Morning Brief — 2026-08-18

1 material breach disclosures, 1 federal patching priority, 4 exploit probability movers, 10 emerging critical cves, 10 supply chain, 37 ransomware activity, 558 ioc volume, 13 active malware families, 25 multi-source iocs, 1 cross-reference, 4 intel feeds, 12 hand-authored sigma, and 17 detection gaps. Sections with no signal are still rendered with an explicit “none in this window” note so absence is visible alongside presence.

Material Breach Disclosures

Alto Ingredients, Inc. (ALTO)

• Filed: 2026-08-07 · CIK 0000778164 · Accession 0001213900-26-086750
• Filing: https://www.sec.gov/Archives/edgar/data/778164/000121390026086750/ea030067001ex10-1.htm

any governmental authority or affected individuals regarding any such incident. There has been no such Breach, and the Company has not been notified of and has no knowledge of any event or condition that would reasonably be expected to result in, any such Breach, except in each case as would not reasonably be expected, individually or in the aggregate, to result in a Material Adverse Effect.

(…

Federal Patching Priority

CVE-2025-62593 — Ray-Project Ray

Ray-Project Ray Code Injection Vulnerability

• Added: 2026-08-17 · Federal due: 2026-08-20 · EPSS 29.9th pct (score 0.004) · CVSS 8.8 (HIGH) · CWE-94, CWE-352
• ransomware use: Unknown

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string “Mozilla” as a defense mechanism. This defense is…

Exploit Probability Movers

Emerging Critical CVEs

• CVE-2026-74843 · CRITICAL (10.0) · 2026-08-17 — A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrace.cgi of the component Export Pingortrac…
• CVE-2026-65974 · CRITICAL (9.9) · 2026-08-17 — ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe safe execution because frappe.render_template is e…
• CVE-2026-47686 · CRITICAL (9.9) · 2026-08-17 — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and AggregateError.errors but does not sanitize Error.…
• CVE-2026-66792 · CRITICAL (9.9) · 2026-08-17 — A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to escalate their privileges by creating a Subscription with specific, crafted annotations. Succe…
• CVE-2026-15748 · CRITICAL (9.8) · 2026-08-18 — The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handle_file_upload function. This is due to insufficient file type validation in handl…
• CVE-2026-75110 · CRITICAL (9.8) · 2026-08-17 — MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the i…
• CVE-2026-47698 · CRITICAL (9.8) · 2026-08-17 — vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call around dangerous host prototype getter and setter mu…
• CVE-2026-50768 · CRITICAL (9.8) · 2026-08-17 — File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.
• CVE-2026-74901 · CRITICAL (9.8) · 2026-08-17 — openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transi…
• CVE-2026-74900 · CRITICAL (9.8) · 2026-08-17 — openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the…

Supply Chain

GHSA-gqch-g4w5-7qcw · CVE-2026-69148 (npm)

• HIGH · CVSS 7.1 · 2026-08-17
• Affected: mlflow
• https://github.com/advisories/GHSA-gqch-g4w5-7qcw

MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id

GHSA-7gwp-5pfp-969j · CVE-2026-64849 (pip)

• CRITICAL · CVSS 9.3 · 2026-08-17
• Affected: mlflow
• https://github.com/advisories/GHSA-7gwp-5pfp-969j

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

GHSA-8g4w-4ffg-8vgx · CVE-2026-56677 (npm)

• HIGH · CVSS 8.6 · 2026-08-17
• Affected: 9router
• https://github.com/advisories/GHSA-8g4w-4ffg-8vgx

9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint

GHSA-p28p-j94q-pg32 · CVE-2026-54148 (maven)

• HIGH · CVSS 8.1 · 2026-08-17
• Affected: org.http4k:http4k-security-digest, org.http4k:http4k-security-digest, org.http4k:http4k-security-digest
• https://github.com/advisories/GHSA-p28p-j94q-pg32

http4k: DigestAuthProvider.verify did not bind to request URI

GHSA-gc95-3vw8-vg43 · CVE-2026-53752 (maven)

• HIGH · CVSS 7.5 · 2026-08-17
• Affected: org.docx4j:docx4j-core
• https://github.com/advisories/GHSA-gc95-3vw8-vg43

docx4j: Stack Overflow via Cyclic w:basedOn Style Chain leads to Denial of Service

GHSA-g4w2-6h2r-3m3w · CVE-2026-53659 (maven)

• HIGH · CVSS 7.5 · 2026-08-17
• Affected: org.http4k:http4k-core, org.http4k:http4k-core, org.http4k:http4k-core
• https://github.com/advisories/GHSA-g4w2-6h2r-3m3w

http4k: Unbounded gzip decompression in ServerFilters.GZip / RequestFilters.GunZip allowed memory-exhaustion DoS

GHSA-j659-8xh6-5pq5 (pip)

• HIGH · 2026-08-17
• Affected: atomic-agents-stack
• https://github.com/advisories/GHSA-j659-8xh6-5pq5

atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

GHSA-xhcr-cqfr-m3hv (pip)

• HIGH · 2026-08-17
• Affected: atomic-agents-stack
• https://github.com/advisories/GHSA-xhcr-cqfr-m3hv

atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)

GHSA-2qj4-mmr9-4v2f · CVE-2026-59902 (maven)

• HIGH · CVSS 7.5 · 2026-08-17
• Affected: io.netty:netty-transport-sctp, io.netty:netty-transport-sctp
• https://github.com/advisories/GHSA-2qj4-mmr9-4v2f

Netty: Memory Exhaustion in SctpMessageCompletionHandler

GHSA-fhgh-wq4q-r37x (go)

• HIGH · CVSS 7.8 · 2026-08-17
• Affected: gitlab.com/uniget-org/cli
• https://github.com/advisories/GHSA-fhgh-wq4q-r37x

uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set

Ransomware Activity

37 new victim postings across 16 groups.

IOC Volume

558 new IOCs in this window. By source:

Recent OSINT Events

No curated MISP events in this window (bulk-IOC contributions tallied in IOC Volume).

Active Malware Families

13 malware families active this week (0 corroborated across ≥2 sources), exercising 19 ATT&CK techniques. Family is the unit, not the indicator: the raw IOCs are drill-down evidence below, not the signal.

Families marked ”→” are delivery/social-engineering clusters (ClickFix, GuLoader). Their technique mappings are the delivery chain — downstream behavior is payload-dependent, so they don’t open a hard coverage gap on their own.

Multi-Source IOCs

25 IOCs flagged by 2+ independent sources this window — the highest-confidence signal the cross-feed corpus produces.

MISP × KEV Correlation

No MISP events in this window referenced a CVE.

Cross-Reference

Alto Ingredients, Inc. (filed 2026-08-07)

Token match on alto against KEV vendor/product strings. This is a heuristic — verify before treating as attribution.

• CVE-2026-0257 — Palo Alto Networks PAN-OS (added 2026-05-29)

Intel Feeds

4 IOC feeds updated this run (8,867 indicators total) — each available as CSV, MISP JSON, and STIX 2.1. Subscribe at https://thrunt.me/intel/manifest.json.

Hand-Authored Sigma

10 production-ready TTP rules (+2 scaffolds in the authoring queue) live at https://thrunt.me/sigma/manifest.json. Subscribe via https://thrunt.me/sigma/rules.lock.json (content-hash churn) or pull all with https://thrunt.me/sigma/rules.tar.gz.

Detection Gaps

17 of 157 techniques with corpus signal have zero detection coverage — no SigmaHQ community rule, no thrunt rule. This is the hand-authoring queue; the live view is at https://thrunt.me/corpus/attck/.

…and 7 more below the cut — full list on the rollup.

Pipeline Health

All feeds healthy.

Sources: SEC EDGAR (public domain), CISA Known Exploited Vulnerabilities (public domain), FIRST.org EPSS (per ToS), NIST NVD (public domain), GitHub Security Advisories (per ToS), abuse.ch URLhaus (CC0, attribution), ransomware.live (per ToS), MITRE ATT&CK (CC BY 4.0).

Published by Applied Cybernetics Group via thrunt.me. Heuristic cross-references are labelled as such; verify before action.