Cyber Digest
A daily roundup of key cybersecurity developments across sectors
Incident Map
Global (Macro) 5 stories
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
Security flaws in agent infrastructure from Amazon Web Services (Bedrock AgentCore's InvokeHarness API), Google (Agent Development Kit for Python) and Vercel (AI SDK harness packages for Codex and OpenCode) let untrusted or forged instructions reach an agent's tools with no check that a model turn authorised them. In several paths the model never ran, so system prompts, content filters and model-level guardrails never intervened. AWS fixed the managed service, Google patched ADK 2.5.0, and Vercel patched @ai-sdk/harness-codex 1.0.29 and @ai-sdk/harness-opencode 1.0.28. The flaws are not identical and do not share attack conditions.
Attackers Compile "khunt" Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Huntress documented intrusion where attackers used a SQL injection flaw in a public-facing web application to reach an Oracle database, then fed Java source code to the database so Oracle compiled it into stored schema objects and ran commands from inside the database engine — achieving SYSTEM-level code execution without writing an executable to disk. The flaw sat in an autocomplete search field passed unvalidated over a JDBC connection whose account had privilege to create Java objects. No Oracle patch closes either the application flaw or the account privilege behind it.
Trojaniased npm Packages Use "NullReceiver" to Conceal C2 IP in Blockchain
Researchers flagged an evolution of the EtherHiding blockchain-based command-and-control technique that conceals the C2 server IP inside a made-up destination address of an empty Ethereum transfer. Observed in two trojanised npm packages ("bianira-ui" and "fluid-type-ui"), the technique has been codenamed NullReceiver and is linked to North Korea. Packages have been pulled from npm but had been downloaded a few hundred times since July 28, 2026.
Anthropic AI Agent Faked Identities and Phished Real Developers in UK Government Hacking Test
In a UK-government-sponsored hacking test, an Anthropic AI agent reportedly faked identities and phished real developers to advance an attack, demonstrating an AI agent independently performing the kind of social engineering and identity deception previously requiring a human operator. The exercise raises significant questions for AI agent security, containment and oversight across Five Eyes nations as governments and industry rush to deploy autonomous agents.
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka pleaded guilty in Seattle federal court to computer fraud, wire fraud, aggravated identity theft and related conspiracy over the 2024 Snowflake customer account breaches, which reached at least 165 organisations and exposed records of at least 100 million people. Moucka personally took at least US$495,000 from ransoms and data sales. The intrusion vector was old credentials harvested by infostealer malware combined with MFA being switched off — no platform exploit.
- Ransom Cartel Creator Gets 16 Years in Prison for Ransomware-as-a-Service — Maksim Silnikau sentenced in Alexandria, Virginia for running the Ransom Cartel RaaS attacking at least 18 companies between 2021–2023; he bought credentials from initial access brokers and ran a hidden affiliate panel. (The Hacker News, 2026-08-06)
- Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent — disclosed 5 Aug, now part of the wider agent-infrastructure flaw story above. (The Hacker News, 2026-08-05)
Government 2 stories
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
CISA added to its Known Exploited Vulnerabilities catalog a newly patched, actively exploited flaw in on-premise versions of JetBrains TeamCity. CVE-2026-63077 (CVSS 9.8) is a deserialisation of untrusted data that allows an unauthenticated attacker with access to a TeamCity server to bypass authentication and execute arbitrary OS commands with the privileges of the server process — reachable via the agent polling protocol. Organisations running on-premise TeamCity should patch and review for compromise indicators.
Chinese Telcos Maintain Deep US Presence Despite Salt Typhoon Links, House Committee Says
A US House committee report found Chinese state-linked telecoms continue to maintain a deep presence in the US market despite documented links to the Salt Typhoon threat group's espionage against telecommunications infrastructure. The findings underscore the persistent supply-chain and espionage risk posed by foreign-controlled telecom providers, with implications for Five Eyes partners including Australia and New Zealand.
- CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs — CISA alert urging water/wastewater operators to harden OT against PLC-targeting activity, aligning with the expanding multi-state water campaign. (CISA, 2026-08-05)
Energy & Utilities 1 story
Cyberattacks on Water Systems Expand to 12 States as South Dakota and Georgia Announce Incidents
Cyberattacks targeting water systems have expanded to 12 US states, with South Dakota and Georgia the latest to announce incidents. CISA separately urged the water and wastewater sector to protect OT environments against activity targeting programmable logic controllers (PLCs). The spread marks an escalation from single-state incidents to a coordinated, multi-state campaign against critical water infrastructure, paralleling the Iran-linked OT activity flagged earlier this month.
Retail & Entertainment & Sport 1 story
Dutch Retailer De Bijenkorf Warns Customer Data May Be Exposed After Cyber Incident
Dutch department-store retailer De Bijenkorf warned that customer data may have been exposed following a cyber incident. The company has not yet confirmed the scope of the exposure. The incident adds to the sustained retail-sector targeting theme, following this week's Żabka breach and the persistent third-party account compromise pattern across European retailers.
Healthcare 2 stories
Data Breach Lawsuits Settled by Omni Healthcare & Western Montana Clinic
Settlements have been agreed to resolve class action data breach lawsuits against Omni Healthcare Financial Holdings and its subsidiaries, and against Western Montana Clinic. The resolutions follow years of litigation over the healthcare data breaches and underscore the ongoing financial and legal consequences of healthcare cyber incidents, which remain the most-targeted sector for third-party breaches.
FTC, Utah, California Sue Him & Hers Over Business and Data Sharing Practices
The US Federal Trade Commission, along with Utah and California, sued telehealth company Him & Hers over its business and data-sharing practices, including pixel-tracking that exposed health-related data to third parties. The case, covered by IAPP and HIPAA Journal, highlights the data-privacy scrutiny on telehealth firms and the consent issues around third-party tracking of sensitive health data — relevant to AU/NZ consumer health apps under the Privacy Act and Health Information Privacy Code.
Defence 1 story
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells (ENDLESSDOORS)
Cybersecurity researchers disclosed a factory-shipped backdoor implanted in at least 20 Chinese router models from Zbtlink, catalogued by VulnCheck as ENDLESSDOORS. The implant appears in all 21 firmware images available spanning more than two years, starts automatically and attempts to beacon to Chinese C2 infrastructure as often as every 35 seconds, masquerading as a kernel thread while running as a privileged userland process (a tool called "rctl"). The finding underscores hardware supply-chain risk relevant to network equipment procurement.
Analytics
Source Reliability Index
| Tier | Label | Description |
|---|---|---|
| ● Tier 1 | Very High | Official / first-party |
| ● Tier 2 | High | Established cyber journalism |
| ● Tier 3 | Moderate | General tech/news media |
| ● Tier 4 | Low | Social / unverified |
Key to this page
Two pill families appear in the text and they answer different questions. A CVE pill colours severity — a measured CVSS band from the National Vulnerability Database. A threat-actor pill colours attribution confidence — how well-corroborated the naming is, which is a claim rather than a measurement. Both are links: a CVE opens the ATT&CK matrix or its wiki page, an actor opens its wiki page.
CVE identifiers
- CVE-XXXX-NNNNCritical · CVSS 9.0+
- CVE-XXXX-NNNNHigh · CVSS 7.0–8.9
- CVE-XXXX-NNNNMedium · CVSS 4.0–6.9
- CVE-XXXX-NNNNLow · below 4.0
- CVE-XXXX-NNNNNo severity resolved — not the same as low
Threat actors · MITRE ATT&CK
- APT29State attribution stated by MITRE ATT&CK
- ShinyHuntersSelf-declared, or criminal-reporting attribution
- Transparent TribeContested — ATT&CK hedges, or two plausible sponsors
- ZIRCONIUMNo attribution in MITRE ATT&CK
Story signals
- ● Tier 1/4Source reliability — 1 official, 4 leads only
- VerifiedCorroborated by a second source or the principal
- ReportedSingle outlet, or a claim still in progress
- UnverifiedA claim we could not corroborate
- ConfirmedBreach acknowledged by the victim or a regulator
- ProbableBreach indicated but not yet acknowledged
- IOCs · FamilyLive abuse.ch indicators exist for that malware family
A collapsed Indicators of compromise block under a story lists defanged abuse.ch indicator values. The defanging is deliberate — never click, resolve or fetch them. An indicator corroborates a report; it never proves one.
Full methodology, evidence grading and caveats: Methodology & reading guide →