Here is your briefing for Monday, August 24, 2026. Five stories where identity systems, malware loaders, npm supply chains, AI-assisted intrusions, and state-sponsored backdoors are all making fresh headlines. Red Hat patched a high-severity flaw in Keycloak that lets unauthenticated attackers force password resets on any account. CVE-2026-18963 scores 9.1 and stems from improper state validation during the reset-cred flow. Upstream users should jump to 26.7.2
Kindle: https://www.amazon.com/dp/B0HHMH88H9
Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472
Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764
