slugnet
Daily cybersecurity briefing

Top 10 Cybersecurity Stories for August 15, 2026

Immediate priority is the active exploitation of a maximum-severity RCE in SAP Commerce Cloud and an authentication bypass in macOS Screen Sharing. The broader threat landscape shows a shift toward identity-based cloud attacks via OAuth tokens and persistent IAM misconfigurations across enterprise environments.

Compiled by the Slugnet Editorial System. Published Aug 15, 2026, 8:40 AM EDT

Audio briefing

Listen to this edition

A spoken version of today’s prioritized cybersecurity briefing.

Subscribe to the podcast Download MP3
  1. 01
    BleepingComputer

    Max severity SAP Commerce Cloud flaw now targeted in attacks

    What happened

    Threat actors are actively exploiting a maximum-severity remote code execution vulnerability in SAP Commerce Cloud. This development follows the release of a patch three days ago for the flaw.

    Why it ranks #1

    Confirmed active exploitation of a critical RCE in enterprise infrastructure takes top priority over other vulnerabilities and breaches.

    Who should care

    Application security teams, IT and platform operations

    What to do

    Apply the SAP Commerce Cloud patch immediately.

    Impact
    high
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  2. 02
    BleepingComputer

    Hackers exploit macOS Screen Sharing flaw to deploy Monero miner

    What happened

    Hackers are exploiting a macOS authentication bypass vulnerability in Screen Sharing to deploy Monero miners. The Netherlands' National Cyber Security Centre issued the warning after public exploit code became available.

    Why it ranks #2

    Active exploitation of an authentication bypass with public exploit code represents immediate enterprise exposure, though slightly lower priority than SAP RCE due to target scope.

    Who should care

    IT and platform operations, SOC and incident response teams

    What to do

    Update macOS to the latest version to patch the Screen Sharing flaw.

    Impact
    high
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  3. 03
    Rapid7 Blog

    Metasploit Wrap Up: Lot of summer shells and fit http profiles

    What happened

    Metasploit has released thirteen new modules including remote code execution exploits for WordPress, Joomla, and the Fragnesia Linux kernel. The update also introduces new HTTP malleable profiles and multi-fetch payloads.

    Why it ranks #3

    The addition of multiple RCE modules to a primary exploitation framework provides immediate actionable intelligence for defenders and increases threat actor capability.

    Who should care

    Application security teams, SOC and incident response teams

    What to do

    Review the new Metasploit modules to ensure systems are patched against these specific vulnerabilities.

    Impact
    high
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  4. 04
    BleepingComputer

    Shell investigates 'potential incident' after Clop data theft claims

    What happened

    Oil company Shell is investigating a potential security incident following claims by the Clop ransomware group. The threat actors allege they have stolen 89 gigabytes of corporate data.

    Why it ranks #4

    A material breach claim involving a major global enterprise and a known high-impact ransomware group falls into tier three.

    Who should care

    CISOs and security leaders, SOC and incident response teams

    Impact
    high
    Urgency
    near-term
    Confidence
    medium
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  5. 05
    Dark Reading

    Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office

    What happened

    A Scottish government agency has reported a data breach originating from a third-party service provider. There are concerns that the compromise may extend to other agencies serviced by the same provider.

    Why it ranks #5

    This is a material supply-chain compromise affecting government entities, placing it in tier three.

    Who should care

    CISOs and security leaders, SOC and incident response teams

    Impact
    high
    Urgency
    near-term
    Confidence
    medium
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  6. 06
    SecurityWeek

    14,000 Trezor Customers Impacted by Data Breach at ShipMonk

    What happened

    A data breach at ShipMonk has exposed the shipping information of 14,000 Trezor customers. Stolen data includes names, addresses, email addresses, and phone numbers.

    Why it ranks #6

    Material breach involving customer PII via a supply-chain partner; lower priority than government or global enterprise breaches.

    Who should care

    Individual users, SOC and incident response teams

    Impact
    low
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  7. 07
    BleepingComputer

    The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI

    What happened

    Research indicates that Google Workspace attacks are increasingly utilizing stolen OAuth tokens rather than traditional phishing. This allows attackers to bypass initial defenses and gain direct access to Gmail and Drive.

    Why it ranks #7

    Substantial research on identity-based attack chains in widely used cloud infrastructure with clear operational consequences for defense.

    Who should care

    Cloud security teams, Identity and access teams

    What to do

    Implement stricter OAuth token monitoring and rotation policies for Google Workspace.

    Impact
    high
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  8. 08
    Help Net Security

    Weak IAM affects up to 98% of cloud environments

    What happened

    A report finds that weak identity and access management affects up to 98 percent of cloud environments. Common issues include unrotated keys, missing encryption, and public network access due to configuration errors.

    Why it ranks #8

    Broad defensive research on critical cloud infrastructure vulnerabilities with high operational significance for platform teams.

    Who should care

    Cloud security teams, Identity and access teams

    What to do

    Audit cloud IAM configurations against CISA baseline practices.

    Impact
    high
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  9. 09
    Dark Reading

    Cyera's Oasis Security Buy Is All About AI Agent Control

    What happened

    Cyera has acquired Oasis Security to create a unified control plane for AI agent security. The deal focuses on redefining privileged access based on business context rather than static roles.

    Why it ranks #9

    Significant development in the emerging field of AI agent and identity security, though it is more strategic than an immediate vulnerability.

    Who should care

    CISOs and security leaders, Identity and access teams

    Impact
    low
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email
  10. 10
    SecurityWeek

    Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

    What happened

    Google Cloud has released a roadmap to achieve full post-quantum cryptography readiness by 2029. The plan includes key milestones for implementation throughout 2027 and 2028.

    Why it ranks #10

    Long-term strategic security policy regarding cloud infrastructure; lowest priority due to the distant timeline of the risk.

    Who should care

    CISOs and security leaders, Cloud security teams

    Impact
    low
    Urgency
    near-term
    Confidence
    high
    Scope
    enterprise
    Status
    disclosed
    Read the original source Link to this ranking Share on Bluesky Share by email