Briefing — 13 August 2026

🎧 Subscribe to the podcast feed

Security News

Terabytes of credentials leaked in massive supply-chain attack (Ars Technica) — One of the largest credential exfiltration events of the year; terabytes of login data exposed via a supply-chain compromise still being analysed.

'Near-autonomous' AI agents attack Taiwan's nuclear safety agency (The Register) — First documented case of AI agents conducting an autonomous offensive against critical nuclear infrastructure, attributed to China-linked actors.

China-linked hackers ran first-ever 'autonomous' cyberattack on Taiwan (Slashdot) — Documented step-change in offensive cyber capability using AI agents.

Trump administration enlists private companies to hack foreign cybercrime groups (Slashdot) — Policy move authorises private sector offensive action against foreign threat actors; raises legal and escalation questions.

City-Forum data-theft attacks target Salesforce, ServiceNow portals (BleepingComputer) — Long-running SaaS credential-theft campaign; organisations using these platforms should audit access logs.

Long-running Data Theft Campaign Targeting Salesforce, ServiceNow (Dark Reading) — Extended analysis of the City-Forum campaign's TTPs and scope.

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts (BleepingComputer) — Active exploitation of critical Magento/Adobe Commerce vulnerability; patch urgently.

Android malware combo takes out loans and relays victims' credit cards (BleepingComputer) — Two-stage mobile malware: fraudulent loan origination combined with real-time credit card relay.

Spectre rears its head again — some RISC-V chips are susceptible (The Register) — Spectre-class side-channel vulnerabilities demonstrated on RISC-V processors.

Chinese Loongson processors have leaky caches, researchers find (The Register) — Cache timing side-channel in Loongson CPUs raises supply chain security concerns.

Ransomware Victims (48h)