Stories first seen on 23 August 2026
Review the tracked stories and available summary evidence for the archived period shown.
Population: stories the tracker first saw on this Coordinated Universal Time (UTC) calendar day; publisher date is used only if first-tracked time is unavailable and remains on each item.
6 stories
- Breaches and Incidents
A Social Engineering Attempt Against ReliaQuest: What We Found
ReliaQuest disclosed a social engineering attack on August 22, 2026, where a threat actor used a lookalike domain and fake single sign-on page to briefly gain view-only access to an identity dashboard. The attacker’s attempts to move further were blocked by device trust and other controls, and no customer or internal systems were compromised. The incident highlights common tactics like impersonation calls, multi-factor authentication push abuse, and rapid domain setup.
Why it matters: Security teams should review defenses against phishing and multi-factor authentication abuse, as this attack demonstrates how even trained staff can be deceived and how layered controls can limit damage.
- Breaches and Incidents
ShinyHunters claims hack of ReliaQuest but provides no proof
ShinyHunters claims to have compromised ReliaQuest but has not published evidence to support the allegation. ReliaQuest deleted a public tweet about tracking ShinyHunters on August 23, following a forum post from another user that included screenshots and a provocative caption.
Why it matters: Security teams monitoring ShinyHunters activity should verify whether ReliaQuest's systems were actually compromised and assess the credibility of the claim, since unsubstantiated breach claims can create false urgency and misdirect incident response efforts.
- Threat Intelligence
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has added new capabilities, including the ability to block Google Play using virtual private network (VPN) permissions. It now targets 349 applications and supports 167 remote commands.
Why it matters: Android users and security teams should assess exposure to this malware, which can disrupt app access and execute extensive remote commands.
- Ransomware and Leak Sites
Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs
A weekly roundup covering multiple security stories: researchers demonstrated a way to bypass Windows 11's strongest security defenses without physical access, requiring only privileged system access. Additional stories included law enforcement action against a cybercrime ring and reports of Medusa ransomware affecting over 500 organizations, along with alleged data theft from Azure tenants.
Why it matters: Windows administrators need to prioritize privileged access controls since attackers with system-level permissions can defeat core protections; organizations should assess exposure to Medusa ransomware and monitor for Azure tenant compromise.
- OT, ICS, and Critical Infrastructure
How an Emerging Industrial Protocol Family Could Put OT at Risk
Research has identified vulnerabilities in Time-Sensitive Networking (TSN) protocols that lack protection, potentially allowing attackers to disrupt or manipulate industrial processes. These findings highlight emerging risks to operational technology (OT) systems as new protocol families are adopted without adequate security controls.
Why it matters: Industrial facilities and critical infrastructure operators must assess TSN deployments for security gaps, as unprotected implementations could enable attacks on physical processes and production systems.
- Vulnerabilities and Patches
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near
Hardware manufacturers are integrating post-quantum cryptography into their products to defend against future attacks by quantum computers that could break current encryption standards. Companies have started implementing these defenses in anticipation of cryptographically relevant quantum computers becoming viable.
Why it matters: Any organization using hardware from major vendors needs to understand their post-quantum roadmap and assess when to upgrade systems, as the transition window closes before quantum threats mature.