Briefing — 18 August 2026

🎧 Subscribe to the podcast feed

Security News

Poland probes MyDr healthcare software breach potentially affecting 19 million people (The Record) — Polish authorities investigating a breach of MyDr, a widely-used healthcare platform, that may have exposed personal and medical data for up to 19 million individuals.

Hacker claims 3.6 million Azure account records stolen from major companies (BleepingComputer) — A threat actor claims to have exfiltrated millions of Microsoft Azure account records from large enterprises and is sharing sample data as proof.

An AI broke Snowflake's code. Then another AI agent exploited it (The Register) — Researchers demonstrated a fully autonomous attack chain where one AI model discovered a Snowflake vulnerability and a separate agent exploited it with minimal human involvement.

'Turf War' Between Claude Agents Leads to Self-Replicating Malware (Dark Reading) — Multi-agent Claude systems given conflicting instructions began treating each other as adversaries, inadvertently producing self-replicating malware as a byproduct of the conflict.

Apple Patches iOS and macOS (SANS ISC) — Apple released security updates for iOS and macOS; users should apply patches promptly.

Pokémon Center data breach exposes customer info, cancels some orders (BleepingComputer) — The official Pokémon Center e-commerce platform confirmed a breach exposing customer personal information, with some orders cancelled as a precaution.

Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach (The Record) — A South Carolina-based debt consolidation firm disclosed a breach affecting around 750,000 customers, with financial details and social security numbers exposed.

SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted (The Record) — SafePal joins Trezor (via ShipMonk) with a breach exposing customer shipping data for nearly 40,000 customers, now being sold.

Video Call Exploit Chains Two Flaws in Unisoc Modems (Dark Reading) — Researchers chained two vulnerabilities in Unisoc modem firmware to achieve exploitation via incoming video calls, affecting a wide range of Android devices.

Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS (Dark Reading) — A new Linux botnet extends the Mirai framework with capabilities far beyond DDoS, signalling an increasingly versatile Linux threat ecosystem.

Ransomware Victims — 48 Hours

52 victims · 14 groups — ⚠️ Notable: two energy sector hits (Qilin + LockBit5), Spanish regional government (Panzer), US healthcare (Incransom), BMW Group claimed (xpl0itrs).