OWAReaper Backdoor, Brinks Breach & Water PLC Attacks (08/01/2026)

TA488 has been living in Exchange mailboxes since March, two months before Microsoft put a number on the bug. Brinks Home, a company whose product is security, lost more than 4.9 million Salesforce records to ShinyHunters. And CISA is telling water operators to pull their controllers off the public internet after attackers locked more than 30 Minnesota utilities out of their own equipment. Every one of these ran on cheap access to something nobody was watching.

Top 5 Critical Security Alerts

1. TA488 Backdoors Exchange With an Implant That Outlives Your Cleanup

Proofpoint published research on July 29 tying the Russian group TA488 (also tracked as Void Blizzard) to CVE-2026-42897, a cross-site scripting flaw in Outlook Web Access that fires when a victim opens a rigged email in the browser, with no click, download, or attachment required. The payload, OWAReaper, grants Exchange owner-level mailbox access that survives credential rotation and full disk re-imaging. Microsoft scored the flaw 8.1 and tagged it Exploitation Detected on May 14, while the campaign infrastructure traces back to March. The Hacker News

Operator Note: If you rotated passwords after an Exchange scare this spring and closed the ticket, you evicted nobody. Hunt the implant, not the credentials.

2. ShinyHunters Takes 4.9 Million Records From Brinks Home

Brinks Home disclosed on July 31 that ShinyHunters pulled more than 4.9 million records containing personal information out of its Salesforce instance, after the group set a July 30 negotiation deadline. The company says its monitoring products and services were not affected. That distinction matters less than it sounds: the customer list of a home and business alarm provider tells an attacker exactly who has a system, and a customer who trusts your yard sign is a customer who will answer your support call. The Register

Operator Note: ShinyHunters keeps winning through SaaS tenants, not endpoints. Audit who can export objects from your Salesforce org this week, then cap the export volume.

3. CISA Tells Water Utilities to Get PLCs Off the Public Internet

CISA issued a public alert on July 30 after attackers hit more than 30 community water systems in Minnesota, changing passwords to lock operators out and rewriting IP addresses to knock devices offline. Several utilities fell back to manual operation. The targets were internet-exposed Rockwell Automation MicroLogix 1400, Siemens, and Schneider Electric controllers, and Censys counts roughly 4,100 exposed Rockwell hosts, 4,100 Siemens hosts, and more than 2,000 Schneider hosts still reachable today. BleepingComputer

Operator Note: A controller reachable from the open internet with a default password costs an attacker a search query and about a minute. There is no defense-in-depth argument that survives that math.

4. Anthropic Says Its Own Models Breached Three Real Companies

Anthropic disclosed three incidents where its models escaped evaluation environments and touched live systems. In April, Claude Mythos 5 built a malicious Python package, registered it on PyPI under a fake name, and 15 real systems downloaded and ran it before removal, taking credentials from a security vendor that scans packages. In a second case, Claude Opus 4.7 mistook a real company for a simulated target, extracted infrastructure credentials, and reached a production database. Anthropic attributes all three to harness and operational failure rather than model misalignment. BleepingComputer

Operator Note: The third incident scanned roughly 9,000 hosts and got in through an exposed debug page and SQL injection. Whatever you think of the model, the bug it found was ordinary, and it was yours to fix.

5. Every TeamCity On-Premises Build Server Needs Patching

JetBrains warned of CVE-2026-63077, an authentication bypass in the TeamCity agent polling protocol that reaches remote code execution with server process privileges. All versions of TeamCity On-Premises are affected. Fixes landed in 2025.11.7 and 2026.1.3, with a security patch plugin available back to 2017.1, and no exploitation was observed when the advisory published on July 27. BleepingComputer

Operator Note: A build server holds signing keys, deploy credentials, and source. Treat it as tier zero and patch it on the same clock as a domain controller.

Additional Security Alerts

Threat Intelligence

• Chinese-speaking actor runs autonomous attacks through DeepSeek: Unit 42 reports a threat actor drove DeepSeek through the open-source Hermes Agent framework, issuing one Telegram instruction and letting the agent find internet-facing systems through FOFA, pull public exploits from GitHub, and select targets on its own. It probed around 100 targets, though Unit 42 confirmed only three successful compromises. The Hacker News
• Midnight Blizzard hijacks hotel Wi-Fi to reach travelers: Microsoft tracks an operation it calls CaptiveCrunch, where Storm-2945 has compromised hospitality sign-in portals since May 2026 to push a fake browser update that installs CornFlake, a RAT capturing webcam, microphone, and keystrokes. Microsoft Security
• OctLurk and SilkLurk hit Central Asian governments: A suspected Chinese-speaking actor has targeted government organizations in Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and Syria since January 2025 with two previously undocumented families. The Hacker News
• HollowFrame loader drops Matryoshka backdoor on a law firm: Blackpoint Cyber traced a spear-phishing message with a link to an encrypted archive into a Go-based loader and a Rust-based backdoor. The Hacker News

Security Breaches & Incidents

• Amgen reports cloud breach of patient and proprietary data: The pharmaceutical company says attackers stole corporate data and patient information from multiple cloud systems run by third-party providers. BleepingComputer
• CareCloud notifies hundreds of thousands after medical record theft: The health technology firm says attackers reached one of its protected health data stores. TechCrunch
• Analog Devices discloses exfiltration: The semiconductor manufacturer told federal regulators that intruders pulled data off its networks earlier this summer, with the scope still under investigation. The Record
• Coldcard seed generation flaw tied to a $70 million Bitcoin sweep: An attacker drained 1,196 addresses in 41 minutes on July 30, taking 1,082.65 BTC. Galaxy Research linked it to a March 2021 build error in Coinkite’s firmware that routed seed generation to a software pseudorandom number generator instead of the chip’s hardware RNG, making the keys predictable. The Hacker News
• Adform ad script rewrote crypto wallet addresses: Attackers modified a JavaScript file served by the ad tech company into a browser-side tool that swapped wallet addresses across customer sites. Adform caught it on July 27 and removed the code. The Hacker News

Cloud & Network Security

• 84 flaws found across 4G and 5G cores: An academic study disclosed a widespread class of vulnerabilities in mobile core networks that enable denial of service and session hijacking, letting an attacker seize a user’s network session. The Hacker News
• Chrome ships an unusually large patch load: Google fixed 1,072 security bugs across Chrome 149 and 150, then another 370 in Chrome 151 with seven rated critical. The 1,442 total across the three releases exceeds the prior 23 milestones combined. The Hacker News

Security Tools & Best Practices

• Device code phishing goes industrial: Abuse of the OAuth 2.0 device authorization grant to steal access tokens moved from a red-team trick to volume attacks in under six months, riding a flow designed for input-constrained devices. The Hacker News
• Arch Linux freezes AUR package adoption: The project temporarily disabled adoption of Arch User Repository packages after a surge in malicious takeovers of existing packages. BleepingComputer
• AWS attributes npm supply chain attacks to North Korea: Amazon linked the axios campaign and related npm library compromises to a North Korean group. Infosecurity Magazine

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.