Weekly Threat Intelligence Summary
Top 10 General Cyber Threats
Generated 2026-08-17T05:00:05.653835+00:00
- #StopRansomware: Gunra Ransomware (www.cisa.gov, 2026-08-05T12:27:56)
Score: 19.352
Advisory at a Glance Title #StopRansomware: Gunra Ransomware Original Publication August 10, 2026 Executive Summary Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations. The Gunra ransomware variant first appeared in 2025 and expanded to RaaS operations in 2026. The actors leverage a double-extortion model, both encrypting data and threatening to publish exfiltrated data to a dedicated leak site (DLS) if the ransom is - Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite (www.cisa.gov, 2026-07-21T19:08:02)
Score: 16.898
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-supported cyber actors has been targeting and compromising various Western government and commercial organizations using the Zimbra Collaboration Suite (ZCS) software since at least July 2025. The Russian state-supported advanced persistent threat (APT) group’s activity is tracked in the cybersecurity community under several names (see Cybersecur - August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs (www.crowdstrike.com, 2026-08-11T05:00:00)
Score: 11.7 - Patch Tuesday: Update now to fix 421 flaws, including three zero-days (www.malwarebytes.com, 2026-08-12T13:48:49)
Score: 9.928
Microsoft's August Patch Tuesday fixes 421 vulnerabilities, including three zero-days, 62 critical flaws, and dozens of Office remote code execution bugs. - Malware Crypting Services and the Threat Actors Who Sell Them (www.recordedfuture.com, 2026-08-13T00:00:00)
Score: 7.799
Insikt Group analyzes 24 threat actors selling malware crypting services. Learn about their evasion techniques, market dynamics, and how defenders can prioritize behavioral detection over static analysis. - New Android malware lets criminals use your bank card in real time (www.malwarebytes.com, 2026-08-13T11:34:25)
Score: 7.579
Social engineering, a Remote Access Trojan (RAT), and NFC relay malware walk up to an ATM. It's no joke. Together, they can empty your bank account. - Fake CCleaner installs GhostDesk Chrome spyware (www.malwarebytes.com, 2026-08-11T20:41:27)
Score: 7.309
A convincing fake CCleaner website delivers a multi-stage malware attack that installs a spyware extension inside Chrome. - “Zoomsday” flaws could let one Zoom participant attack another (www.malwarebytes.com, 2026-08-12T14:43:13)
Score: 6.934
Update Zoom now to protect against critical vulnerabilities that could allow an attacker in the same meeting to run malicious code on your device. - Ransomware is the Scoreboard (www.recordedfuture.com, 2026-07-24T00:00:00)
Score: 6.665
Ransomware is the scoreboard for defensive architecture. Learn why traditional security methods fail and how to use AI and threat intelligence to identify and remediate critical attack paths. - Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery (www.crowdstrike.com, 2026-08-06T05:00:00)
Score: 6.367
Top 10 AI / LLM-Related Threats
Generated 2026-08-17T06:00:19.695085+00:00
- Understanding and Mitigating Over-refusal for Large Language Models via Representation Intervention (arxiv.org, 2026-08-17T04:00:00)
Score: 20.78
arXiv:2511.19009v2 Announce Type: replace
Abstract: Large language models (LLMs) demonstrate powerful capabilities across various natural language processing tasks,yet their inherent safety vulnerabilities undermine the reliable application of LLMs in real-world scenarios. To enhance LLM safety, various jailbreak defense methods have been proposed to guard against harmful outputs. However, improvements in model safety often come at the cost of severe over-refusal, failing to strike a good balan - STINER: Automated Extraction of Strategic Cyber Threat Intelligence from X (arxiv.org, 2026-08-17T04:00:00)
Score: 17.78
arXiv:2608.14418v1 Announce Type: new
Abstract: Strategic Cyber Threat Intelligence (CTI) focuses on high-level insights, such as identifying targeted industries, attributing attacks to specific ransomware groups, and assessing the scale of data loss. Today, X (formerly Twitter) has become the fastest source for this intelligence, often hosting real-time breach announcements days before formal vendor reports. Converting this raw chatter into actionable intelligence requires navigating a complex - CoSA: Context-Aware Severity Assessment via Context Analysis with Large Language Models (arxiv.org, 2026-08-17T04:00:00)
Score: 14.78
arXiv:2608.13928v1 Announce Type: new
Abstract: Accurate vulnerability severity assessment is essential for prioritizing remediation, yet manually assessing Common Vulnerability Scoring System (CVSS) base metrics remains labor-intensive. Existing automated approaches often fail to capture the repository-level evidence required for assessing many CVSS base metrics. Such repository-aware assessment is challenging because relevant evidence is scattered across the entire repository under heavy nois - MazeRunner: Nonlinear Task and Clue Orchestration for LLM-driven Black-Box Automated Penetration Testing (arxiv.org, 2026-08-17T04:00:00)
Score: 14.78
arXiv:2608.14216v1 Announce Type: new
Abstract: Penetration testing is essential yet resource-intensive. Although large language models (LLMs) show promise for automating security auditing, existing agents mainly execute end-to-end workflows in simplified linear scenarios. Real-world black-box testing is fundamentally nonlinear: the attack graph is initially unknown and must be incrementally inferred from environmental feedback. Observations may reveal multiple attack branches, failures are oft - A Hybrid LLM-Based Framework for Automated Security Annotation Generation in Business Process Models (arxiv.org, 2026-08-17T04:00:00)
Score: 14.78
arXiv:2608.14370v1 Announce Type: new
Abstract: The modelling and analysis of secure business processes require the incorporation of security annotations into process models. Although BPMN extensions, including SecBPMN2, exist for this purpose, the derivation of accurate and complete security annotations from natural-language specifications remains a manual, expert-intensive, and error-prone task. This paper presents a hybrid framework that takes a BPMN process model and a security requirements - Finding Vulnerabilities via LLM-Augmented Semantics-Aware Type-Checking (arxiv.org, 2026-08-17T04:00:00)
Score: 14.78
arXiv:2608.14533v1 Announce Type: new
Abstract: Vulnerability detection via static analysis traditionally relies on security experts encoding insecure coding patterns into algorithmic rules. However, this approach often focuses on syntactic patterns and overlooks deeper semantic information in the code, such as the meanings of variable and function names. As software systems grow more complex, modeling vulnerabilities using only syntactic rules becomes increasingly challenging.
In this paper, - No Data? No Problem: Synthesizing Security Graphs for Better Intrusion Detection (arxiv.org, 2026-08-17T04:00:00)
Score: 14.78
arXiv:2506.06226v4 Announce Type: replace
Abstract: Provenance graph analysis plays a vital role in intrusion detection, particularly against Advanced Persistent Threats (APTs), by exposing complex attack patterns. While recent systems combine graph neural networks (GNNs) with natural language processing (NLP) to capture structural and semantic features, their effectiveness is limited by class imbalance in real-world data. To address this, we introduce PROVSYN, a novel hybrid provenance graph s - Tiered KV cache for large LLMs on Amazon SageMaker HyperPod with Curvine (aws.amazon.com, 2026-08-12T13:42:48)
Score: 14.586
Running large language model inference at scale forces a KV cache trade-off: oversized GPU instances or slow time-to-first-token. This post builds a tiered KV cache on Amazon SageMaker HyperPod that extends the cache into a shared, distributed NVMe pool with Curvine, so replicas reuse cache at near-local-disk speeds on cost-efficient instances. - SLAC: Access-Driven CPU-to-GPU Side-channel Attacks via System-Level Cache on Apple Silicon (arxiv.org, 2026-08-17T04:00:00)
Score: 12.48
arXiv:2608.09075v2 Announce Type: replace
Abstract: Modern heterogeneous System-on-Chip designs integrate CPU cores and a GPU that share a last-level cache (LLC) or system-level cache (SLC). This sharing exposes a new cross-domain attack surface, and existing attacks on integrated platforms either exploit coarse-grained cache-occupancy contention or require the adversary to co-reside on the GPU with the victim to obtain accurate timing measurements. In this work, we target Apple Silicon heterog - Exponential-Family Membership Inference: From LiRA and RMIA to BaVarIA (arxiv.org, 2026-08-17T04:00:00)
Score: 12.48
arXiv:2603.11799v2 Announce Type: replace-cross
Abstract: Membership inference attacks (MIAs) are becoming standard tools for auditing the privacy of machine learning models. The leading attacks — LiRA (Carlini et al., 2022) and RMIA (Zarifzadeh et al., 2024) — appear to use distinct scoring strategies, while the recently proposed BASE (Lassila et al., 2025) was shown to be equivalent to RMIA, making it difficult for practitioners to choose among them. We show that all three are instances of - Does Fixing Break Security? An Empirical Study of Security Degradation in Iterative LLM-Driven Infrastructure-as-Code Repair (arxiv.org, 2026-08-17T04:00:00)
Score: 12.48
arXiv:2608.13404v2 Announce Type: replace-cross
Abstract: Background: Iterative feedback loops are the dominant paradigm for improving LLM-generated Infrastructure-as-Code (IaC): validators such as Checkov and terraform validate feed error signals back for successive repair attempts. Prior work reports cumulative-best metrics, which are non-decreasing by construction, so the raw per-iteration security trajectory has never been examined for IaC. Aims: We study security regression (a previously-p - Designing Inclusive Crypto-Asset Dispute Resolution A Hybrid AI and Smart Contract Online Dispute Resolution Framework for Vulnerable Users (arxiv.org, 2026-08-17T04:00:00)
Score: 11.98
arXiv:2608.14356v1 Announce Type: cross
Abstract: The growing use of crypto-assets has generated disputes that sit uneasily within existing legal redress mechanisms. Their resolution is complicated by the technical features of blockchain transactions, the cross-border nature of many relationships, and fragmented legal rules. These difficulties are particularly acute for users without legal or technical expertise, who may struggle to identify their rights, organise relevant evidence, or pursue a - P2Skill: Privacy Preserving Skill Distillation for Cloud-Local LLM Inference Systems (arxiv.org, 2026-08-17T04:00:00)
Score: 11.78
arXiv:2608.14094v1 Announce Type: new
Abstract: Cloud-local LLM inference systems have the potential to use the reasoning capability of large cloud models while protecting sensitive user data on personal devices. Cloud-bound requests must exclude personally identifiable information (PII) to prevent external data leakage. Existing privacy-preserving methods rely on prompt perturbation, entity masking, or model fine-tuning, but these approaches may distort contextual semantics or require addition - Regime-Conditional Verification: Correctness Estimation for Adapting and Monitoring Safety Classifiers (arxiv.org, 2026-08-17T04:00:00)
Score: 11.78
arXiv:2608.14089v1 Announce Type: cross
Abstract: Safety classifiers deployed with large language models often fail for two reasons: their decisions reflect the policy learned during training rather than the deployer's desired policy, and their performance degrades as deployment traffic evolves. We present Regime-Conditional Verification (RCV), a lightweight wrapper that adapts an off-the-shelf safety classifier without retraining it. RCV estimates, from the classifier's internal repr - CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED) (www.rapid7.com, 2026-08-11T13:00:00)
Score: 11.141
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft are disclosing the second vulnerability in this chain, the RCE vulnerability CVE-2026-63520. The first vulnerability in the chain, CVE-2026-55040, was disclosed by Rapid7 and Microsoft last month. Our fu - Building agentic workflows with SageMaker AI and Bedrock AgentCore (aws.amazon.com, 2026-08-14T15:58:44)
Score: 10.785
Learn how to combine OpenAI-compatible endpoints on Amazon SageMaker AI with Amazon Bedrock AgentCore runtime to build a multi-agent workflow where each specialized agent uses the model best suited to its job. This post also shows how to get token-level observability from SageMaker endpoints that Strands Agents does not instrument by default. - Patch Tuesday – August 2026 (www.rapid7.com, 2026-08-11T21:10:55)
Score: 10.622
Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday , including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Microsoft is aware of exploitation in the wild for one of the vulnerabilities published today, as well as public disclosure for two others, although the - The August 2026 Security Update Review (www.thezdi.com, 2026-08-11T17:56:34)
Score: 10.59
I’ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the “ new normal ”, it’s time to readjust what we consider a true bug apocalypse. This month’s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full v - Accelerate cyber defense with OpenAI and AWS: Daybreak Red & Daybreak Blue now available to eligible customers on Amazon Bedrock (aws.amazon.com, 2026-08-11T21:38:06)
Score: 10.126
Daybreak Red and Daybreak Blue from OpenAI, specialized cyber defense models from OpenAI, are now available on Amazon Bedrock to eligible customers. Both models run with zero-operator access enforced at the chip, keeping your code and vulnerability data secure. - Deploying Anthropic Claude apps gateway for AWS for enterprise workloads (aws.amazon.com, 2026-08-11T15:59:22)
Score: 10.07
Claude apps gateway is a self-hosted governance layer between Claude Code and Claude Desktop and Amazon Bedrock or Claude Platform on AWS. This post presents a production reference deployment covering end-to-end architecture, enterprise deployment patterns, cost, and implementation resources. - Record, train, and deploy from one place with Strands Agents, LeRobot, and Hugging Face Storage Buckets (huggingface.co, 2026-08-13T17:16:04)
Score: 9.759 - Weird Machines in Transport Layer Security (arxiv.org, 2026-08-17T04:00:00)
Score: 9.48
arXiv:2608.13685v1 Announce Type: new
Abstract: Weird machines are latent computational capabilities that emerge from the composition of architectural components. Prior work has studied this phenomenon extensively in software systems, including x86 instructions, ELF metadata, and page tables, and more recently in cyber-physical systems such as industrial control networks. This paper extends weird machine theory to a new domain: the Transport Layer Security (TLS) handshake and its two dominant i - Vaulted Passkeys: A Device-Bound Proposal for Authenticated Credential Export and Import (arxiv.org, 2026-08-17T04:00:00)
Score: 9.48
arXiv:2608.13806v1 Announce Type: new
Abstract: Hardware authenticators deliberately resist private-key extraction, yet replacement, disaster recovery, and controlled migration create a legitimate need for portability. Existing guidance for device-bound credentials commonly reduces recovery risk by registering an additional authenticator before failure. That creates an independent credential registration and requires replacement hardware to exist in advance; it is redundancy, not a backup of th - CipherSight: Robust Website Fingerprinting via Record-Resource Semantic Supervision under Distribution Shifts (arxiv.org, 2026-08-17T04:00:00)
Score: 9.48
arXiv:2608.13905v1 Announce Type: new
Abstract: HTTPS website fingerprinting (WF) aims to identify visited websites from metadata observable in encrypted traffic. However, real-world deployments introduce a significant out-of-distribution (OOD) problem caused by temporal and geographic changes, while previously unseen websites are common in open-world scenarios. Existing methods primarily learn from raw TCP packet sequences and struggle to capture stable and generalizable website representation - Characterizing the Variance Envelope: A Multi-Dimensional Analysis of Spectre Telemetry Across Architectures and Workloads (arxiv.org, 2026-08-17T04:00:00)
Score: 9.48
arXiv:2608.13920v1 Announce Type: new
Abstract: Hardware attacks like Spectre exploit built-in processor vulnerabilities, leaving anomalous footprints in Hardware Performance Counter (HPC) metrics. While machine learning can detect these footprints in controlled settings, static models fail in the real world when confronted with background system noise, diverse attack variants, and adversarial traffic pacing. To close this gap, this paper characterizes the "variance envelope"-the full
Auto-generated 2026-08-17
