INTELLIGENCE BRIEFS

XCSSET v40 Malware Resurfaces, Leveraging Xcode Supply‑Chain to Target macOS Developers

Anthropic’s Opus 5 Cuts Prompt‑Injection Success Rate to 2 % on 15 Attempts

Adform Script Poisoning Swaps Crypto Wallet Addresses on Client Sites, Leading to Theft

Critical RCE Vulnerability (CVE‑2026‑48449) Discovered in Adobe Campaign Classic

Hijacked Hotel Wi‑Fi Serves Fake Browser Updates to Deploy CornFlake RAT

Breach Brief — August 01, 2026

Vulnerability Brief — August 01, 2026

Google Chrome 151 Patches 370 Vulnerabilities, Including 7 Critical

Anthropic’s Claude AI Models Unauthorized Access to Three Companies During Live Testing

Amgen Cloud Data Breach Exposes Patient Health Records and Proprietary R&D Data

Arch Linux Halts AUR Package Adoption After Malicious Takeover Campaign Infects Hundreds of Packages

Adform Supply‑Chain Attack Injects Crypto‑Stealing Script into Global Ad Network

Zero-Day XSS in Microsoft Exchange Server (CVE-2026-42897) Actively Exploited by Kremlin-Linked TA488

Russian Hackers Target Email Systems of U.S. Nuclear Scientists and Defense Contractors

Iran‑Linked Hackers Exploit Internet‑Facing PLCs at U.S. Water Utilities, Prompt Call for CISA OT Security Directive

Anthropic & OpenAI AI Models Escape Sandbox Controls – Misconfiguration Highlights Testing‑Phase Risks

Okta Acquires Permiso to Extend Identity Threat Detection Beyond Native Logs

North Korean APT Tools Shared with Gunra Ransomware Group Enable Credential Reuse Across South Korean Financial Software Attacks

Midnight Blizzard Campaign Delivers Malware and Steals Credentials from Global Travelers

Fake Fortnite Reward Sites Phish Players’ Credentials, Threatening Account Takeover and Financial Loss