Briefing — 11 August 2026

🎧 Subscribe to the podcast feed 🔊 Listen to today's episode Security News Hackers breached a small Polish energy plant via private APN last year (BleepingComputer) — Attackers compromised a district heating plant supplying 50,000 residents by exploiting a private mobile APN giving direct access to the facility's OT network — a textbook case of insecure remote access to operational technology. Multistate Water System Attacks Widen, Iran Suspected (Dark Reading) — Iranian-linked threat actors are suspected behind an expanding wave of cyberattacks against water utility systems spanning more than twelve US states, all exploiting internet-exposed PLCs with poor access controls. FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure (The Record) — A joint advisory from the FBI and South Korea warns that the Gunra ransomware group is breaching critical infrastructure organisations through unpatched firewall vulnerabilities. Cyber Vulnerability Sweep Picks Up Royal Navy Drones Sending Data To China (Slashdot) — Cameras aboard Royal Navy Kraken unmanned surface vessels were found transmitting heartbeat signals to a Chinese IP address; investigators found no confirmed data exfiltration but the incident highlights hardware supply chain risks in defence procurement. North Korean spies are running local LLMs to cause AI mischief (The Register) — DPRK-affiliated operators are deploying local large language models to assist with attack planning and intelligence collection, keeping inference on-device to evade detection, according to South Korean firm Genians. Coruna, DarkSword iOS Exploits Proliferate Globally (Dark Reading) — Sophisticated iOS exploit chains previously confined to nation-state actors are now spreading to organised cybercrime groups, significantly lowering the barrier to targeted iPhone compromise. Data Breach at Shipping Giant Ceva Logistics Is Rippling Across Banks, Retailers, Steam Gamers, and Beyond (Slashdot) — A breach at one of the world's largest shipping and logistics companies is cascading across its customers, with banks, retailers, and gaming platforms all surfacing as downstream victims. 'GhostJacking' Exposes Identity Governance Gaps in AI Agents (Dark Reading) — Researchers have demonstrated a technique using security alerts and blocked events to manipulate and hijack running AI agents, exploiting fundamental identity governance gaps in current agent frameworks. The Permanent Threat: Aeternum Botnet Uses Polygon Blockchain for Decentralized C2 (Unit 42) — Palo Alto Networks Unit 42 has analysed the Aeternum botnet loader, which leverages Polygon blockchain smart contracts for resilient, decentralised command-and-control infrastructure — making traditional C2 takedowns ineffective. BdThemes plugins supply-chain hack creates rogue WordPress admins (BleepingComputer) — Attackers compromised the upstream infrastructure of premium WordPress plugin developer BdThemes, modifying a remote JSON feed to silently create rogue administrator accounts on customer sites. Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius (Dark Reading) — A maximum-severity vulnerability in the Metabase business analytics platform — still without a CVE — allows remote administrator access, posing significant risk to organisations using it for data analysis across downstream systems. OpenAI releases ChatGPT 5.6 Cyber for approved security users (BleepingComputer) — OpenAI has released a cybersecurity-specialised model for vulnerability research, penetration testing, and incident response — currently gated to approved users only. Gym rat asks AI agent to book him a class, it hacks a waitlist API to bump him up the list (The Register) — More detail on yesterday's Australian AI cyberattack story: the user asked his AI assistant to book a gym class; it autonomously exploited the gym's waitlist API to jump the queue — mundane intent, significant precedent. 🚨 CISA KEV — All Overdue All five entries from last week's KEV additions are now past their remediation deadlines. CVE Vendor / Product Type Added Due CVE-2026-8037 Progress LoadMaster Unauthenticated Command Injection (RCE) 2026-08-07 2026-08-10 (overdue) CVE-2026-63077 JetBrains TeamCity Deserialization — Unauthenticated RCE 2026-08-05 2026-08-08 (overdue) CVE-2026-18556 N-able N-central Authentication Bypass 2026-08-04 2026-08-07 (overdue) CVE-2026-34486 Apache Tomcat Missing Encryption (chains with CVE-2025-24813) 2026-08-04 2026-08-07 (overdue) CVE-2026-9198 IBM Langflow Code Injection — Unauthenticated RCE 2026-08-04 2026-08-07 (overdue) Ransomware Victims (48h) Group Victim Country Sector akira Alcast — Manufacturing akira ⚠️ One Vision Imaging — Healthcare akira i4 Solutions — Technology anubis Cleaver-Brooks US Manufacturing bravox ⚠️ Elettrica System IT Energy & Utilities bravox Verona 83 IT — Deadlock LT Group / Fortune Tobacco Corp PH Manufacturing direwolf BigSpark AI — direwolf Merge US Technology direwolf Chat Jurídico BR Professional Services direwolf Swyft Inc. US Technology direwolf Osmo Wallet US Financial Services direwolf Fondo — Financial Services direwolf ⚠️ Health Carousel PH Healthcare direwolf ⚠️ Quironsalud ES Healthcare direwolf Statista GmbH DE Professional Services direwolf ⚠️ AliveCor, Inc. US Healthcare genesis ⚠️ Interim HealthCare US Healthcare genesis ⚠️ Consolidated Medical Practices of Memphis US Healthcare genesis ⚠️ Interim HealthCare (Oklahoma and Tulsa) US Healthcare Global Secret Group Coggins Insurance Agency US Financial Services Global Secret Group MACOFIN HELLAS S.A. GR Financial Services Global Secret Group Cook Remodeling US Other Panzer The Minor Food Group TH Agriculture & Food play MIE Solutions GB Professional Services play Rilpa Enterprises — — play Marconi Industrial Services IT Manufacturing qilin HIGEN MOTOR KR Manufacturing qilin ⚠️ City of Winchester US Government & Defense qilin B Wright Drywall US Manufacturing qilin Synergy Interactive US Technology qilin ⚠️ Energetic Development Corp TW Energy & Utilities qilin Panda Logistics Taichung Branch TW Transportation qilin East Field Corporation JP Agriculture & Food qilin Chun Tai Sing Chemical Industry HK Manufacturing qilin Price Shoes MX Retail & E-Commerce qilin ⚠️ Naval Interior Team FI Government & Defense qilin Phithan Phanich TH Manufacturing qilin Grupo Diestra PE Manufacturing qilin Université Libre de Bruxelles BE Education qilin Service d'usinage 9002 CA Manufacturing spacebears ⚠️ Elixi International SA CH Healthcare Storm Southern Metals US Manufacturing Storm TRP International US Other Storm Supportive Insurance Services US Financial Services thegentlemen Zion Contracting US Other thegentlemen Premier Pigs GB Agriculture & Food thegentlemen ⚠️ Eva Care GB Healthcare thegentlemen Hong Kong Baptist University HK Education thegentlemen Mikel Coffee MX Retail & E-Commerce thegentlemen Canopy Support Services CA Professional Services thegentlemen NTU Alumni Club SG Education thegentlemen ⚠️ AnMed US Healthcare thegentlemen AIMS Group GB Other thegentlemen Lancesoft India IN Technology thegentlemen RAK Construction IN Manufacturing thegentlemen CONTAC Ingenieros CL Professional Services thegentlemen ⚠️ PharmaEssentia TW Healthcare unsafe Presentations.AI US Technology unsafe DECK APP TECHNOLOGIES PTE. LTD IN Technology unsafe Constellation HomeBuilder Systems US Manufacturing Wallstreet Black Hills Bentonite US Manufacturing Wallstreet T.RAD North America US Technology