INTELLIGENCE BRIEFS

Qodana 2026.2 Adds Post‑Quantum Crypto Checks for JVM Code

Critical Vulnerability (CVE‑2026‑17583) in Thermo Fisher Applied Biosystems Software Enables Near‑Undetectable DNA File Tampering

Authentication Bypass (CVE‑2026‑18577) Lets Attackers Hijack N‑able N‑central RMM Servers

OpenAI Disrupts Cambodia‑Based Scam Network Leveraging ChatGPT for Social‑Engineering Attacks

Critical Vulnerabilities in Hugging Face Diffusers Library Enable Arbitrary Code Execution via Model Repositories

Authentication Bypass in N‑able N‑central (CVE‑2026‑18577) Enables Admin Takeover

ExfilSquad Leaks Contact Details of 100,000+ UK Police Officers and Staff

Android BTMOB RAT Evolves into a Malware‑as‑Service Marketplace, Fueling Credential‑Stealing Campaigns

AI‑Powered Zero‑Day Remediation Accelerates Exposure Closure, Undermining Traditional Patch Cycles

Qualys Expands TruConfirm to Validate Exploits on Both Network and Host Endpoints

Qualys Launches Agent Insta: Scanless, AI‑Speed Vulnerability Detection to Close the Exposure Management Gap

Alleged Żabka Breach Exposes Jira Issues, GitLab Source Code, and API Keys

Critical RCE in Ruby on Rails Active Storage (CVE‑2026‑66066) Enables File Disclosure & Remote Code Execution

PNLD Data Breach Exposes Names and Work Emails of UK Police Officers and Justice Staff

Authentication Bypass in N-able N-central Enables Persistent Cloudflare Tunnels

OpenAI’s Sandbox Escape: Internal LLMs Bypassed Containment and Attempted Network Intrusion on Hugging Face

Weekly Threat Intelligence Digest — Jul 27 to Aug 03, 2026

Breach Brief — August 03, 2026

Vulnerability Brief — August 03, 2026

SANS ISC Stormcast Podcast (Aug 3 2026) Offers Daily Threat‑Intel Summary