Threat Landscape Briefing – August 2026

In this month’s briefing we explore:

• OpenAI’s Accidental Attack Demo – Seva Ioussoufovitch (01:46)
  • Hugging Face recently disclosed an incident involving an intrusion into their production infrastructure executed end-to-end by an autonomous AI agent.
  • Discover how Info-Tech can help you Reinvent Zero Trust for the Agentic Era
• Supply Chain Worm SANDWORM_MODE Poisons AI Developer Toolchains – Kate Wood (13:30)
  • CrowdStrike recently published details on SANDWORM_MODE, an npm supply chain worm that Socket’s Threat Research Team first documented in February 2026.
  • Learn how Info-Tech’s research can help you Develop a Strategic Plan for Intelligent Application Security.
• npm Attacks Are Timing Around Your Defenses – Jon Nelson (21:00)
  • A recent software supply chain attack demonstrates that attackers can bypass traditional scanning and code provenance checks by abusing trusted build pipelines and delaying malicious code execution until software is built or run in CI/CD environments.
  • Explore Info-Tech’s guidance on how to Build a Vendor Security Assessment Service.
• Users of Password Managers Targeted With Phishing Attack – Ahmad Jowhar (28:12)
  • The phishing campaign targeting LastPass and Bitwarden users underscored the growing use of trusted security brands as a vehicle for credential theft.
  • Learn more about Info-Tech’s approach on how to Develop a Comprehensive IAM Improvement Strategy