TLDR INFORMATION SECURITY 2026-08-17

🫣 Stop playing hide-and-seek with your tools. Microsoft Azure

brings together everything you need to build and run software in a single workspace. Goodbye, hunting for the right dashboard. Hello, one unified view—and a faster path to innovation.

Simplify your stack with Azure → [6]

RINGCENTRAL DATA BREACH EXPOSED INFO OF 1.6M ACCOUNTS

Cloud-based collaboration and communication firm RingCentral disclosed a data breach in which a threat actor compromised its systems through a “sophisticated social engineering campaign.” According to Have I Been Pwned, the data contained names, email, physical addresses, and phone numbers belonging to 1.6M individuals.

NEW AMNESIASTEALER MACOS MALWARE HIJACKS BROWSER SESSIONS VIA REMOTE CONTROL

Jamf researchers are warning of a new macOS infostealer that spreads via ClickFix attacks. The malware first captures the user's macOS password and uses it to collect keychain data. It also features a streaming profile that allows attackers to remotely control browser sessions and duplicate browser profiles on Chromium-based browsers.

FROM A SCHEMA NAME TO RCE IN N8N

A critical prototype pollution vulnerability (CVE-2026-33696) in n8n allows authenticated attackers to achieve remote code execution across all deployment types by manipulating the GSuiteAdmin node's "Custom Fields" schema. By polluting ⁠Object.prototype⁠, attackers can chain the exploit through a subsequent Git node to inject a malicious ⁠GIT_SSH_COMMAND⁠ or crash the instance entirely by breaking the underlying database query builder. Administrators must immediately upgrade their self-hosted, worker, and Cloud instances to the latest patched versions to secure their environments against malicious schema-name inputs.

HOW CLOUDFLARE ENFORCES ENGINEERING STANDARDS USING AI

Cloudflare designed the Cloudflare Codex to serve as an RFC-style shared source for engineering guidance for humans and agents. To guide models to relevant RFCs, Cloudflare uses a dedicated agent to compact SHOULD and MUST statements into a dedicated JSON structure and enrich it with metadata that supports lazy discovery. Thus far, Cloudflare has developed a code reviewer agent, spec reviewer, and incident reviewer agent that all use the Codex.

HOW AWS IAM ROLE MANAGER RETHINKS THE STARTING POINT FOR IAM ROLES

The newly released AWS IAM Role Manager is designed to enable users who are new to AWS to quickly deploy services without needing to manually create IAM roles for services. With role manager enabled, when users create new workloads, an IAM role with the requisite permissions is automatically created and attached. Roles may be over-provisioned, so users are encouraged to limit capabilities afterward.

HOW WELL CAN OPEN-WEIGHT MODELS EVADE SIEM DETECTION?

Vulnetic claims its autonomous "Sable" agent successfully compromised an Active Directory domain while evading high-severity alerts in Wazuh by utilizing LLM-driven living-off-the-land tradecraft. The agent mapped the network using remote BloodHound enumeration, executed a DCSync attack via DRSUAPI, and deployed a memory-resident HTTPS beacon inside a wsmprovhost process via WinRM to bypass standard detections. By pacing its actions and recognizing a custom prompt-injection canary, the agent generated only six low-severity alerts during the four-hour intrusion, though defenders should note these results stem entirely from the vendor's internal lab testing.

PANGOLIN

Pangolin is an identity-based remote access tool that combines reverse-proxy and VPN capabilities to enable secure connectivity from anywhere.

AGENT SAFEHOUSE

Agent Safehouse is a macOS agent sandbox to limit local LLMs' access to only the files and integrations that they need.

HOW CLOUDFLARE DETECTS MCP TRAFFIC AND HELPS SECURE IT

Cloudflare has introduced protocol-level detection for Model Context Protocol (MCP) traffic in Gateway by analyzing the MCP-Protocol-Version header on TLS-inspected requests. Security teams can now combine the experimental.is_mcp boolean selector with the mcp_portal traffic source tag to mandate that all agent traffic routes through approved portals, effectively blocking direct shadow MCP connections. Furthermore, the update delivers a dedicated traffic dashboard, pre-registered OAuth client support, and Agents SDK v0.20.0 to bridge compatibility between legacy handshakes and the new stateless MCP 2026-07-28 specification.

MASSIVE AZURE EXFILTRATION CAMPAIGN EXPOSES MILLIONS OF ENTERPRISE RECORDS

A threat actor known as "TheHatman" is allegedly selling approximately 3.6 million internal Azure and Entra employee directories belonging to major corporations, including McDonald's, Vodafone, and Kyndryl. The exposed data includes sensitive service accounts and Global Administrator listings that match standard Azure export formats, which Hudson Rock researchers suspect stems from credential theft via infostealers. The exact intrusion vectors remain unconfirmed, and the report originates from a vendor selling credential-monitoring services, so defenders should await independent verification while actively auditing their Azure identities for compromised access.

RESEARCHERS OBSERVE FIRST 'NEAR-AUTONOMOUS' AI ATTACK ON GOVERNMENT TARGET IN TAIWAN

Researchers at Dream have identified the first publicly known "near-autonomous" AI cyberattack, utilizing the open-source Hermes and OpenClaw frameworks to extract over 2,500 Taiwanese government personnel records. Suspected Chinese threat actors deployed the malware to run self-directed "Learning Cycles" that autonomously adapted to prior failures and expanded the attack into IT supply chains, nuclear safety agencies, and energy companies. Despite these autonomous features, researchers noted the campaign still required substantial human engineering to operate successfully.

THE GPU SERIAL NUMBER: HOW BRAVE IS FIGHTING THE NEXT GENERATION OF WEB TRACKING

Brave version 1.93 introduces default "farbling" protections to combat cross-site tracking by obscuring highly identifying WebGL and WebGPU hardware signals. To disrupt the stability of GPU fingerprinting, the browser now replaces vendor and renderer strings with generic values, empties WebGPU adapter descriptors, and randomizes the WebGL extension list based on the session and site context. This shifts the browser toward capability-based feature detection, effectively preventing trackers from generating highly accurate device fingerprints without breaking legitimate web graphics rendering.

APPLE SPYWARE THREAT ALERTS: WHAT USERS NEED TO KNOW

Apple sent mercenary spyware threat notifications to users in 110 countries, urging targeted individuals to enable Lockdown Mode, verify alerts only on account.apple.com, and seek help through resources such as Access Now's Digital Security Helpline.

CHATGPT COMPUTER HISTORY LOGS EVERY CLICK AND KEYSTROKE ON YOUR MAC

OpenAI's new Computer History feature for ChatGPT on macOS logs clicks, keystrokes, and app switches via the accessibility API into unencrypted plain-text Markdown files accessible by any app under the same user account.