04-Aug-2026 Microsoft SharePoint, Brown Health and SonicWall Attacks Raise Alarm

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and business decision-makers. Today’s briefing covers five developments with direct implications for enterprise risk, resilience, and response. 1. A Swiss IT agency suffered a targeted intrusion affecting around 200 user accounts, with investigators examining possible Microsoft SharePoint vulnerabilities. The incident highlights how weaknesses in collaboration platforms and stolen credentials can enable identity theft and deeper access into government and business networks. 2. Brown Health Medical Group-MA says a December 2025 incident may have exposed protected information belonging to approximately 312,000 people, including personal, financial, employment, and health-related data. Although its electronic medical record system was not affected, the breach demonstrates the lasting exposure created by legacy file servers and the need for stronger identity protection. 3. Researchers warn that email AI assistants could be manipulated through crafted messages to perform unsafe actions or disclose sensitive information. As organizations adopt tools that read and act on email, these systems may create a new pathway to account takeover and business email compromise. 4. INC Ransomware is exploiting vulnerabilities in SonicWall SMA 1000 appliances across multiple countries, with both flaws listed as known exploited by U.S. authorities. The group is also using calls and emails to pressure victims, underscoring the immediate risk of unpatched remote-access systems and increasingly coordinated extortion. 5. Researchers uncovered a WhatsApp scam abusing linked devices to hijack accounts and preserve access even after recovery. Attackers can monitor messages, impersonate users, and target contacts, making device reviews and authentication checks essential across personal and business environments. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.