The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack intelligence summary — the week’s most important security stories turned into practical defensive action.

🤖 This briefing is drafted and read by AI, but reviewed and edited by humans.

This week’s edition: The Defensive Line Weekly #37: 30 August–6 September 2026

Main stories

One exposed AI key, six hundred thousand dollars of compute

METR: Update on Security at METR

SonicWall’s edge is under attack again

SonicWall: SMA 1000 Series affected by multiple vulnerabilities

CISA: CISA adds seven known exploited vulnerabilities to its catalogue

Fake support turns trusted tools into an attack path

Microsoft Threat Intelligence: Impersonating IT support — how threat actors turn a remote session into enterprise-wide access

Huntress: Rogue ScreenConnect installations suggest worm-like activity

ConnectWise: Security advisories

Honourable mentions

Softaculous: Security incident — BGP hijacking

Kentik: Latest BGP hijack targets a hosting-software vendor

Microsoft: ASCII smuggling crosses over from AI prompt injection to phishing evasion

Arctic Wolf: Exploited PaperCut vulnerabilities lead to credential theft

PaperCut: Urgent security advisory

JFrog: CVE-2026-82329 — authentication bypass in Artifactory

Google Chrome Releases: Stable Channel Update for Desktop

Wordfence: Attackers actively exploit a critical Elementor Pro vulnerability

Cisco: Nexus 9000 Series Silicon One remote-code-execution vulnerability

GitLab: Critical remote code execution in vm2

Sublime Security: Sublime and CrowdStrike unify email detection, response and sandbox analysis

CrowdStrike: Real-Time Supply Chain Attack Protection

CrowdStrike: The next evolution of the Agentic SOC

CrowdStrike: Agentic Identity Provider

CrowdStrike: Falcon Guardian defines the next generation of AI security

GitHub: FalconFlank proof of concept

The Hacker News: Researcher releases FalconFlank PoC showing privilege escalation in CrowdStrike Falcon

The Register: Prolific Microsoft zero-day hunter drops CrowdStrike Falcon exploit PoC

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack intelligence summary — the week’s most important security stories turned into practical defensive action.

🤖 Voices are AI-generated. Story curation, research and writing are a mix of AI and human.

This week’s edition: The Defensive Line Weekly #36: 23–30 August 2026

Main stories

TerminalFix turns a paste into a persistent intrusion

Microsoft Threat Intelligence: TerminalFix campaign deploys a reverse tunnel through a multistage intrusion

The Hacker News: TerminalFix uses fake Cloudflare verification to deploy a reverse tunnel

The phish worked, but the application boundary held

ReliaQuest: Social-engineering attempt against ReliaQuest — what the company found

Island: NovaCookies phishing service targeting hundreds of organisations

SecurityWeek: ReliaQuest confirms incident and says the impact was limited

When AI systems trust documentation and expose gateways

Data became code: Researchers ran code inside corporate networks through agent-readable documentation

Project site: What Would AI Do?

Ars Technica: Claude, Codex and Hermes installed unowned code inside corporate networks

Wiz: Ninety days of attacks against internet-facing AI infrastructure

Microsoft Security: Securing AI gateways and control points

Honourable mentions

CISA’s tale of two SOCs

CISA: AA26-237A — A Tale of Two SOCs

ServiceNow as a management plane

MDSec: Anatomy of a ServiceNow red-team path

ServiceNow: KB3152242 — AI Platform security update

Signal and WhatsApp account takeover

POLITICO: State-linked actors target EU officials’ messaging accounts

AIVD: Phishing via Signal and WhatsApp

BfV and BSI: Joint warning on messaging-app phishing

Malicious browser extensions

The Hacker News: Malicious Chrome and Edge extensions steal cryptocurrency wallet secrets

The Hacker News: Malicious Firefox extensions impersonate cryptocurrency wallets

Vulnerability roundup

PaperCut NG and MF — zero-day exploitation

PaperCut: Urgent security advisory — 27 August 2026

Versions: PaperCut released emergency patches for versions 25 and 26, followed by additional hardening on 28 August. Consult the advisory for the latest fixed builds and investigation guidance.

CISA KEV additions

CISA: Known Exploited Vulnerabilities catalogue

Six vulnerabilities were added on 27 August, including flaws affecting Citrix NetScaler, Linux and SQL Server.

Citrix NetScaler ADC and Gateway

The Hacker News: Critical NetScaler authentication bypass

Versions: The issue affects customer-managed NetScaler ADC and Gateway deployments, including certain FIPS and NDcPP builds, as well as SecurAccess. Check the current Citrix advisory for the appropriate fixed build for your deployment.

WordPress plugins and themes

The Hacker News: Five critical WordPress plugin and theme flaws

Affected products include WPMU DEV Dashboard, Avada, TranslatePress, Pods and GiveWP. Update each affected component to the latest fixed release published by its maintainer.

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack intelligence summary — the week’s most important security stories turned into practical defensive action.

🤖 Voices are AI-generated. Story curation, research and writing are a mix of AI and human.

This week’s edition: The Defensive Line Weekly #35: 16–23 August 2026

Main stories

A CVSS 10.0 in Entra ID — and a corrected advisory

Microsoft MSRC: CVE-2026-69836 advisory

The Hacker News: Microsoft Entra ID flaw rated CVSS 10.0 — advisory correction

Poisoning the software factory

Unit 42: Securing the Overlooked Corners of the SDLC Supply Chain

Wiz Research: Rust supply-chain attack on arrayref — significant overlap with DPRK campaigns

Espionage and phishing move inside legitimate logins

Google Threat Intelligence Group: Distinct clusters targeting individuals of interest to Russia

Unit 42: Identity Abuse Through Trusted Communication Channels

BleepingComputer: New SynkLoader malware pushed in Microsoft Teams phishing campaign

Honourable mentions

Cisco Talos: UAT-10147 integrates agentic AI into post-compromise operations

ICO: ACRO Criminal Records Office reprimanded following cyber security failings

BleepingComputer: Leaked AWS keys give full control over corporate accounts

GitLab: Critical patch release 19.2.4

Citrix: NetScaler ADC and NetScaler Gateway security bulletin CTX696939

Zimbra: Patch release update — Zimbra 10.1.20

Versions: GitLab CE/EE (CVE-2026-19478, actively exploited) — upgrade self-managed instances to 19.2.4, 19.1.6, 19.0.8 or 18.11.11. Citrix NetScaler ADC/Gateway (CVE-2026-19490) — upgrade to 14.1-73.32 or 13.1-63.21. Zimbra Collaboration (CVE-2026-73570, actively exploited) — update to 10.1.20 or later.

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack intelligence summary — the week’s most important security stories turned into practical defensive action.

🤖 Voices are AI-generated. Story curation, research and writing are human.

This week’s edition: The Defensive Line Weekly #34: 9–16 August 2026

Main stories

Lazarus, fake job offers, and a Windows zero-day

Check Point Research: Shattering the Dream: When a Job Offer Becomes a Zero-Day Attack

The Hacker News: Lazarus Exploits Windows Zero-Day to Deploy FudModule Rootkit

The Hacker News: Microsoft Patches 398 Flaws Including Actively Exploited Zero-Day

Recruitment as an attack surface

CERT-UA: UAC-0145 campaign targeting administrators and IT staff

ANY.RUN: Lazarus Group IT Workers Investigation — Part Two

The Record: Russian military hackers pose as recruiters to target Ukrainian IT workers

Akira, Safe Mode, and EDR bypass

Huntress: Akira Hits Safe Mode: Ransomware Rebooting Around EDR

The Register: Akira ransomware scum blocked victims’ security tools — and broke their own encryptor

NetScaler and the collapsing exploitation window

watchTowr Labs: You’re Back In The Room: Citrix NetScaler Pre-Auth RCE CVE-2026-8452

Citrix: Citrix security advisories

Zero Day Clock: Time-to-exploit tracking

City-Forum, Salesforce, ServiceNow, and OAuth abuse

Reco: City-Forum campaign against Salesforce and ServiceNow

Dark Reading: Long-running data-theft campaign targets Salesforce and ServiceNow

Honourable mentions

Genians: Kimsuky using local LLMs for offensive operations

Pillar Security: Deadbugz: active malicious MCP supply chain campaign

The Hacker News: New passkey attacks can recover synced passkeys

Mozilla: Updated GPG key for signing Firefox and Thunderbird releases

The three stories that influence the defensive priorities this week: a vishing extortion crew calling employees on their personal phones, a self-propagating credential-stealing worm in npm, and an actively exploited RMM platform flaw that reached downstream managed customer networks.

🤖 Voices are AI-generated. Story curation and analysis is human.

This episode

Vishing extortion reaches the personal phone

Google Threat Intelligence Group reports the financially motivated data-theft extortion group behind BlackFile (also operating as Redact, Pink, Helix and Falcon) running helpdesk-themed vishing, AiTM credential harvesting on fake passkey/MFA/SSO enrolment portals, and automated SaaS exfiltration — with first contact often on employees’ personal phones.

* Google Threat Intelligence Group

* The Hacker News

* Bloomberg

ChainDrop: a self-propagating worm in npm’s plumbing

A credential-stealing worm entered through the keyv and cacheable packages and republished itself across more than 400 packages, harvesting developer credentials and GitHub Actions secrets, with persistence hooks in Claude Code and VS Code.

* Wiz Research

* Microsoft

* Unit 42

* The Hacker News — 800 malicious npm packages

N-able N-central: when the management plane is the way in

Active exploitation of an unauthenticated remote-admin flaw (CVE-2026-18577, alongside CVE-2026-18556), a bypassed first fix, and vendor-confirmed downstream compromise of managed customer networks via Take Control.

* N-able security update, 6 August

* N-able Hotfix 2 release note

* N-able security update, 2 August

* The Register

* The Hacker News — CISA KEV

Versions: N-central Hotfix 1 = 2026.3.1.7 (2 August); Hotfix 2 = 2026.3.1.10 (6 August). Hotfix 2 is required even if Hotfix 1 was already applied.

Honourable mentions

* AISI incident report on unsanctioned AI agent behaviour — AISI, NCSC statement, The Hacker News, CrowdStrike agent containment architecture

* Device-code phishing in commodity kits (Greatness, Kali365) — The Hacker News — Greatness, The Hacker News — Kali365, Dark Reading

* INC ransomware exploiting SonicWall SMA 1000 flaws — Resecurity, The Hacker News

* Metabase zero-day exploited in the wild (GHSA-vwf4-m7j8-wcjf, CVSS 10.0) — The Hacker News, Wiz

Read the full written edition

The Defensive Line Weekly #33: 2–9 August 2026 → Substack

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack Intelligence Summary — the week’s most important security stories turned into practical defensive action.

🤖 Voices are AI-generated. Story curation, research and writing are human.

Russia-linked CaptiveCrunch turns hotel Wi-Fi into an identity attack surface; autonomous AI attacks move from lab accident to real adversary use; and exposed water PLCs cause real-world disruption.

CaptiveCrunch and hostile hotel Wi-Fi

* Microsoft Threat Intelligence — CaptiveCrunch: https://www.microsoft.com/en-us/security/blog/2026/07/31/captivecrunch-midnight-blizzard-targets-travelers-worldwide-for-malware-delivery-and-credential-theft/

* The Hacker News — Device-code phishing: https://thehackernews.com/2026/07/6-reasons-why-device-code-phishing-is.html

Autonomous AI attacks

* Cloud Security Alliance — Hugging Face CISO post-mortem: https://cloudsecurityalliance.org/artifacts/hugging-face-ciso-post-mortem

* OpenAI — Hugging Face model evaluation security incident: https://openai.com/index/hugging-face-model-evaluation-security-incident/

* Anthropic — Investigating incidents in cybersecurity evals: https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals

* Unit 42 — Autonomous A-I cyber attack campaign: https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/

* Hugging Face — Agent intrusion technical timeline: https://huggingface.co/blog/agent-intrusion-technical-timeline

Water-sector PLC attacks

* FBI/EPA — Water sector public service announcement: https://www.ic3.gov/PSA/2026/PSA260730.pdf

Honourable mentions

* JetBrains — TeamCity advisory: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/

* CISA — S-V-R exploitation of TeamCity CVE-2023-42793: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a

* Ruby on Rails — Active Storage advisory: https://discuss.rubyonrails.org/t/cve-2026-66066-possible-arbitrary-file-read-and-remote-code-execution-in-active-storage-variant-processing/91432

* Adobe — Campaign Classic security bulletin: https://helpx.adobe.com/security/products/campaign/apsb26-114.html

* The Register — Brinks Home / ShinyHunters Salesforce claim: https://www.theregister.com/security/2026/07/31/the-most-famous-brand-in-physical-security-got-pwned-by-shinyhunters/5281924

* BleepingComputer — Adform script compromise: https://www.bleepingcomputer.com/news/security/online-ad-firm-adforms-script-compromised-to-steal-cryptocurrency/

This week’s edition

* The Defensive Line Weekly #32: 26 July – 2 August 2026: https://thedefensiveline.substack.com/p/the-defensive-line-weekly-32-26-july

Previous episode referenced

* The Defensive Line Weekly #31: 19–26 July 2026: https://thedefensiveline.substack.com/p/the-defensive-line-weekly-31-1926

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack Intelligence Summary — the week’s most important security stories turned into practical defensive action. Two voices, one focused briefing, made for and by blue teamers.

🤖 Voices are AI-generated. Story curation, research and writing are human.

This week: OpenAI’s AI models breach Hugging Face autonomously; LAUNDRY BEAR’s zero-click Zimbra attack; a $25 WordPress RCE built by AI.

AI Models Breach Hugging Face

OpenAI — Hugging Face model evaluation security incident

Hugging Face — security incident July 2026

Cloud Security Alliance — Hugging Face Incident Initial Post-Mortem

The Hacker News

Hunt.io — Hermes AI agent, Thailand Ministry of Finance

The Hacker News — Kimi K3 agents find Redis zero-days

The Register

LAUNDRY BEAR’s Zero-Click Zimbra Campaign

Joint Cybersecurity Advisory AA26-204A

NCSC

Unit 42

A $25 WordPress Exploit

Searchlight Cyber

Wiz — wp2shell

Elastic Security Labs — detection guidance

Honourable Mentions

Ransom-ISAC — Cl0p Windchill/FlexPLM

PTC advisory — CVE-2026-12569

The Hacker News — Qilin PAN-OS

Island — AgentBaiting

Vulnerability Roundup

Check Point — CVE-2026-16232 SmartConsole advisory

Microsoft — CVE-2026-50522 SharePoint

The Hacker News — Certighost AD exploit

This week’s edition

The Defensive Line Weekly #31: 19–26 July 2026

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack Intelligence Summary — the week’s most important security stories turned into practical defensive action. Two voices, one warm and focused briefing, made for and by blue teamers.

Transport for London sentencing

* Judiciary of England and Wales — sentencing remarks

* National Crime Agency

* Crown Prosecution Service

* The Guardian

* The Register

* Sophos — State of Ransomware 2026

* Dark Reading — identity attacks overtake exploits

One leaked credential to Global Administrator

* Sysdig — anatomy of an Azure permission takeover

* Microsoft Entra Workload ID (Workload Identities Premium)

SonicWall SMA 1000 zero-days

* SonicWall PSIRT advisory — CVE-2026-15409 & CVE-2026-15410 (firmware 12.4.3 and 12.5.0; models 6210, 7210, 8200v)

* The Hacker News

* Dark Reading — Inc ransomware exploitation

* Help Net Security

* Zero Day Clock

Honourable mentions

* Microsoft — defending SaaS applications against ShinyHunters OAuth abuse

* BleepingComputer — Abbott Laboratories incidents

* CERT-UA — UAC-0145 ClickFix playbook

* Microsoft — ACR Stealer

* Elastic Security Labs — TELEPUZ

* RH-ISAC — ClickLock Stealer (macOS)

* JFrog — Miasma worm returns to npm

* OX Security — AsyncAPI compromise

* Hugging Face — security incident disclosure

* Hunt.io — AI coding agents in government intrusions

* NCSC — Russian intelligence router targeting

This week’s edition

* The Defensive Line Weekly #30: 12–19 July 2026

The Defensive Line Weekly podcast is the audio edition of the weekly Defensive Line Substack intelligence summary — fifteen minutes of the week’s most defensively useful security stories, for blue teamers and security leaders.

Vishing crews plant rogue passkeys; Helix loots SharePoint via device codes; ShareFile ordered offline; npm kills install scripts.

Full breakdown: https://thedefensiveline.substack.com/p/the-defensive-line-weekly-29-512

Story 1 — Two crews, one phone: passkey enrolment vishing and Helix

* Okta Threat Intelligence: https://www.okta.com/blog/threat-intelligence/vishing-actors-target-microsoft-entra-passkey-enrollment-/

* BleepingComputer — Entra passkey enrolment vishing: https://www.bleepingcomputer.com/news/security/entra-passkey-enrollment-vishing-targets-microsoft-365-users/

* SecurityWeek — Okta vishing warning: https://www.securityweek.com/okta-warns-of-vishing-attacks-targeting-microsoft-365-customers/

* The Hacker News — fake Microsoft Entra pages: https://thehackernews.com/2026/07/hackers-use-fake-microsoft-entra.html

* ReliaQuest — Helix threat spotlight: https://reliaquest.com/blog/threat-spotlight-helix-new-name-in-data-extortion-ecosystem/

* BleepingComputer — Helix SharePoint data theft: https://www.bleepingcomputer.com/news/security/new-helix-vishing-group-emerges-in-sharepoint-data-theft-attacks/

Story 2 — Progress orders ShareFile Storage Zone Controllers switched off

* The Hacker News — ShareFile shutdown instruction: https://thehackernews.com/2026/07/urgent-progress-tells-sharefile.html

* ShareFile status page:

https://status.sharefile.com/

Story 3 — npm’s bad week and the install-scripts default

* Affected versions: jscrambler 8.14.0; @injectivelabs/sdk-ts 1.20.21

* StepSecurity — jscrambler malicious preinstall binary: https://www.stepsecurity.io/blog/jscrambler-npm-package-publishes-malicious-preinstall-binary

* Socket — jscrambler supply chain attack: https://socket.dev/blog/jscrambler-supply-chain-attack

* The Hacker News — compromised jscrambler release: https://thehackernews.com/2026/07/compromised-jscrambler-8140-npm-release.html

* The Hacker News — Injective Labs GitHub compromise: https://thehackernews.com/2026/07/injective-labs-github-compromise-pushes.html

* The Hacker News — npm 12 disables install scripts by default: https://thehackernews.com/2026/07/npm-12-disables-install-scripts-by.html

Honourable mentions

* Wiz — GhostApproval: https://www.wiz.io/blog/ghostapproval-a-trust-boundary-gap-in-ai-coding-assistants

* Noma Security — GitLost: https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/

* The Hacker News — GitLost: https://thehackernews.com/2026/07/public-github-issue-could-trick-github.html

* BleepingComputer — Ghostcommit: https://www.bleepingcomputer.com/news/security/ghostcommit-hides-prompt-injection-in-images-to-fool-ai-agents-steal-secrets/

* Adobe — ColdFusion security bulletin (CVE-2026-48282): https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html

* BleepingComputer — ColdFusion flaw exploited in attacks: https://www.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/

* Google Cloud / Mandiant — recovering ADFS signing keys: https://cloud.google.com/blog/topics/threat-intelligence/recovering-active-adfs-signing-keys-machine-dpapi/

The Defensive Line Weekly — Episode 25 (28 June – 5 July 2026). A new CitrixBleed exploited in 24 hours; FortiBleed theft turns to ransomware; device-code phishing goes pro; AI runs ransomware end-to-end.

🤖 Voices are AI-generated. Story curation and analysis is human.

A new CitrixBleed (CVE-2026-8451)

* Citrix Security Bulletin CTX696604 — fixed builds

* watchTowr Labs — CitrixBleed to Infinity and Beyond: technical analysis

* Field Effect — Citrix NetScaler memory disclosure: patch guidance

* SecurityWeek — New CitrixBleed vulnerability exploited immediately after public disclosure

FortiBleed → INC Ransom and Lynx ransomware

* SOCRadar — FortiBleed: INC / Lynx ransomware link

* Dark Reading — FortiBleed actors tied to INC and Lynx ransomware gangs

* SecurityWeek — FortiBleed campaign linked to INC, Lynx ransomware attacks

* BleepingComputer — FortiBleed credential theft campaign linked to Lynx ransomware

ARToken — device-code phishing as a service

* Cisco Talos — ARToken: inside an EvilTokens affiliate panel targeting Microsoft 365

* Sekoia — EvilTokens: AI-augmented phishing-as-a-service for automating BEC fraud

* Microsoft — AI-enabled device-code phishing campaign (April 2026)

* Microsoft Learn — Conditional Access: block authentication flows (device code)

JADEPUFFER — AI-agent-run ransomware

* Sysdig — JADEPUFFER: agentic ransomware for automated database extortion

* BleepingComputer — JADEPUFFER ransomware used AI agent to automate entire attack

* SecurityWeek — Agentic AI used to conduct ransomware attack via Langflow

Honourable mentions

* Socket — PolinRider: North Korea-linked supply chain campaign expands

* OpenSourceMalware — PolinRider rides again: North Korean attack expands across GitHub

* The Hacker News — North Korean hackers publish 108 malicious packages

* The Hacker News — New ChocoPoC RAT targets vulnerability researchers

Vulnerabilities

* MSRC — CVE-2026-45659: Microsoft SharePoint RCE

* The Hacker News — SharePoint RCE CVE-2026-45659 added to KEV

* Cisco — Unified Communications Manager security advisory

* SecurityWeek — Cisco confirms in-the-wild exploitation of Unified CM vulnerability

Subscribe

* This week’s written edition — The Defensive Line Weekly #28