COGNOSCERE Daily Tech Review — Issue T210 · Monday, August 17, 2026

Or visit Intelligence Overview for deeper analysis.

ACT153GB of stolen credentials surface after LiteLLM supply chain attack

A 153GB archive of credentials stolen in the March 2026 LiteLLM supply-chain attack has surfaced, exposing cloud keys, API tokens, and CI/CD pipeline secrets from 2,488 corporate domains including NVIDIA, Microsoft, Cisco, and FedEx. Security researcher Kevin Beaumont independently confirmed that stolen keys from at least one major US tech firm remained valid months after the breach, despite claimed rotation.

Help Net Security · Cybersecurity / Supply Chain Security · Relevance: 1.0 · Source →

supply chain attack, credential theft, AI infrastructure, CI/CD, open source security, data breach, cloud security

ACTA stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months

Security firm Reco uncovered an ongoing 17-month campaign dubbed 'City-Forum' in which an unidentified actor has been silently extracting records from Salesforce and ServiceNow portals worldwide using guest-level access from a single persistent German-hosted server. Targets span telecom operators, banks, financial services firms, enterprise software vendors, and public-sector organizations.

Help Net Security · Cybersecurity / SaaS Security · Relevance: 0.9 · Source →

SaaS security, data exfiltration, guest access, enterprise portals, misconfiguration, persistent threat, CRM security

ACTAugust 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day

Microsoft's August 2026 Patch Tuesday addressed 421 CVEs, including an actively exploited privilege-escalation zero-day (CVE-2026-62832) in Windows User Profile Service that could grant attackers administrator access, and a CVSS 9.9 critical RCE flaw (CVE-2026-50515) in Azure Service Bus. Microsoft flagged the zero-day as publicly disclosed with likely imminent exploitation.

SecurityWeek · Vulnerability Management / Patch Management · Relevance: 0.9 · Source →

Patch Tuesday, zero-day, privilege escalation, RCE, Azure, Windows, vulnerability management

PREPAREAI Security Failures, Active Exploits, and Breaches Define the Week in August 2026

DEF CON 34 and Black Hat 2026 research spotlighted how AI systems—including agentic frameworks and AI-generated code—can expose sensitive data, compromise developer workflows, and accelerate exploit creation through vulnerable APIs. Concurrent incidents including the Cisco firewall unauthenticated RCE exploit (CVE-2026-20349) and actively exploited enterprise software vulnerabilities reinforced the convergence of AI deployment risk and traditional infrastructure security.

eSecurity Planet · Cybersecurity / AI Security · Relevance: 0.8 · Source →

AI security, agentic AI, DEF CON, Black Hat, exploit development, enterprise security, prompt injection, Cisco

PREPAREGoogle Cloud Sets Out Post-Quantum Cryptography Roadmap With 2029 Readiness Goal

Google Cloud published a detailed post-quantum cryptography migration roadmap targeting full readiness by 2029, with phased milestones: mitigating 'store-now-decrypt-later' risks across customer-facing workloads by end-2027, and hardening digital signatures, identity controls, and key management by end-2028. The roadmap, organized around Google's own Quantum Threat Model, covers Cloud VPN, BigQuery, Cloud KMS, Cloud IAM, and software supply chain attestations.

SecurityWeek · Cloud Security / Cryptography · Relevance: 0.8 · Source →

post-quantum cryptography, quantum computing, cloud security, cryptographic agility, Google Cloud, data protection, zero-trust

WATCHEnterprise Cloud Spending Hits $500 Billion Annually as AI Buildout Accelerates

Annual enterprise cloud spending reached $500 billion according to Synergy Research Group, driven primarily by AI infrastructure buildout, while a separate Google report found more than 4 in 5 organizations still need to upgrade their tech stacks to support AI agents at scale. The milestone signals a structural shift in cloud demand from general compute to AI-optimized infrastructure.

CIO Dive · Cloud Computing / AI Infrastructure · Relevance: 0.8 · Source →

cloud spending, AI infrastructure, enterprise cloud, data center, cloud computing, AI agents, IT investment

ACTEU AI Act High-Risk Obligations Now Fully Applicable as of August 2, 2026

The EU AI Act's high-risk AI system obligations—including transparency requirements, data governance controls, and human oversight mandates—became fully enforceable on August 2, 2026, making the EU the first jurisdiction with comprehensive binding AI regulation. The Digital Omnibus on AI Regulation, which entered into force July 27, simultaneously centralized enforcement authority under the EU AI Office and extended simplified compliance requirements to small mid-cap companies.

European Commission · AI Regulation & Governance · Relevance: 1.0 · Source →

EU AI Act, AI regulation, compliance, high-risk AI, GPAI, enterprise AI, governance, enforcement

PREPAREMicrosoft Begins to Merge Consumer and Enterprise Copilot Apps to Make New Super App

Microsoft has begun combining its consumer and Microsoft 365 enterprise Copilot apps into a single unified product ahead of a planned 'super app' launch later in 2026, with a worldwide mobile and web rollout beginning mid-August and Windows/Mac apps following in mid-September. Several consumer features including Podcasts, Group Chat, and Deep Research are being retired on August 18, with Microsoft pledging enterprise security and compliance controls will remain unchanged.

GeekWire · Enterprise AI Platforms / Productivity · Relevance: 0.9 · Source →

Microsoft Copilot, enterprise AI, super app, productivity, Microsoft 365, agentic AI, SaaS

WATCHOpenAI-backed Thrive Holdings raises $2B to bring AI to the enterprise

Thrive Holdings, an OpenAI-backed firm that acquires traditional businesses and rebuilds their operations around AI, raised $2 billion at a $12 billion valuation from SoftBank, D1 Capital Partners, and Altimeter Capital. The company operates over 70 businesses across accounting (Current) and IT services (Shield) and will use proceeds to expand into physical asset infrastructure verticals.

TechCrunch · Enterprise AI Adoption / AI Investment · Relevance: 0.9 · Source →

AI investment, enterprise AI, AI rollup, funding, accounting automation, IT services, OpenAI

WATCHSkan AI Raises $63M, Launches Enterprise AI Platform

Skan AI announced $63 million in Series C funding co-led by Cathay Innovation and Dell Technologies Capital, with participation from Citi Ventures, Bloomberg Beta, State Farm Ventures, and Wipro Ventures, alongside the general availability launch of its Skan AI Blueprint and Skan AI Agents platform. The company targets enterprises seeking to deploy agentic AI grounded in operational context, noting that Gartner finds only 8% of enterprises currently have AI agents in production.

HPCwire / AIwire · Enterprise AI Platforms / Agentic AI · Relevance: 0.8 · Source →

agentic AI, enterprise AI, funding, process intelligence, AI deployment, workflow automation

ACTMetabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

A CVSS 10.0 SQL injection zero-day (CVE-2026-72898) in the Metabase business intelligence platform was actively exploited on August 3, 2026, granting unauthenticated attackers full administrator access to connected databases; Framework, Tally, and Kilo Code confirmed breaches. CISA added the flaw to its Known Exploited Vulnerabilities catalog with a federal remediation deadline of August 14, and roughly 2,500 self-hosted instances remain internet-accessible.

The Hacker News · Analytics Platform Security · Relevance: 0.9 · Source →

zero-day, SQL injection, business intelligence, data breach, CISA KEV, analytics security, SaaS vulnerability

WATCHGartner Decision Intelligence Platform Rankings: IBM, FICO, and SAS Named Leaders in 2026

Gartner's 2026 Decision Intelligence Platforms research named IBM, FICO, and SAS as market leaders, with platforms evaluated on their ability to combine data, analytics, AI, and causal modeling to support, augment, and automate enterprise decision-making. SAS announced plans to expand explainability and auditability features through a new model governance framework and industry-specific AI agents.

Fintech News Switzerland · Decision Intelligence / Analytics Platforms · Relevance: 0.7 · Source →

decision intelligence, analytics platforms, Gartner, AI governance, enterprise software, risk management, automated decisioning