before displaying results. Cloudflare has used the system internally since May with this audit and enforcement model.
Why it matters: Enterprise security teams evaluating AI agent platforms need to understand how Cloudflare OS provides access control and auditability for sensitive data accessed by autonomous agents, reducing risk of unauthorized data exposure through agent outputs.