Issue 08 · August 24, 2026
Identity Is the Perimeter Now
A CVSS 10.0 unauthenticated RCE in Microsoft Entra ID, fixed server-side but briefly mistagged as exploited. CISA, FBI, and HHS updated their Medusa ransomware advisory to 500+ confirmed critical infrastructure victims, running almost entirely on PowerShell, Mimikatz, and legitimate remote-access tools. A mass Azure credential-theft campaign hit McDonald's and Vodafone, tracing back to the same helpdesk-impersonation playbook Scattered Spider has run all year. And nation-state activity kept diverging: Russia surging 30%, China going quieter and more targeted.