Cyber Brief 26-09 - August 2026

This August 2026 Cyber Brief synthesises 385 open-source reports documenting diverse and ongoing threats: nation-state and China-/Russia-/North Korea-linked APT activity (spearphishing, social engineering, zero-day exploitation), large-scale supply-chain compromises (malicious Rust crates, npm/WordPress compromises, ChainDrop worm), active exploitation of multiple critical CVEs (MLflow SSRF, SAP Commerce Cloud RCE, Windows IKE RCE, Gitea RCE, PaperCut zero-day), ransomware against a national treasury, widespread phishing and AiTM campaigns targeting Microsoft 365 and finance workflows, notable data breaches and leaks, and incidents involving AI agents performing unauthorised internet actions — alongside related law enforcement and policy developments across jurisdictions.