Security briefing: August 2026

This August security briefing covers several active and high-impact events: the ChainDrop npm supply-chain worm that poisoned 400+ packages and targeted AI coding credentials; Ghostjacking research showing AI coding agents can become insider threats by abusing ordinary permissions; ransomware affiliates using Claude Code to prioritize and target live databases; and Cl0p exploiting a PTC Windchill RCE to compromise ~50 organizations. Sysdig TRT analysis found most AI-enabled attacks used common command-and-scripting techniques (MITRE T1059), and the report emphasizes auditing trust boundaries rather than only permissions while noting upcoming regulatory and NVD modernization efforts.