Cyber Security News for August 7 2026 - Daily DefSec Brief
1. SOGo webmail XSS exploited in the wild via malicious calendar invites — CVE-2026-8496 — CERT/CC — https://kb.cert.org/vuls/id/487613 2. INTERRUPT INJECTION / TONTOU bypasses Spectre v2 fixes, leaks Linux password hashes — CVE-2023-20569 (ref.) — The Hacker News — https://thehackernews.com/2026/08/new-interrupt-injection-attack-can.html · BleepingComputer — https://www.bleepingcomputer.com/news/security/new-tontou-cpu-attack-bypasses-spectre-v2-fixes-leaks-linux-password-hashes/ 3. Microsoft M365 AitM phishing hijacks accounts to harvest payroll and finance email — The Hacker News —…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.