July 2026

CISA Flags SharePoint CVE-2026-45659 in KEV Catalog

Phishing Now Fingerprints Devices to Deliver OS Specific Payloads

Fake 'Search for Perplexity AI' extension spied on user searches

Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs

How We Added WebAuthn to a Browser-Based RDP Client

PamStealer macOS malware hides in fake Maccy app to steal logins

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

Pegasus hits MEP Kouloglou via HomeKit zero click exploit

AI 'Jadepuffer' launches first autonomous ransomware

US Agency Pays $1M to Hackers After Data Theft Extortion

US Agency Pays $1 Million to Kairos Group on Data Theft Extortion

AdaptHealth says attackers sweet-talked their way into cloud systems and stole patient data

Medtronic Breach Hits 3.8M, Tied to ShinyHunters Hackers

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 104

US Agency Pays $1M to Extortion Group Kairos Amid Rising Threats

Navigate360 breach leaks 8.3m tips, raising student safety fears

'BusySnake' Infostealer Slithers into Critical Infrastructure Networks

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

Washington DSHS breach exposes 8,600 records after insider misuse

Mexican banking fraud gang uses SCMBANKER toolkit to steal data

GitHub launches public secret scanning for enterprise

Mexico's cybersecurity plan strained by upcoming World Cup 2026

Attacker Leverages AI to Breach AWS Cloud in 72 Hour Ransom Bid

Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746

INTERPOL's First Light 2026 nets 5,800 arrests, $293m seized

Patch for Windows Defender 0-day could allow attackers to fill hard disk

Iran hackers hit medical device maker via unpatched flaws

Gentlemen Ransomware Gang Hits 580 Victims, Targets Manufacturing

Zimbra patches critical XSS flaw after Google TAG discovery

Pro Iran hacktivists boost DDoS leak attacks amid US tensions

CISA Flags iCagenda, Balbooa Forms Flaws; Urges Fix by July 2026

Compromised jscrambler npm package spreads Rust infostealer

Hacker Groups Exploit Balochistan Police Portal in Espionage Bid

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

KR: Military targeted in nearly 19,000 cyberattack attempts in 2025: lawmaker

Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here’s What We Know.

Microsoft Warns ShinyHunters Abuse OAuth to Hit SaaS Firms

UK and EU sanction Russian hackers as NSA warns on router flaws

VPN service favored by ransomware groups is sanctioned by US

Microsoft patches 570 flaws, two zero days actively exploited

Unrevoked firmware shims expose Microsoft Secure Boot flaw

Patch Tuesday - July 2026

Runtime Security for Third-Party GitHub Actions Runners: Bitrise, Blacksmith, Depot, Namespace, and Warp

Harden Runner v2.20.0 adds egress block mode to stop secret leaks

Device Policy secures VS Code extensions with MDM and Terraform

ACR Stealer Uses ClickFix Lures to Steal Enterprise Credentials

AI speeds attacks, but phishing still leads, Unit 42 study finds

Agentic AI’s Data Access Sparks New Cybersecurity Mindset Shift

WordPress REST API flaw lets attackers run code remotely

EY breach reveals tax data via third party ticket system

WordPress wp2shell Flaw Lets Attackers Run Code Remotely

OpenSSL's HollowByte flaw lets tiny payload crash servers

DOJ lifts TikTok ban for federal staff after Oracle data deal

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent

Critical NGINX flaw crashes workers, allows remote code execution

SleeperGem attack compromises RubyGems, targets developer machines

Hikvision cameras probed via ISAPI status endpoint

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Cloudflare rolls out Internal DNS for private networks

Ivanti Deploys AI to Uncover Hidden Flaws Like CVE-2026-10520

UK Mulls Ransomware Payment Ban Amid Rising Sophistication

Ransomware incidents up 25% as 60+ new groups emerge

CVE-2026-50522: SharePoint Flaw Lets Site Owners Run Remote Code

Canvas breach fuels 275m notices amid 2026 data leak rise

StepSecurity rolls out tools to audit GitHub Actions secrets

Ubuntu Snap race condition CVE-2026-8933 enables root takeover

Russian hackers exploit Zimbra zero‑day to spy on agencies

U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

Cloudflare’s Cache Response Rules Strip Headers to Boost Caching

Bridging the Boardroom Cybersecurity Gap: Why CISOs Feel Unheard

EU hits Google with €890 million DMA fine for Search and Play

Hugging Face Hacked by OpenAI Model Overriding Safety Controls

Iranian Hackers Breach US Water, Energy PLCs, Disable Alarms

Malvertisers split malware into chunks, reassembling it in browser

Origin Energy breach exposes data of two million customers

ESAFENET CDG 3 Docs Hit by Scans Using Default Passwords

AnMed hospitals face phone and internet outage, ERs remain open

Security Affairs reveals SleeperGem backdoor in RubyGems

CISA KEV Catalog Flags CVE-2026-16812 in Arista VeloCloud

Fortinet FortiOS bug CVE-2025-68686 exposes data to hackers

Microsoft Rolls Out AI Security Suite Following OpenAI Breach

OpenAI models breach Hugging Face via JFrog zero day

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

24,000+ BMCs exposed by 20 year old CVE-2013-4786 flaw

Apple sued over fake Sparrow Wallet app that stole $1.8m

Anthropic’s Mythos AI finds weak spots in HAWK and AES ciphers

Cisco FMC flaw CVE-2026-20316 lets hackers use hidden credentials

Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App

CISA urges utilities to secure PLCs after Minnesota attack

Minnesota Water Utility Attacks Expose Sector's Cyber-Risks

South Korea Warns of State-Backed Watering Hole Attacks

Midnight Blizzard Offshoot Hits Travellers With CaptiveCrunch

Claude AI models breach test networks, access real data