---
title: "Security digest: August 26, 2025"
url: https://erroneo.us/security/2025-08-26/
description: "August 26, 2025 vulnerability digest: 2 briefs (s1ngularity, Salesloft Drift breach); 1 CISA KEV addition (Citrix). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2025-08-26
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: August 26, 2025

2 editorial briefs and 1 known exploited (cisa kev) addition.

## Take stock

- Check exposure: s1ngularity . Anyone on Linux or macOS who installed an affected nx or @nx version, or ran Nx Console 18.6.30-18.65.1, between Aug 26 22:32 and Aug 27 02:44 UTC, 2025, and anyone who found an s1ngularity-repository in their GitHub account.
- Check exposure: Salesloft Drift breach . Organizations that connected Salesloft Drift to Salesforce, Google Workspace or other systems before September 2025, and anyone who pasted credentials into Salesforce support cases or records.
- Do you run any of these? Citrix NetScaler. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-08-28.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Nx s1ngularity: Malicious npm Releases Hijack AI CLIs](https://erroneo.us/security/briefs/nx-s1ngularity-malicious-npm-releases/index.md): The packages were live for about four hours in August 2025, but anything they stole (GitHub and npm tokens, SSH keys, .env files, wallets) stays useful until rotated, so confirm you were not hit rather than assume.
- **Check exposure** [Salesloft Drift OAuth Token Theft Hits Salesforce Orgs](https://erroneo.us/security/briefs/salesloft-drift-oauth-salesforce-data-theft/index.md): Contained since September 2025, but if your org ever connected Drift, verify that every token and every secret sitting in your CRM or support cases was rotated, because the theft was aimed at exactly those secrets.

## Known exploited (CISA KEV)

- [CVE-2025-7775](https://erroneo.us/security/cve/CVE-2025-7775/index.md) Citrix NetScaler: Citrix NetScaler Memory Overflow Vulnerability (CISA due 2025-08-28)

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2025-08-26/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt