WEEKLY INTELLIGENCE BRIEFING

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution. CVE-2026-69836, a maximum-severity RCE vulnerability in Microsoft Entra ID, has been actively exploited in the wild. Microsoft states the vulnerability is fully server-side mitigated and no customer action is required, but the absence of technical detail and the identity-layer targeting make this worth validating in your environment.

CISA Orders Feds to Patch Actively Exploited TrueConf Server Flaws. Two critical TrueConf Server vulnerabilities, CVE-2026-72529 (missing authentication) and CVE-2026-72530 (code injection), are being actively exploited by the Head Mare hacktivist group to deploy PhantomCore backdoor malware via trojanized client installers. CISA has added both to its KEV catalog and mandated federal remediation.

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated RCE. CVE-2026-73570, an OS command injection flaw in Zimbra Collaboration, is being actively exploited in the wild when the optional zimbra-snmp package is installed. CERT Polska has issued alerts and the flaw is now on the CISA KEV catalog; patch to version 10.1.20 immediately. Learn more

ShieldBreak Zero-Day: No Patch, CISA BOD Gives 14 Days. CVE-2026-69414 (ShieldBreak) is an unpatched local privilege escalation to SYSTEM in Microsoft's Malware Protection Engine. A public PoC dropped August 12 and no patch exists yet, making detection and compensating controls the only option for defenders right now. Learn more

Critical NetScaler Flaw Can Bypass Authentication on Gateway and AAA Servers. Citrix patched CVE-2026-19490 (CVSS 9.3), an authentication bypass affecting NetScaler ADC and Gateway appliances configured with SAML actions, alongside a memory overflow DoS flaw. Citrix is urging immediate upgrades given the sensitivity of these perimeter devices to credential theft and lateral movement. Learn more

MLflow SSRF Vulnerability Actively Exploited for Cloud Credential Theft. CVE-2026-64849 (CVSS 9.3) in MLflow's unauthenticated model-registry webhooks API is being exploited to steal cloud credentials and secrets from hosted AI/ML instances. CISA added it to the KEV catalog; all MLflow versions before 3.15.0 are affected. Learn more

Key Takeaway

Prioritize patching Entra ID, TrueConf, Zimbra, NetScaler, and MLflow this week; all have confirmed exploitation and at least one carries a CVSS 10.0 score.

Rust Supply Chain Attack Linked to North Korean Hackers. Sapphire Sleet compromised a maintainer account for the Rust crate arrayref and two others (internment, append-only-vec), injecting a malicious proc-macro1 dependency that downloaded and executed an infostealer during the Cargo build process. The combined crates have over 245 million downloads, and the malware exfiltrated browser credentials and established persistence on developer workstations and CI/CD systems.

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2. Fourteen malicious npm packages disguised as calendar and streak utilities were found delivering RedC2 4.0, an AI-powered Linux backdoor sold by threat actor MarlboroMan. The framework provides terminal access, file transfer, and in-memory execution capabilities, representing a significant escalation in AI-assisted post-exploitation tooling available to criminal actors.

Android Car Malware Spreads Through Built-In Updaters. The MoYu Group, previously linked to the BADBOX botnet, has weaponized legitimate update mechanisms in Android-based vehicle head units to deploy a multi-stage downloader for ad fraud and proxy botnet recruitment. This is the first documented malware supply chain attack specifically targeting automotive head units, raising new concerns about connected vehicle security. IOC: SHA256 a7a70777175420766027f01658644645337090057b5462248176550316c7f29c (TWCore update app used as dropper vehicle).

Key Takeaway

Audit your build pipelines and developer dependency lockfiles immediately; build-time attacks executing at cargo build or npm install bypass most runtime security controls entirely.

Apollo Global Management Discloses Social Engineering Breach. Private equity giant Apollo Global Management confirmed a breach between July 6-10 in which the BlackFile threat group (affiliated with The Com) used social engineering to compromise cloud platforms and access sensitive PII including SSNs, dates of birth, and home addresses. The campaign is part of an ongoing wave targeting financial and professional services firms.

SickKids Data Breach Exposes Employee and Applicant Information. Toronto's Hospital for Sick Children disclosed a breach originating from a vulnerability in third-party software, exposing current and former employee and job applicant data. Clinical systems and patient records were unaffected, but this is the second major incident for the organization following a 2022 ransomware attack, underscoring the persistent risk from third-party software in healthcare.

Hundreds of Leaked AWS Keys Give Full Control Over Corporate Accounts. Truffle Security identified over 9,300 active AWS access keys with administrative privileges publicly exposed in code repositories and other sources, with Hugging Face flagged as a significant exposure point. Attackers with these keys gain full account control, enabling data theft, server compromise, and cryptomining with no initial vulnerability required.

Key Takeaway

Social engineering and credential exposure remain the most reliable initial access vectors; enforce phishing-resistant MFA and rotate any secrets that have ever touched a public repository.

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts. Three Russian espionage clusters (UNC6293/APT29, UNC7005, UNC5976) are targeting academia, aerospace, defense, and government in Europe and the US by abusing legitimate Google OAuth and WhatsApp authentication flows. UNC7005 deploys a rogue Excel plugin called HEADRUSH, while UNC5976 automates token collection at scale via cloud infrastructure and fake file-sharing lures.

China's Volt Typhoon Is Pre-Positioning Malware in US Critical Infrastructure. A war game simulating a Chinese cyberattack on US water utilities demonstrated the real impact of Volt Typhoon's multi-year pre-positioning campaign inside critical infrastructure including water, power, and telecommunications systems. The objective is disruption and coercion, not espionage, representing a fundamentally different threat model that most defenders are not positioned to counter.

AI-Generated Exploit Scripts Target Siemens S7 PLCs in US Critical Infrastructure. The US government warned of active threat actors using AI-generated exploit scripts to target Siemens S7 PLCs via internet-scanning services. The use of AI dramatically lowers the technical barrier for ICS attacks, enabling credential access, reconnaissance, and denial of service against industrial processes that were previously accessible only to sophisticated actors.

Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks. Transparent Tribe has updated its toolkit and shifted focus toward less mature Afghan organizations, particularly Taliban-affiliated bodies, after failing to penetrate more hardened Indian government targets. The campaign illustrates how nation-state actors calibrate their capabilities against target security maturity. Learn more

Key Takeaway

OT and ICS environments must be treated as active targets, not passive bystanders; network-segment PLCs, audit internet-facing industrial devices, and assume pre-positioned adversary presence in critical infrastructure.

Banking Trojans Manic, Grandoreiro, and ToxicPanda 2.0 in the Spotlight. Three banking trojans are making headlines simultaneously: Manic (Android) uses a Wi-Fi mesh relay to exfiltrate data from offline devices through nearby infected ones; Grandoreiro resurfaces post-takedown with advanced anti-analysis features targeting Latin America and Europe; and ToxicPanda 2.0 expands command support and is now distributed via AWS. IOC: malware family Manic. Learn more

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot. Check Point Research found that Microsoft Defender's legitimate BTR.sys driver can be weaponized by an administrator-level attacker to delete security software, including Defender itself, during the boot process before user-mode services initialize. This is an architectural trust-boundary issue, not a software flaw, meaning no patch is forthcoming and detection must happen at the behavioral layer.

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets. The iAuthFlow V2 phishing toolkit, sold for $10,000, registers attacker-controlled passkeys to victim accounts during a phishing session, maintaining persistent access even after password resets and session revocations. This directly undermines passkey rollout as a security control if defenders do not also monitor for unauthorized passkey registration events.

Key Takeaway

Monitor for anomalous passkey registrations and unauthorized FIDO2 credential additions in identity logs; a compromised session can now survive a full credential reset.

• https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-trueconf-server-flaws/
• https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html
• https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html
• https://thehackernews.com/2026/08/ai-generated-exploit-scripts-target.html
• https://thehackernews.com/2026/08/manic-android-malware-exfiltrates-data.html
• https://www.wired.com/story/china-is-strapping-digital-bombs-to-civilian-infrastructure-is-the-us-ready/
• https://www.edpb.europa.eu/news/data-breach-free-mobile-and-free-fined-eur42-million_en
• https://www.securityweek.com/mlflow-vulnerability-exploited-for-cloud-credential-theft/