Sys-Admin Up

Survey: 56% of AI enthusiasts (and a third of all users) tell chatbots things they keep from other people https://spreadprivacy.com/ai-privacy-survey-aug26/

Microsoft Entra ID Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836

Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup https://any.run/cybersecurity-blog/lazarus-group-it-workers-investigation-part-two/

CATana: On the Dangers of SIM-Originating AT Commands https://www.usenix.org/conference/woot26/presentation/lisowski

AWS and CrowdStrike are launching a major AI Red Teaming competition with a $100,000 prize pool. Participants will test how far AI-agent attacks can go - challenging autonomous agents and their tools in real-world security scenarios. The full launch is August 31, with the competition running throughout September. Registration is already open: https://www.crowdstrike.com/en-us/platform/falcon-aidr-ai-detection-and-response/agents-of-chaos/

ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26

AI-enabled email accounts could become the ultimate insider threat https://blog.barracuda.com/2026/08/04/ai-enabled-email-accounts-insider-threat

New Trojan attacks supply chains and causes combined damage to infected PCs https://news.drweb.ru/show/?i=15276&c=5

Clone This Repo and I Own Your Machine https://0din.ai/blog/clone-this-repo-and-i-own-your-machine

Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer https://research.jfrog.com/post/hijacked-npm-vscode-tasks-blockchain/