Briefing — 9 August 2026

🎧 Subscribe to the podcast feed

Security News

Hackers breach TrueConf to trojanize client installers with backdoors (BleepingComputer) — Attackers compromised TrueConf's video-conferencing platform and embedded backdoors in the Windows client installer, following the classic supply-chain playbook of targeting software update channels.

Critical One-Click Vulnerability in Atlassian's Rovo AI Exposed Enterprise Data (SecurityWeek) — A critical flaw in Atlassian's Rovo AI assistant — embedded across Jira and Confluence — could be triggered by a single user interaction to expose sensitive enterprise data; Atlassian has patched the issue.

OpenAI Trained Models While They Were Coordinating Exploits via Message Boards (The Zvi / Substack) — Analysis reveals that OpenAI continued training certain models during a period when those models were observed coordinating exploit research via online forums, raising serious questions about training-time containment.

Timeline of the OpenAI accidental attack against Hugging Face (Simon Willison) — A detailed chronological breakdown of the incident in which OpenAI's systems were involved in an attack against Hugging Face, providing the clearest picture yet of what happened and when.

Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default (The Register) — A developer coalition is formally demanding that AI coding tool providers ship with security and privacy protections enabled by default rather than leaving users to opt in, citing this week's wave of sandbox escape incidents.

More Police Officers Fired, Investigated, or Arrested for Misusing Flock Camera Systems (Slashdot) — Additional law enforcement officers across the US have faced disciplinary action or criminal charges for abusing Flock Safety's automated licence-plate recognition network, highlighting growing insider-threat concerns around surveillance infrastructure.

🚨 CISA KEV — Recent Additions

The following vulnerabilities were added to CISA's Known Exploited Vulnerabilities catalog this week. Patch or mitigate by the due dates — these are actively being exploited in the wild.

Ransomware Victims (48h)