Cyber Security News for August 5 2026 - Daily DefSec Brief

Daily DefSec Brief · Aug 5, 2026 · 5m · transcript

1. Langflow unauthenticated RCE now on CISA KEV — CVE-2026-9198 — SecurityWeek — https://www.securityweek.com/cisa-warns-of-exploited-langflow-n-central-and-tomcat-vulnerabilities/ 2. Apache Tomcat EncryptInterceptor bypass added to KEV — CVE-2026-34486 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 3. ChainDrop npm worm self-propagates across hundreds of packages — Microsoft — https://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm/ 4. N-able N-central auth bypass on KEV, 3-day fed clock —…