Sam's News — security — 2026-08-13¶

Security¶

8.5 Autonomous AI Agents Breach Taiwan Nuclear Safety Agency in Cyberattack¶

Hackers deployed freely available open-source AI agents in a four-day autonomous cyberattack that breached Taiwan's nuclear safety agency and seven energy firms.

Four-day cyberattack by autonomous AI agents
Taiwan nuclear safety agency breached
Seven energy sector firms compromised

Sources: techtimes.com RSS, google.com Web Search, google.com Web Search, techtimes.com Web Search

8.5 Microsoft SharePoint authentication bypass CVE-2026-55040 actively exploited after PoC release¶

Threat actors are exploiting a critical Microsoft SharePoint authentication bypass vulnerability (CVE-2026-55040, CVSS 9.1) following public proof-of-concept code release.

Sources: The Hacker News RSS Update to: Researchers disclose AI-assisted exploit chain achieving unauthenticated RCE in Microsoft SharePoint

8 Trump Administration Authorizes Private Cyber Attacks on Criminal Organizations¶

On August 13, 2026, the president of the United States issued a presidential memorandum authorizing vetted private companies to conduct offensive cyber operations against cybercriminal organizations under DOJ and DHS approval. The policy prohibits operations causing loss of life or constituting armed attack under international law. Cybersecurity experts raised concerns about legal protections and risks to participating employees.

August 13, 2026: Presidential memorandum authorizes private cyber attacks
All operations require DOJ and DHS advance approval
Operations prohibited if causing loss of life
$20.8 billion reported cyber losses in previous year
Expert concerns about legal protections and employee targeting
Memo issued August 13, 2026
First federal authorization for private companies to conduct offensive cyber ops
Targets: ransomware, sextortion, phishing, financial fraud, impersonation scams
Foreign transnational criminal orgs (not state-institutional foreign entities)
Oversight: National Coordination Center, DOJ, DHS
Prohibited outcomes: loss of life, serious injury, armed attack level under international law
Announced August 13, 2026 via presidential memorandum
First policy allowing private offensive cyber ops vs. prior defensive-only approach
Companies can deploy surveillance/spyware and disruptive attacks
$1 million escrow deposit required, forfeitable for non-compliance
Requires DOJ and DHS sign-off before each operation
Prohibition: targeting Americans, U.S.-based systems, or unilateral 'hack back'
Guidance to be issued within 2 months; open to firms of all sizes

Sources: The Record AI Web Searched, BleepingComputer RSS, Ars Technica AI Web Searched, TechCrunch AI Web Searched, The Verge AI Web Searched, Engadget RSS

8 Critical VMware vCenter directory traversal vulnerability under active attack¶

A critical remote code execution vulnerability (CVE-2026-59310) in VMware vCenter has been identified and is being actively exploited by attackers.

Sources: SecurityWeek RSS Update to: Attackers Actively Exploit VMware vCenter Critical Directory-Traversal Vulnerability

8 Nightmare Eclipse group releases 'ShieldBreak' Windows zero-day exploit¶

The Nightmare Eclipse group has released a zero-day exploit called 'ShieldBreak' that allows any user to spawn a shell with System privileges on Windows.

Sources: SecurityWeek RSS Update to: ShieldBreak zero-day proof-of-concept bypasses Microsoft Defender patch with SYSTEM access

8 Belgium's eID authentication system compromised by critical browser extension vulnerabilities¶

Critical vulnerabilities in the Connective browser extension, used for eID authentication by >2 million Belgian citizens and 1,000+ enterprises, were publicly disclosed at DEF CON 34 on August 6, 2026. The flaws enabled identity theft, payment card hijacking, and remote code execution. Patches were applied July 22, 2026.

Critical vulnerabilities in Connective eID extension
2+ million users across 60+ government agencies, 8 of 10 largest banks
Vulnerabilities patched July 22; disclosed August 6
Average 1.7/5-star rating from 542 reviewers

Sources: Dark Reading AI Web Searched

8 Minnesota water systems targeted in coordinated cyberattack on operational technology¶

Hackers breached the operational technology infrastructure of more than 30 municipal water systems across Minnesota in coordinated attacks.

Sources: google.com Web Search Update to: Minnesota water systems targeted in coordinated cyberattack affecting 30+ municipalities

8 Malicious LiteLLM PyPI releases exposed 2,100+ organizations to credential theft¶

Compromised LiteLLM releases on PyPI stole cloud keys, SSH credentials, and Kubernetes tokens, potentially exposing 2,100+ organizations.

Sources: google.com Web Search, google.com Web Search Update to: Malicious LiteLLM Releases From Trivy Hack Exposed 2,100+ Organizations

7.5 Hospital software vendor suffers supply-chain data breach¶

Craneware, a British healthcare software vendor serving >2,000 healthcare organizations and ~10,000 clinics, disclosed a July 20 cyberattack in which hackers stole employee and customer records. Healthcare providers identified six times more supply-chain risks in H1 2026 vs. H1 2025, highlighting systemic vendor vulnerability.

Craneware breached July 20, 2026
Serves 2,000+ healthcare organizations, ~10,000 clinics
Data included employee and customer records
Healthcare sector saw 6x more supply-chain risks in H1 2026 vs H1 2025

Sources: Cybersecurity Dive AI Web Searched, google.com Web Search

7.5 Coca-Cola confirms data breach linked to Fairlife ransomware attack¶

Coca-Cola confirmed a data breach after the Anubis cybercrime group attacked its Fairlife subsidiary and threatened to release stolen data.

Sources: google.com Web Search, google.com Web Search, securityweek.com Web Search