Daily Security Intelligence Briefing — August 7, 2026

1. Shai-Hulud / ChainDrop npm Worm Resurges, Poisoning 1,280+ Packages via CI Pipelines

Source & Article Link: HackRead / TLDR InfoSec / Microsoft Security Blog

Technical Severity / Domain: Software Supply Chain Security / Critical (Self-Propagating Worm)

Why You Must Read This: A new variant of the self-propagating Shai-Hulud (ChainDrop) worm has compromised over 1,280 npm packages, including the popular Keyv library. The worm infects package manifests via hijacked GitHub Actions pipeline tokens. A preinstall hook executes Bun to run an obfuscated loader that aggressively harvests AWS credentials, Kubernetes tokens, HashiCorp Vault secrets, npm tokens, and SSH keys from developer workstations and CI runners. The stolen publishing tokens are immediately reused to infect and publish dependent packages automatically.

Recommended Immediate Action: Audit all node dependencies for compromised versions, immediately rotate all CI/CD, AWS, Kubernetes, and Vault credentials on affected systems, and perform manual log audits rather than relying solely on automated vulnerability scanners.

2. 77 Open VSX Extensions Found Exfiltrating Developer Workstation Telemetry

Source & Article Link: TLDR InfoSec — Open VSX Campaign / Manifold Security

Technical Severity / Domain: Application Security & Developer Tooling / High

Why You Must Read This: Manifold Security uncovered an "evil twin" campaign on the Open VSX extension registry where 77 malicious extensions impersonated legitimate VS Code plugins. While claiming to collect anonymous usage metrics, the extensions exfiltrated OS usernames, workspace file paths, Git commit hashes, and CI/CD environment variables to mangorbit[.]com. The C2 infrastructure utilized DNS TXT record lookups to bypass standard web proxy logging.

Recommended Immediate Action: Block domain mangorbit[.]com at perimeter DNS/firewalls, audit VS Code and Open VSX extension IDs across developer workstations, and restrict extension installation to approved internal registries.

3. Hardware Hacking: Pre-Auth Stack Buffer Overflow on Mercusys MB115-4G Router (CVE-2026-12495)

Source & Article Link: Rotcee Hardware Research / TLDR InfoSec

Technical Severity / Domain: Embedded & Firmware Security / Critical (Pre-Auth RCE)

Why You Must Read This: Hardware reverse engineering of the Mercusys MB115-4G router identified a pre-authentication vulnerability in /usr/bin/httpd. The http_gdpr_decrypt function copies up to 2,048 bytes of AES-decrypted, attacker-controlled data into a 512-byte stack buffer without bounds checking. Static analysis in Ghidra and Ghidriff confirmed the vulnerability persisted unpatched across firmware versions v1.7.0 through v1.9.0.

Recommended Immediate Action: Upgrade Mercusys MB115-4G routers to firmware v1.11.0 or newer, which adds caller buffer bounds checking, HMAC verification, and transitions login decryption from RSA to ECC.

4. NIST Releases Draft CSWP 36F: 5G Initial Non-Access Stratum (NAS) Message Security

Source & Article Link: NIST NCCoE 5G White Paper

Technical Severity / Domain: Telecom & Wireless Infrastructure Security / Architectural Guidance

Why You Must Read This: NIST's National Cybersecurity Center of Excellence (NCCoE) released draft Cybersecurity White Paper (CSWP) 36F (Initial Non-Access Stratum Message Security). Unlike 4G networks where the initial connection handshake between device and core network (Initial NAS Message) was transmitted in cleartext—leaving devices exposed to IMSI catchers and MitM attacks—5G specifications enable end-to-end encryption and integrity protection for initial NAS payloads.

Recommended Immediate Action: Mobile network operators and 5G enterprise architects should review CSWP 36F guidelines to verify NAS encryption configurations on 5G standalone (SA) cores; public comments close September 7, 2026.

1. Greatness Phishing Service Spoofs RingCentral for M365 Account Hijacking

Domain: Cloud Security & BEC Defense

Subject / Topic Summary: The Greatness phishing-as-a-service platform bypassed Exchange Online email filters by forging RingCentral voicemail alerts to target organizations that had blanket-whitelisted RingCentral domains. Clicking the lure routed victims through an adversary-in-the-middle (AiTM) proxy to capture MFA-approved session tokens, allowing attackers to replay tokens from VPN endpoints and silently siphon Microsoft 365 data.

Key Technical & Strategic Takeaways:

Demonstrates that domain-level safe-sender whitelists undermine SPF/DKIM/DMARC authentication and create major exposure gaps.

Remediation: Remove blanket domain whitelists, enforce Conditional Access device posture/location checks, and revoke active sessions for compromised users.

Essential Direct Quote: "The Greatness phishing platform recently bypassed email filters by spoofing RingCentral voicemail alerts to target organizations that had blanket-whitelisted the domain... routing victims through an adversary-in-the-middle flow to steal MFA-approved tokens."

Source: TLDR InfoSec — RingCentral Phish

2. Agentic Incident Response Playbooks using Marimo Reactive Notebooks

Domain: Incident Response & SOC Engineering

Subject / Topic Summary: DNB Cyber Defense Center built modular incident response workflows using marimo reactive Python notebooks. Paired with a custom translation SDK mapping queries across Splunk, Microsoft Defender, and SQL interfaces, the marimo-pair interface allows human responders and autonomous AI agents to co-execute investigation playbooks interactively.

Key Technical & Strategic Takeaways:

Reactive notebook state machines enable seamless human-agent collaboration during complex incident triage.

Essential Direct Quote: "The DNB Cyber Defense Center's incident response team used marimo to build out incident response workflows as modular notebooks... allowing agents to create and execute the same notebooks as human responders."

Source: DNB Security Engineering / TLDR InfoSec

3. Airlock Digital Announces Agentic AI Application Control & Governance

Domain: Endpoint Security & AI Governance

Subject / Topic Summary: Airlock Digital announced Agentic AI Control & Governance, expanding its application control suite to provide command-level and session-level visibility into trusted AI agent executions with real-time policy enforcement.

Key Technical & Strategic Takeaways:

Moves endpoint application control from binary hash allowlisting to session-level behavioral boundaries for autonomous AI agents.

Essential Direct Quote: "Airlock Digital extended its application control platform with Agentic AI Control & Governance, adding command- and session-level visibility into trusted AI agent behavior plus real-time policy enforcement."

Source: HackRead / TLDR InfoSec

Tier 3 — Industry Noise & Awareness Only

• English National Ballet CRM Data Breach: CRM system compromise exposed customer contact information without financial data theft (BBC News).

• AgentHound AI Agent Offensive Security Framework: Open-source framework for fingerprinting, prompt inventorying, and tool-poisoning AI agent infrastructure (GitHub AgentHound).

• Beignet macOS PIC Shellcode Generator: Open-source utility converting macOS .dylib binaries into position-independent shellcode (GitHub Beignet).

• Windows Kernel Exploitation HEVD Series: Four-part research series charting the shift from control-flow corruption to Data-Only pool grooming on Windows 11 (HEVD Research).

• Palo Alto Unit 42 Pass-Ta-Key Passkey Hijacking: Research detailing TPM-assisted passkey extraction from Google Password Manager (Unit 42).

• Snowflake SaaS Hacker Guilty Plea: Defendant Connor Riley Moucka pleaded guilty to $9.5M cloud extortion campaign affecting 165+ enterprise tenants (DataBreaches.net).

• White House Voluntary AI Information Sharing Stance: National Cyber Director Sean Cairncross reaffirmed non-regulatory stance on AI model security (CyberScoop).

• Tails 7.10.1 Emergency Kernel Release: Emergency release patching critical Linux kernel flaw (CVE-2026-64560) affecting Tor Browser anonymity (Linuxiac).

• OpenAI & WhatsApp Disrupt Cambodian Scam Network: Dismantled Poipet cybercrime ring leveraging ChatGPT for romance and financial fraud (The Hacker News).