Weekly Digest — Issue #32

Welcome to Issue #32 of the CosmicBytez Labs Weekly Digest — your curated rundown of what mattered in cybersecurity this week.

Enterprise identity and middleware took the brunt of the damage this week. CISA added a maximum-severity, unauthenticated Oracle WebLogic and HTTP Server flaw to its Known Exploited Vulnerabilities catalog, and a separate critical bug in Keycloak — CVSS 9.1 — let unauthenticated attackers reset any account's password, admins included. Both are the kind of infrastructure-layer bugs that don't need a phishing click to cause damage.

On the software supply chain side, a TOCTOU race in isolated-vm — the library nearly a million Node.js projects use to sandbox untrusted JavaScript, including a growing number of AI agent frameworks — allows full host RCE from inside the "secure" sandbox. Separately, threat actors are hosting fake Cloudflare CAPTCHA phishing pages on trusted npm CDN mirrors like unpkg.com and jsdelivr.net, turning high-reputation infrastructure into a filter-bypass tool.

The US Treasury sanctioned nearly 60 Iran-linked entities under "Operation Economic Outcast," naming MOIS-affiliated hackers tied to energy, defense, and healthcare intrusions. And the breach disclosures kept coming: LACMA revealed a 2025 breach exposing SSNs and medical data only now, hospital operator Nutex Health confirmed data theft, and a South Korean government-backed startup platform leaked personal data after embedding an encryption key directly in an API response.

The throughline: attackers are hitting identity and sandbox trust boundaries directly, and breach disclosure timelines keep stretching well past the incidents themselves.

Top Stories

CISA: Oracle WebLogic Flaw Under Active Exploitation, No Authentication Required

Read full article →

CISA added a maximum-severity Oracle HTTP Server and WebLogic Server vulnerability to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. The flaw lets unauthenticated remote attackers access and potentially exfiltrate critical data from affected instances — no credentials, no user interaction, and no social engineering step required. Oracle middleware is a long-running favorite of ransomware crews and state-sponsored actors alike, and any externally reachable instance should be treated as under active scanning right now.

What to do: Apply Oracle's latest Critical Patch Update immediately. Pull WebLogic admin consoles and listener ports (7001/7002/9002) off the public internet, and review access logs for anomalous unauthenticated requests.

Critical Keycloak Bug Lets Attackers Reset Any Account's Password — Including Admins

Read full article →

CVE-2026-18963 (CVSS 9.1) is a state-validation error in Keycloak's password reset flow that lets an unauthenticated attacker bypass email verification entirely and take over any account, up to and including administrators. Keycloak underpins SSO, OAuth 2.0, and OIDC for a huge swath of enterprise identity stacks, so a full account-takeover primitive here has broad blast radius wherever it's internet-facing.

What to do: Patch to 26.7.2 now. Audit recent password-reset activity for accounts you didn't expect to see reset, and force session invalidation post-patch.

Critical isolated-vm Sandbox Escape Threatens AI Agent Infrastructure

Read full article →

Researchers disclosed a TOCTOU type-confusion bug (GHSA-864f-rcv7-6rh4) in isolated-vm, the dominant Node.js library for sandboxing untrusted JavaScript in V8 isolates — nearly 1 million weekly npm downloads. An attacker-controlled getter fired between validation and transfer in ExternalCopy corrupts host memory, giving code inside the "sandbox" a path to arbitrary code execution on the host. The exposure is acute for AI agent frameworks that use isolated-vm to run LLM-generated code: a crafted prompt could turn an agent into an unintentional RCE backdoor on the server running it.

What to do: Update to 7.0.1 or 6.2.0 immediately. Treat isolated-vm as one layer, not the trust boundary — pair it with container or microVM-level isolation.

US Sanctions Nearly 60 Iran-Linked Entities Over Critical Infrastructure Breaches

Read full article →

Treasury's "Operation Economic Outcast" sanctioned close to 60 Iran-linked entities, individuals, and vessels, naming hackers affiliated with Iran's MOIS and the Tehran-based Mabna Institute. Six individuals were indicted for intrusions spanning energy, defense, healthcare, IT, and financial targets, plus US government offices — with TRM Labs tracing roughly $16.8 million across 30 linked cryptocurrency wallets. Rewards for Justice is offering up to $10 million for further information on state-directed critical infrastructure attacks.

What to do: Review CISA/FBI joint advisories on MOIS-affiliated TTPs, tighten privileged access in energy/defense/healthcare environments, and scrutinize third-party and contractor credential access.

LACMA Discloses 2025 Breach Exposing SSNs and Medical Data — a Year Later

Read full article →

The Los Angeles County Museum of Art disclosed a breach that occurred in 2025, only now revealing exposed Social Security numbers, medical records, and financial data for employees and members of the public. The gap between incident and disclosure raises questions under California's breach notification law, which requires notice "without unreasonable delay." It's a pattern echoed elsewhere this week — hospital operator Nutex Health confirmed separate data theft with scope still under investigation.

Affected? Freeze credit at all three bureaus, watch insurance Explanation of Benefits statements for fraudulent claims, and consider an IRS Identity Protection PIN given the SSN exposure.

Security Corner

Notable advisories published this week:

• CVE-2026-8445 — Critical. justhtml (Python) Markdown-conversion XSS — to_markdown() leaves angle brackets unescaped in versions ≤1.11.0, letting raw HTML reach downstream renderers. Update immediately if you consume justhtml output in any web-facing context.

• CVE-2026-18438 — High (CVSS 8.8). Templately WordPress plugin RCE — a filename validation bypass in file upload lets authenticated subscribers execute arbitrary code on sites running ≤3.7.1.

• CVE-2026-0551 — PHP object injection in PPWP – Password Protect Pages (≤1.9.18) allows contributor-level deserialization abuse leading to RCE.

• CVE-2026-16149 — High. Security Hardener WordPress plugin (≤2.4.4) overwrites REST endpoint permissions via the rest_endpoints filter, bypassing every registered authorization callback.

• CVE-2026-72824, CVE-2026-72822, CVE-2026-72811 — Additional advisories from this week's release cycle. Review for scope and remediation.

• CVE-2026-15142, CVE-2024-13784 — Older-CVE-ID advisories published or updated this week; check applicability against your stack.

Browse the full Security Advisories archive for all active CVEs.

Quick Takes

• npm mirrors weaponized for phishing — Attackers are publishing malicious HTML packages to npm that impersonate Cloudflare CAPTCHAs, served from trusted CDN mirrors like unpkg.com and jsdelivr.net to slip past URL filters (read more).

• WhatsApp adds multi-passkey support — Meta now lets WhatsApp users register passkeys on multiple devices across iOS and Android, closing the gap that forced SMS OTP fallback for cross-platform users (read more).

• 58 arrested in global cybercrime sweep — A 22-country operation coordinated with Interpol identified 263 suspects and arrested 58 tied to Africa-connected BEC and fraud networks (read more).

• Nutex Health confirms data theft — The hospital operator says an unauthorized third party exfiltrated data from its servers; scope of the breach is still under investigation (read more).

• ReliaQuest blocks ShinyHunters social-engineering attempt — ReliaQuest disclosed and successfully detected an attack where ShinyHunters impersonated an employee to attempt data theft — a rare "it worked" story worth studying for the defensive playbook (read more).

• TikTok's $400M COPPA settlement — DOJ and TikTok/ByteDance settled over children's privacy violations for $400 million, the largest COPPA fine on record (read more).

• Money mule arrested in $7.5M elder fraud case — A Jersey City resident faces federal charges for laundering proceeds from an overseas scam network that stole $7.5 million from elderly New York victims (read more).

• WordlistLoader and SynkLoader emerge — Two new malware loaders are delivering ransomware-enabling payloads and harvesting Windows credentials via ClickFix-style phishing lures (read more).

• South Korean startup platform breach via hardcoded key — A government-backed startup platform leaked encrypted personal data after an encryption key was embedded directly in an API response — a textbook key-management failure (read more).

Upcoming

Next issue (Issue #33): Watch for the scope of the Nutex Health and LACMA breaches to firm up as their investigations conclude, and expect follow-on advisories as more organizations audit for the isolated-vm sandbox-escape pattern in their AI tooling. We'll also be tracking patch adoption on the Oracle WebLogic and Keycloak flaws given both are now confirmed or trivially exploitable at scale.

On the Labs: Fresh advisories are landing daily in the Security archive, and the howto library continues to grow with practical hardening guides — this week's headlines make a strong case for a WebLogic exposure audit and an isolated-vm dependency check across your Node.js estate.

Stay sharp. Two of this week's biggest stories — WebLogic and Keycloak — need zero user interaction to exploit. When the vulnerability lives in infrastructure rather than in a phishing click, patch cadence is the only control that matters.

Issue #32 — August 25, 2026. Published weekly by CosmicBytez Labs. To receive this digest by email, subscribe here.