PlainSec · Cybersecurity briefing, 2026-08-24

Removing a poisoned dependency is not remediation.

• SickKids Data Exposure Stays Outside Patient Systems
• Leaked AWS Keys Stay Live for Years
• Apollo Confirms Cloud Breach, SSNs Exposed
• XZ Utils Showed Build Inputs Are Part of the Attack Surface
• Grok Followed Hidden Instructions in Ciphertext Pages
• GitLab Exploitation Turns Repo History Into a Target
• NCSC and Meta Show Approved AI Can Still Leak Data
• OpenAI Moves Model Security Into Runtime Containment
• Citrix NetScaler Bypass Targets Trust Roles
• North Korean Link Deepens Rust Build-Time Poisoning
• Trojanized npm Packages Load RedC2 on Import
• Check Point Finds a Signed Windows Kernel Abuse Path
• isolated-vm Flaw Breaks the Sandbox Boundary
• DoFun Updaters Smuggled Malware Into Car Head Units
• UAT-10147 Hides SPECTRE Inside Server Intrusions
• Black Kite Finds Ransomware Still Prefers Mid-Market Manufacturers

Get started