INTELLIGENCE BRIEFS

Critical CVE-2026-85706 Path Traversal in GitLab Enables Unauthenticated File Read

Anthropic Disrupts Industrial‑Scale Claude Distillation Attacks by Seven China‑Based AI Labs

Threat Actors Leverage Anthropic’s Claude to Automate Exploitation and Data Theft Across Multiple Victims

Russian State‑Sponsored Hackers Leverage Anthropic Claude to Auto‑Rebuild Malware After Detection

Hackers Leverage Anthropic’s Claude AI to Harvest Secrets from 1.8 M Android Apps and Compromise Hundreds of Organizations

Passkey‑Themed Phishing Attacks Harvest Microsoft 365 Credentials and Data

Critical Authentication‑Bypass Chain in JFrog Artifactory Enables Admin Token Theft and Rust Backdoor Deployment

Threat Actors Weaponize Shareable AI Content on Claude, ChatGPT, and Grok to Deliver Malware

Critical Path Traversal (CVE‑2026‑85706) in GitLab Repository Commits API Allows Unauthenticated File Read

Microsoft Teams and Outlook Fail to Launch on ARM Windows PCs After August 2026 Updates

Trezor Users Phished After Brevo Email‑Provider Breach Affects 347,000 Addresses

Conti Ransomware Gang Member Sentenced to 4 Years for Multi‑Nation Attacks

Florida DMV Data Breach Linked to Officer’s Stolen Credentials on Personal Device

AI‑Enhanced Business Email Compromise Campaign Sends Over 1 Million Fraudulent Invoice Emails

Russia‑linked Espionage Group Leveraged Anthropic’s Claude AI to Reverse‑Engineer Drone Systems and Evade Defenses

Ukrainian Hacker Sentenced to Four Years for Conti Ransomware Campaign Targeting 1,000+ Victims

CISA Adds Three Actively Exploited Vulnerabilities (CVE‑2026‑42016, CVE‑2026‑42018, CVE‑2026‑84869) to KEV Catalog

CISA Adds Exploited GitLab Path Traversal (CVE‑2026‑85706) to KEV Catalog

Four Threat Groups Leveraging a Shared Chrome & Windows Exploit Kit

Chinese State‑Aligned Groups Exploit Triple Zero‑Day Chain in Chrome, Chromium, and Windows to Gain System Privileges