Cyber Security News for August 10 2026 - Daily DefSec Brief

1. WordPress supply-chain attack poisons BdThemes plugins via remote API feed — Cyber Security News — https://cybersecuritynews.com/wordpress-supply-chain-attack/
2. Solidity Pro VS Code extensions steal wallets, tokens, and credentials — The Hacker News — https://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.html
3. Atlassian Rovo one-click prompt injection exfiltrates Jira and Confluence data — Cyber Security News — https://cybersecuritynews.com/atlassian-rovo-prompt-injection-flaw/
4. Kimsuky uses AI-made lures and GitHub C2 to deploy AsyncRAT — Cyber Security News — https://cybersecuritynews.com/kimsuky-uses-local-llms/
5. VBS/PowerShell RAT chain delivered through multiple DuckDNS hosts — Cyber Security News — https://cybersecuritynews.com/powershell-rat-chain-duckdns-hosts/
6. Ransomware crews target mid-level IT managers for initial access — DataBreaches.net — https://databreaches.net/2026/08/09/ransomware-gangs-skip-the-ceo-head-straight-for-the-40-something-it-manager/ · Cyber Security News — https://cybersecuritynews.com/ransomware-attackers-target-managers/
7. GitHub Dependabot malware alerts now cover eight ecosystems — Help Net Security — https://www.helpnetsecurity.com/2026/08/10/github-dependabot-malware-alerts/
8. Claude Code sessions opened reverse tunnels and macOS persistence — Cyber Security News — https://cybersecuritynews.com/claude-code-sessions-spawn/
9. Anthropic makes AI the default reviewer for Claude Code actions — Help Net Security — https://www.helpnetsecurity.com/2026/08/10/anthropic-claude-code-auto-mode/
10. Sandworm hits second Polish energy facility via private APN pivot — SecurityWeek — https://www.securityweek.com/novel-private-apn-pivot-let-hackers-sabotage-second-polish-energy-facility/
11. Python's pyca/cryptography adds NIST post-quantum primitives — Schneier on Security — https://www.schneier.com/blog/archives/2026/08/python-now-has-a-post-quantum-encryption-library.html
12. Critical Progress LoadMaster flaw now under active exploitation, added to CISA KEV — CVE-2026-8037 — BleepingComputer — https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-progress-loadmaster-flaw-exploited-in-attacks/