🚨 CISA KEV 2[−]
15 Jul KEVU.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalogU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall and Microsoft flaws to its Known Exploited Vulnerabilit…SECURITYAFFAIRS.COM
15 Jul KEVPatch These Joomla Vulnerabilities NowCISA added vulnerabilities affecting the iCagenda and Babioon Forms Joomla extensions to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The flaws can enable remote code execution through arbitrary file uploads. When CISA gives a vulnerability i…YOUTUBE.COM
🐛 COMMON VULNERABILITIES AND EXPOSURES 24[−]
15 Jul KEVPatch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bugEarlier this month Microsoft warned that, because the latest AI models can now help discover vulnerabilities, CSOs will see a higher volume of security updates every month. It wasn’t kidding. Today the company issued a record number of patches , with 59 rated as critical. And Mic…CSOONLINE.COM
15 JulSonicWall Issues Urgent SMA Patch Warning for Two Zero-Day ExploitsSonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution. The post SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulTwo SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin CommandsSonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command execution. The vulnerabilities are listed below - CVE-2026-15409 (CVSS score: 10.0…THEHACKERNEWS.COM
15 JulCVE-2026-57432 Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpackInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-39822 Root escape via symlink plus trailing slash in osInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-42505 Invoking Encrypted Client Hello privacy leak in crypto/tlsInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-15028 Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57219 RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurationsInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-13221 Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunkInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-59875 node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath recordsInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious CodespaceInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57220 RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoSInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57217 RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypassInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57213 RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag renderingInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57216 RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checksInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on WindowsInformation published.MSRC.MICROSOFT.COM
15 JulCVE-2026-57215 RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantomInformation published.MSRC.MICROSOFT.COM
15 JulAI-driven bug hunting fuels record Microsoft Patch TuesdayMicrosoft has released patches for 570+ vulnerabilities on July 2026 Patch Tuesday, including two that are being leveraged by attackers (CVE-2026-56155 and CVE-2026-56164), and one that was previouly disclosed (CVE-2026-50661). The release was once again followed by Nightmare Ecl…HELPNETSECURITY.COM
15 JulFirefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security FlawsMozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published. The vulnerabilities are listed below - CVE-2026-15718, an invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719, a site isolation in t…THEHACKERNEWS.COM
15 JulVU#725167: node-forge Signature Forgery Vulnerabilities in RSA-PKCS and ED25519 ImplementationsOverview Two distinct cryptographic signature verification vulnerabilities exist in Digital Bazaar node-forge, a widely used JavaScript library implementing cryptographic primitives for Node.js and browser environments. These vulnerabilities allow attackers to forge RSA (PKCS#1 v…KB.CERT.ORG
15 Jul KEVRapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery (SSRF) vulnerability CVE-2026-15409 (CVSS 10.0) and the high-severity code injec…RAPID7.COM
15 Jul KEVCVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wildSonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code execution. Key takeaways CVE-2026-15409 and CVE-2026-15410 are a pair of exploited vulnerabilities …TENABLE.COM
15 JulVU#529388: Privilege escalation vulnerability via unprotected IOCTL interface in Pegatron Tdelo64.sysOverview A privilege escalation vulnerability exists in the tdeio64.sys driver due to an unprotected input/output control (IOCTL) dispatch routine that fails to validate the origin and permissions of user-supplied requests. An unprivileged local attacker can abuse exposed IOCTL d…KB.CERT.ORG
⚠️ VULNERABILITY DISCLOSURE 64[−]
15 JulMicrosoft Patches Record 622 Flaws, Including Two Zero-Days Under Active AttackMicrosoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 2…THEHACKERNEWS.COM
15 JulICYMI: June 2026 @AWS SecurityRead all about the latest AWS security features, compliance updates, and hands-on resources in our new, monthly digest posts. You’ll find expert blog posts, new service capabilities, code samples, and workshops. AWS Security Blog posts This month’s AWS Security Blog posts covered…AWS.AMAZON.COM
15 JulShareFile explained, healthcare in critical cyber condition and click fix tops malware chartsShareFile emergency explained, a year of Salesforce breaches examined, healthcare cybersecurity in critical condition and click fix goes number one for malware. David Shipley covers Progress Software's emergency ShareFile shutdown, now tied to a previously unknown high-severity p…CYBERSECURITYTODAY.LIBSYN.COM
15 JulAI used to help plan the break-in, now it’s doing the break-inOver the past twelve months, researchers documented intrusions in which AI ran exploitation workflows autonomously, generating thousands of commands across dozens of sessions with minimal human direction, according to Check Point’s AI Security Report 2026. AI-powered cyber attack…HELPNETSECURITY.COM
15 JulThe MDR renewal question: What changes when AI can handle the alertsFor most of the past decade, the managed detection and response (MDR) decision was a simple one: teams that couldn’t staff a 24/7 SOC outsourced detection and response to a provider who could. It solved a resources problem, and the alternatives (hiring a team you couldnR…HELPNETSECURITY.COM
15 JulGoose Creek - 6,574,121 breached accountsIn June 2026, a party claiming to have access to data from Goose Creek Candle Company sent emails to a number of the company's customers , claiming the company had a security vulnerability and suffered a data breach. The data was subsequently sent to Have I Been Pwned and contain…HAVEIBEENPWNED.COM
15 JulSingGuard-NSFA: Open-source guardrails for agentic AISingGuard-NSFA is an open-source guardrail framework aimed at operational threats in agent workflows. Four models ship at 0.8B, 2B, 4B, and 9B parameters, all built on Qwen3.5 base backbones. Risk taxonomy The NSFA risk taxonomy organizes threats along the CIA triad of confidenti…HELPNETSECURITY.COM
15 Jul7 skills and traits of elite security engineersSecurity engineers play a pivotal role in enterprise cybersecurity, because they are the professionals who design, build, and deploy security systems to protect an organization’s data, applications, systems, networks, and other IT components against a variety of cyber threats. Fi…CSOONLINE.COM
15 JulCritical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 UpdatesPublic exploit code targeting the Firefox flaws exists, but no in-the-wild exploitation has been observed. The post Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulNigeria Deepens Cybersecurity Efforts as Cybercriminals See More ProfitsThe West African country advanced rules to force organizations to disclose cyberattacks, joining other nations in a shift to mandated transparency.DARKREADING.COM
15 JulFortinet adds AI controls and data loss prevention to FortiEndpointFortinet has announced new capabilities for its unified endpoint platform, FortiEndpoint, designed to help organizations securely adopt AI, protect sensitive data, and reduce risk. By bringing AI visibility and control, native data security, endpoint risk scoring, and FortiAI-ass…HELPNETSECURITY.COM
15 JulCybersecurity needs more prevention and less reliance on cureAsk any medical doctor, and they’ll tell you that prevention is better than cure. It’s more cost-effective and it has better outcomes. The same is true in cybersecurity. But we believe that our industry has veered too far away from this simple concept. We observe that most new to…CSOONLINE.COM
15 JulSonicWall warns of active exploitation of two SMA 1000 zero-daysSonicWall warns of active attacks exploiting two SMA 1000 zero-days, including a flaw enabling arbitrary command execution. SonicWall confirmed the active exploitation of two zero-day vulnerabilities affecting Secure Mobile Access (SMA) 1000 appliances. The vulnerabilities were i…SECURITYAFFAIRS.COM
15 JulCompromised AsyncAPI npm Packages Deliver Multi-Stage Botnet MalwareFour compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity. The affected packages are listed below - @asyncapi/generator-helpers@1.1.1 @asyncapi/ge…THEHACKERNEWS.COM
15 Jul KEVTake Back Control as Enterprises Struggle to Incorporate Risks They Don't Understand - BSW #456More than 48,000 vulnerabilities were disclosed in 2025, yet only about 1% are actively exploited. However, you’re expected to mitigate all vulnerabilities, or at least critical and high. But what if there is no patch to fix the vulnerability or the software is unsupported? Ben L…YOUTUBE.COM
15 JulMicrosoft Patches 570 CVEs in Record Patch TuesdayMicrosoft released fixes for a record 570 CVEs in its July Patch Tuesday update, as experts warn AI is dramatically accelerating vulnerability discovery and increasing patch volumesINFOSECURITY-MAGAZINE.COM
15 Jul KEVCISA warns admins to patch actively exploited SharePoint flawsThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. [...]BLEEPINGCOMPUTER.COM
15 JulProgress Confirms Zero-Day Vulnerability Behind ShareFile DisruptionThe company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it. The post Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulCursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code ExecutionOpen a repository in Cursor on Windows and, if a file named git.exe is sitting in the project root, Cursor runs it. No click, no approval dialog, no warning that anything in the folder is about to execute. Whatever that binary does, it does as you, with your source…THEHACKERNEWS.COM
15 JulChrome Sync increasingly abused to stalk unsuspecting victimsCyberstalkers are increasingly exploiting Google Chrome's built-in synchronization feature to secretly monitor victims' web activity without installing spyware or compromising their devices. Security firm Certo says it has received a growing number of reports involving the tactic…CYBERINSIDER.COM
15 JulWhite House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination InitiativeThe new program stems from an AI-focused Executive Order signed by President Trump on June 2. The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulClickFix is changing the economics of social engineeringClickFix has moved from a one-off social engineering trick into an industrialized attack ecosystem that is outpacing conventional antivirus and endpoint defenses, according to ReversingLabs. The technique first showed up in late 2023 and early 2024, and Proofpoint named it in mid…HELPNETSECURITY.COM
15 JulProgress Restores ShareFile Storage Zones Access After Vulnerability Exploit ConcernsProgress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threatINFOSECURITY-MAGAZINE.COM
15 JulPolygraf AI Meeting Guard delivers real-time deepfake detection for enterprise meetingsPolygraf AI has announced Meeting Guard, a real-time AI fraud detection solution for enterprise meetings built to detect fraud and protect meeting security. AI can clone a voice, animate a face, and answer every interview question in real time, making trust signals obsolete acros…HELPNETSECURITY.COM
15 JulResearcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch TuesdaySecurity researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, al…THEHACKERNEWS.COM
15 JulNew Windows Bind Link techniques let attackers evade EDR, security controlsAttackers who already have administrator privileges on a Windows machine have newer ways to slip past endpoint security without exploiting a vulnerable driver or modifying trusted binaries. Bitdefender researchers have warned against three techniques that abuse Windows Bind Links…CSOONLINE.COM
15 JulWhite House launches AI-driven vulnerability clearinghouse to speed cyber remediationThe White House is expanding the use of AI beyond cyber threat detection into vulnerability management, launching a new program that aims to help government agencies and critical infrastructure operators identify, prioritize, and remediate software vulnerabilities faster. Called …CSOONLINE.COM
15 JulNew bugs in Claude for Chrome allow extensions to abuse AI privilegesTwo vulnerabilities found in Anthropic’s Claude for Chrome extension remain exploitable months after they were reported to the company, a research by Manifold Security noted. According to the researchers, the flaws can allow a malicious browser extension to trigger Claude into pe…CSOONLINE.COM
15 Jul5 reasons to bring application security data into your exposure management platformWhen you incorporate data from application security scanners into your exposure management platform, you can assess the threat from formerly isolated code flaws using a broader risk context, which illuminates hidden exposures that your security and development teams can eliminate…TENABLE.COM
15 JulJuly 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-daysMicrosoft's July 2026 Patch Tuesday sets yet another record, fixing 622 Microsoft CVEs—three times as many as last month.MALWAREBYTES.COM
15 JulMicrosoft smashes Patch Tuesday record for second successive monthVulnerability counts have been surging this year, and Microsoft's mammoth disclosure this week of 622 bugs is larger than the three previous months combined.THERECORD.MEDIA
15 JulCompromised Logins Surge as the Most Common Entry Point for Ransomware AttacksResearch of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomwareINFOSECURITY-MAGAZINE.COM
15 Jul2-Click Cursor Exploit Enables Dev Environment TakeoverSimple age-old bugs give bad actors access to developers' secrets and source code-rich environments.DARKREADING.COM
15 JulNayax updates its incident status; states it won’t pay any extortion demandIt’s common for victims and threat actors to disagree sharply over the scope of an attack or its significance. Today’s example involves Israeli fintech Nayax and a group called The Syndicate. In previous coverage, DataBreaches cited Nayax’s submission to the Sec…DATABREACHES.NET
15 JulAU: Partnered Health Data Breach Exposes Patient Records at Family ClinicsTrevor Long reports: A large health care chain that owns family medical clinics across Australia has been the victim of a cyber breach which has exposed the data of their patients, including potentially treatment information. Partnered Health runs a large number of clinics across…DATABREACHES.NET
15 JulAsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly DownloadsAsyncAPI npm packages with 2M weekly downloads were compromised, spreading malware with info-stealing, crypto-theft and RAT capabilities. OX Security researchers disclosed on July 14 that the AsyncAPI npm organization was compromised, with malicious code injected into four packag…SECURITYAFFAIRS.COM
15 JulWe built a vulnerability vending machine: AI tokens in, zero-days outIntruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover complex software vulnerabilities. The company explains how the system found and exploited a previously unknown WordPress plugin zero-day, with additional di…BLEEPINGCOMPUTER.COM
15 JulF5 Insight for ADSP enhances BIG-IP operations with guided updates and AI audit trailsF5 has announced new fleet management capabilities for F5 Insight for ADSP that help enterprises reduce risk exposure across F5 BIG-IP environments as frontier AI compresses vulnerability response timelines. The new F5 Insight workflows give security and operations teams fleet-wi…HELPNETSECURITY.COM
15 JulInvestigating Persistence Mechanisms in AWSOverview In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn't have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into your IAM policies, Lambda functions, and federated sessions, creating i…RAPID7.COM
15 JulAttackers Find Bugs Before CVEsResponsible disclosure gives vendors time to develop patches before vulnerabilities are publicly disclosed. That process can take months, while attackers may already be searching for and exploiting the same weaknesses. By combining AI with large-scale vulnerability data, security…YOUTUBE.COM
15 JulClaude for Chrome flaw could let rogue extensions access your GmailThe ClaudeBleed vulnerability still lets malicious Chrome extensions abuse Claude for Chrome's permissions.MALWAREBYTES.COM
15 JulUnpatched Cursor Vulnerability Exposes Users to Code ExecutionAn attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically. The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek .SECURITYWEEK.COM
15 Jul KEVCISA Urges Immediate Patching of Exploited SharePoint VulnerabilitiesThree vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days. The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulUnderstanding Claude Tag’s access model in Slack and how to configure it securelyAnthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins should understand and how to securely configure it. Key takeaways Claude Tag, Anthropic’s newly launched AI agent for …TENABLE.COM
15 JulPatch Tuesday notes: Microsoft fixes a record 570 flaws.SonicWall warns of a maximum-severity zero-day. Business news: Valarian raises $50 million in Series A funding.THECYBERWIRE.COM
15 JulCISA warns that multiple vulnerabilities in SharePoint are under exploitationSecurity researchers say additional flaws are being chained together and a patch will not be available until August.CYBERSECURITYDIVE.COM
15 JulUS launches vulnerability clearinghouse amid AI-fueled surge in flawsThe Trump administration hopes the program will accelerate the discovery and fixing of serious technical problems before hackers exploit them.CYBERSECURITYDIVE.COM
15 JulClaude Flaw Automatically Sends Malicious Prompts to AI AgentsWhen combined with another exploit, the "PromptFiction" vulnerability, which has been fixed, could have enabled an end-to-end attack on a targeted system.DARKREADING.COM
15 JulChaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows SystemsLegacyHive PoC exposes a Windows Privilege Escalation flaw affecting fully patched Windows desktop and server systems. Just hours after Microsoft’s July 2026 Patch Tuesday, security researcher Nightmare Eclipse, also known as Chaotic Eclipse, published a new Windows zero-da…SECURITYAFFAIRS.COM
15 JulMicrosoft patches bug in video game Age of Empires IIThe vulnerability in the decades-old game could have allowed hackers to take over victims’ computers with a malicious game invite.TECHCRUNCH.COM
15 JulHack suggests AI music generator Suno scraped YouTube for training dataThe hacker used an employee's credentials to access source code, which revealed how Suno scraped decades of audio.TECHCRUNCH.COM
15 JulSonicWall customers under threat as attackers exploit 2 zero-daysResearchers said the vulnerabilities, which attackers are chaining together, were first exploited three weeks before the vendor disclosed and patched the defects. The post SonicWall customers under threat as attackers exploit 2 zero-days appeared first on CyberScoop .CYBERSCOOP.COM
15 JulGoogle Gemini CLI abused as a hacking agent, malware botnet operatorA Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. [...]BLEEPINGCOMPUTER.COM
15 JulGuten Tag, Bonjour, Hola to Our European Cyber Defenders!We're thrilled to unveil the latest evolution of Dark Reading's DR Global section — your go-to source for region-specific cybersecurity intelligence beyond North America.DARKREADING.COM
15 JulWilmerHale Sued Over Client Personal Information Data BreachAlex Ebert reports: Wilmer Cutler Pickering Hale & Dorr should pay millions of dollars in damages for loss of clients’ personal information in a May data breach, a putative class action claims. The lawsuit, filed Tuesday in the US District Court for the District of Columbia, …DATABREACHES.NET
15 JulFiles relating to India’s largest nuclear power plant Kudankulam exposed in data breachMunsif Vengattil and Aditya Kalra Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities and supplier details — information it labelled as coming from…DATABREACHES.NET
15 JulNPM ecosystem hit with two new supply chain compromisesAttacks targeting developer ecosystems are increasing in frequency and sophistication, with Node.js developers firmly in this week’s crosshairs, as multiple npm packages belonging to the open-source AsyncAPI and Jscrambler Code Integrity were poisoned with malware following compr…CSOONLINE.COM
15 Jul KEVPatchapalooza packs a punch.Patch Tuesday. SonicWall urges immediate patching of actively exploited vulnerabilities. The White House launches an AI-backed vulnerability clearinghouse. The Air Force contends with widespread cybersecurity quarantines. The UK and EU blame Russia for last year’s cyberattack on …THECYBERWIRE.COM
15 JulSecurity researchers find stalkers abusing Chrome’s sync featureCerto Software warns that the capability, designed for convenience, can easily be used to spy on online activity. The post Security researchers find stalkers abusing Chrome’s sync feature appeared first on CyberScoop .CYBERSCOOP.COM
15 JulZoom warns of critical account takeover vulnerabilityZoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be exploited by an unauthenticated party to hijack accounts. [...]BLEEPINGCOMPUTER.COM
15 JulIdentity Attacks Overtake Exploits as Top Ransomware CauseEmail attacks overtook exploits as the top ransomware root cause last year. Multifactor authentication (MFA) was deployed in 97% of credential-based attacks but failed to prevent compromise.DARKREADING.COM
15 JulCalgary 911 employee charged with breach of trustManjot Singh reports: Calgary police say a City of Calgary 911 employee has been charged following an investigation into the unauthorized disclosure of confidential information. Police say the investigation began in January after allegations that sensitive information was being a…DATABREACHES.NET
15 JulUS and allied Governments’ Recommendations: Securing Network Devices Against Russian APT GroupsUS and allies warn of Russian APT groups targeting routers and network devices to compromise critical infrastructure worldwide. The US and allied governments warn that Russian state-sponsored APT groups are scanning and exploiting poorly secured network devices, especially router…SECURITYAFFAIRS.COM
15 Jul“AI Normal Tech” vs “AGI by Tuesday”: Security Advice That Survives Either FutureIf you look at social media debates about AI, two extreme patterns emerge. Studying extreme patterns is very useful because understanding boundary conditions helps you understand the whole phenomenon — in this case of security in AI adoption (recent extreme example ). You can als…MEDIUM.COM
📋 SECURITY BULLETINS 4[−]
15 JulMicrosoft: Some Dell PCs shut down after recent Windows updatesMicrosoft is blocking this month's Windows 11 security updates on some Dell devices because they are causing shutdowns and performance issues. [...]BLEEPINGCOMPUTER.COM
15 JulFreeRDP 3.29.0 security update resolves 22 advisoriesFreeRDP is a free implementation of the Remote Desktop Protocol, released under the Apache license, and it runs on a large share of workstations and servers through the many tools built on it. The 3.29.0 version is a security, bugfix, and maintenance update that resolves 22 advis…HELPNETSECURITY.COM
15 JulICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, RockwellThe industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CERT. The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulMicrosoft patches record number of security vulnerabilities, citing its use of AIMicrosoft's monthly release of security fixes, dubbed Patch Tuesday, resolved a record 570 security vulnerabilities across the company's product line, thanks to discoveries with AI.TECHCRUNCH.COM
📢 SECURITY ADVISORIES 11[−]
15 JulMicrosoft is forcing an enterprise transition to passkeysPasskeys have been around for some time, but enterprise-wide adoption to this point has been slow for a number of reasons. But soon, many Microsoft customers won’t have a choice. Starting September 1, Microsoft will roll out passkeys as the default authentication method in its cl…CSOONLINE.COM
15 JulProduct showcase: Trust Chain TPRM turns vendor compliance evidence into verified assuranceTrust Chain is an AI-native third-party risk management (TPRM) solution by Strike Graph that replaces the security questionnaire model with validated evidence of compliance. Rather than asking vendors to self-report their security posture, Trust Chain requires vendors to submit e…HELPNETSECURITY.COM
15 JulWhen 80,000 fans log on at once: The 2026 World Cup’s unique cybersecurity issuesWith the World Cup in full swing, stadiums across North America are currently accommodating thousands of fans every match day. That said, the stadiums’ biggest security challenge isn’t of a physical nature. It is not hyperbolic to say that football stadiums are some of the most c…CSOONLINE.COM
15 JulTrump administration unveils AI-supported clearinghouse for cyber vulnerabilitiesThe Gold Eagle program will allowe industry, critical infrastructure operators and the government to use artificial intelligence to rapidly detect, prioritize and patch cybersecurity vulnerabilities, officials said.THERECORD.MEDIA
🔥 INCIDENT REPORTING 8[−]
15 JulWeekly Update 512: IoT Lockout FailPresently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSite "Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloo…TROYHUNT.COM
15 JulBehind the Book: Threat-Driven Software DevelopmentIn this episode of the Microsoft Threat Intelligence Podcast, host Sherrod DeGrippo is joined by co-authors Michael Howard, Lee Holmes, and Shawn Hernan for a discussion on their new book, Threat-Driven Software Development: Defending Online Services from Modern Threat Acto…THECYBERWIRE.COM
15 JulUS charges alleged operators of Russian bulletproof hosting serviceU.S. federal prosecutors have unsealed charges against three Russian nationals, accusing them of providing bulletproof hosting (BPH) services to ransomware gangs that caused over $62 million in damages to victims worldwide. [...]BLEEPINGCOMPUTER.COM
15 JulFluke - 821,100 breached accountsIn July 2026, electronic test and measurement equipment company Fluke was targeted in a ShinyHunters "pay or leak" extortion campaign . The group subsequently published more than 100GB of data allegedly taken from the company. The corpus contained largely corporate contact inform…HAVEIBEENPWNED.COM
15 JulOkoBot: new sophisticated malware framework targets cryptocurrency usersKaspersky GReAT experts dissect the new OkoBot campaign targeting cryptocurrency users. This complex framework employs TookPS, exfiltrates seed phrases, monitors Chromium-based browsers, and installs various malware strains, including the Rilide stealer.SECURELIST.COM
15 JulGoose Creek data breach exposes 6.6 million customer recordsGoose Creek Candle Company has suffered a data breach exposing the personal information of 6.6 million customers, according to a new entry published by Have I Been Pwned (HIBP). The breach was added to the service earlier today after HIBP received a copy of the dataset from the p…CYBERINSIDER.COM
15 JulUS charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victimsThe 2024 indictment, now unsealed, accuses three Russians and two web hosts of aiding hackers and profiting from cybercrime.TECHCRUNCH.COM
15 Jul23andMe reaches $18 million settlement with states for massive breachA coalition of 42 state attorneys general reached an $18 million settlement with 23andMe for cybersecurity failings that led to a data breach.THERECORD.MEDIA
🕵️ THREAT INTELLIGENCE 25[−]
15 JulInside the Media Mind of Sasha Ingber: SpyCast PodcastOn this episode of #IMM, Christine and Madison sit down with Sasha Ingber the host of SpyCast, the International Spy Museum's flagship podcast on global intelligence, espionage and covert operationsTHECYBERWIRE.COM
15 JulISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
15 JulRecent DShield SIEM Update, (Tue, Jul 14th)The last update to the DShield SIEM [ 4 ] was in Sep 2025 which contained some minor tweaks. This update currently is using ELK stack version 8.19.15, contains some additional dashboards and new logs.
ISC.SANS.EDU
15 JulAn AI overthinking attack can tie a robot up for over a minuteRobots that read the world through cameras now lean on large vision-language models to interpret what they see and decide what to do next. These models handle images and text together, so any words that fall inside the camera frame become part of the input. A stop sign, a street …HELPNETSECURITY.COM
15 JulAWS retools Security Hub for AI and multicloud threatsAWS added AI workload protection and Microsoft Azure security monitoring to Security Hub, its centralized security platform for collecting and prioritizing security findings across cloud environments. Support for additional cloud platforms will follow. “Collecting findings …HELPNETSECURITY.COM
15 JulTuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted DevelopmentTuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 architecture and bugs. The post TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development appeared first on Unit 42 .UNIT42.PALOALTONETWORKS.COM
15 JulVulnerabilities Patched by Fortinet, Ivanti, ServiceNowA critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulA Video Screen That Is Also a CameraAmazing : Researchers from ETH Zurich in Switzerland, however, managed to create a new type of pixel that can simultaneously do both. This hypercharged pixel, called a Fourier pixel, can generate and sense arbitrary light fields and tap into a pixel’s full potential for car…SCHNEIER.COM
15 JulUS Charges Russian Individuals and Firms for Running Cybercrime ServicesThe suspects and their companies were previously sanctioned by the United States and its allies. The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulSpanish police dismantle €140 million cybercrime networkSpanish National Police have dismantled a cybercrime network accused of stealing and laundering about €140 million through fake investment platforms, CEO fraud, invoice fraud, and man-in-the-middle attacks. Four people were arrested as part of the operation: two in Portugal, one …HELPNETSECURITY.COM
15 JulNudge Security automates detection of risky OAuth grants and browser extensionsNudge Security has announced new agentic capabilities to help security and IT teams find and remediate malicious and high-risk OAuth grants and browser extensions, two of the fastest-growing and hardest to manage attack surfaces in the enterprise. The new agents continuously anal…HELPNETSECURITY.COM
15 JulBinary Defense’s NightBeacon CMD helps enterprise SOC teams automate threat investigationsBinary Defense has announced NightBeacon CMD, a standalone AI-driven SOC workbench that enterprise security teams can deploy in their own environments. Built and hardened inside Binary Defense’s live 24/7 Security Operations Center (SOC), NightBeacon CMD gives customers the…HELPNETSECURITY.COM
15 JulWindows Bind Link Attacks Can Hide Malware From EDR ToolsBitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products. The post Windows Bind Link Attacks Can Hide Malware From EDR Tools appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulVirtual Event Today: Cloud & Data Security SummitAttendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments. The post Virtual Event Today: Cloud & Data Security Summit appeared first on SecurityWeek .SECURITYWEEK.COM
15 JulRadware adds cloud intelligence to DefensePro X for web DDoS defenseRadware has announced a new cloud-augmented protection architecture for DefensePro X, extending the platform with new AI-powered cloud algorithms while keeping traffic inspection and mitigation locally within customer premises. The first such service released is Cloud Web DDoS Pr…HELPNETSECURITY.COM
15 JulLatticeFlow AI connects governance frameworks with continuous AI risk monitoringLatticeFlow AI has announced a platform for managing AI risk across agentic systems. Organizations are deploying autonomous AI in critical business processes, while governance approaches based on documentation and point-in-time assessments struggle to keep up with evolving risks.…HELPNETSECURITY.COM
15 JulThreat actor impersonated hundreds of brands on GitHub to push infostealer malwareA financially motivated threat actor is impersonating hundreds of brands on GitHub and pushing a smash-and-grab infostealer masquerading as legitimate downloads of popular software, Arctic Wolf threat researchers have warned. “The 292 impersonated repositories span security…HELPNETSECURITY.COM
15 JulSocure rolls out Remote Verifier for higher-risk identity checksSocure has launched Remote Verifier in RiskOS, a new identity verification tool that helps organizations verify identities requiring additional review while reducing manual effort. Socure’s AI-powered document verification solution instantly verifies more than 99% of identities o…HELPNETSECURITY.COM
15 JulXint Pulse offers on-demand black-box penetration testing for web applicationsXint.io has launched Xint Pulse, a black-box autonomous penetration testing tool that provides product security teams with on-demand security assessments of their applications. Unlike the company’s enterprise platform, which is designed for continuous testing, Xint Pulse is…HELPNETSECURITY.COM
15 JulLabubaRAT malware infiltrates Windows systems while posing as NVIDIA softwareLabubaRAT, a previously undocumented Rust-based remote access tool (RAT) masquerading as NVIDIA software that enables post-compromise operations on Windows systems, has been uncovered by Blackpoint Cyber. According to researchers, LabubaRAT creates “a reusable foothold for …HELPNETSECURITY.COM
15 JulForget the model. When it comes to cybersecurity, it’s all about the harnessIndustry has quickly developed tools meant to guide and direct frontier LLMs in cybersecurity. Attackers aren’t far behind. The post Forget the model. When it comes to cybersecurity, it’s all about the harness appeared first on CyberScoop .CYBERSCOOP.COM
15 JulProton says it rejected all 47 data requests targeting VPN users in 2026Proton has updated its Proton VPN transparency report, revealing that it received 47 legally binding requests for user information during the first half of 2026. According to the company, all 47 requests were denied because Proton VPN's no-logs policy meant it had no data capable…CYBERINSIDER.COM
15 JulTurning threat intelligence into decisive action with Defender ExpertsSecurity teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints, identities, cloud workloads, and a sprawling mix of third-party tools. The post Turning threat intelligence into decisive action with Defender Experts appeared…MICROSOFT.COM
15 JulDems press DNI nominee Jay Clayton on election security questions, but leave dismayedClayton maintained he was not an “election denier” but wouldn’t directly answer a number of questions about the 2020 race, his predecessor’s appearance at a January election office raid and more. The post Dems press DNI nominee Jay Clayton on election security questions, but leav…CYBERSCOOP.COM
15 JulStop Treating AI Like CoworkersSome organizations are giving AI agents names, titles, and workplace roles to encourage adoption. An MIT article argues that AI agents are not coworkers, despite how they're often presented. Anthropomorphism—the tendency to assign human qualities to non-human things—can influence…YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 2[−]
15 Jul AsyncAPI npm packages infected with credential-stealing malwareFive malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that delivered a remote access trojan with info-stealing capabilities. [...]BLEEPINGCOMPUTER.COM
15 JulOkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor AppsA malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet owners out of their recovery phrase. On an infected PC, the request comes from inside the wallet's own desktop software. Sometimes it wa…THEHACKERNEWS.COM
📡 INFOSEC NEWS 20[−]
15 JulWeekly Threat Bulletin – July 15th, 2026These are the top threats you should know about this week.F5.COM
15 JulHow Absolute Security CMO Ash Parikh Thinks About Marketing, Pipeline, and Working with the BoardMost CMOs come up through marketing. Ash Parikh came up through engineering and sales, and he thinks that is exactly why he does the job differently. He joins Gianna and Charles on CyberCMO Confidential as the CMO of Absolute Security to talk about what 25 years of carrying a bag…THECYBERWIRE.COM
15 JulThis fake Apple app can unlock your Mac’s password vaultDisguised as Apple's CrashReporter, CrashStealer steals passwords, browser data, crypto wallets, and other sensitive information.MALWAREBYTES.COM
15 JulGovernment Updates UK’s National Risk Register with Cyber WarningsThe UK government is warning of the potential impact of catastrophic cyber-attacksINFOSECURITY-MAGAZINE.COM
15 JulSASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.For years, routing traffic through cloud proxies was good enough. Then work moved to the browser, AI entered the workflow, and the inspection model stopped keeping up. Enterprise workflows now live across SaaS applications, browsers, and an expanding ecosystem of generative AI to…THEHACKERNEWS.COM
15 JulNew Webinar: Closing the Approval Gap in AI-Era Ad TechA single approved marketing tag can quietly load fourth-party code your security team has never seen, granting full access to your forms, customer data, and checkout pages. This on-demand webinar reveals how this Approval Gap forms, and gives your team the blueprint to close it b…THEHACKERNEWS.COM
15 JulLAPD sidelines relationship with license-plate reader company Flock SafetyThe Los Angeles Police Department is the latest U.S. municipal agency to rethink its relationship to ALPR company Flock Safety.THERECORD.MEDIA
15 JulEleven Vulnerable UEFI Shims Enable Secure Boot BypassEleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machineINFOSECURITY-MAGAZINE.COM
15 JulDutch police dismantle global crypto investment scam, arrest alleged mastermindAuthorities said Wednesday that the group operated like a legitimate international business since at least 2021, running about two dozen call centers across several countries and employing more than 700 people who posed as professional financial advisers.THERECORD.MEDIA
15 JulPhishing Campaign Abuses eCards to Deploy RMM ToolsSix-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victimsINFOSECURITY-MAGAZINE.COM
15 JulThe Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit SystemPart 3: How the Red Agent bypassed a credit and paywall system by changing a single client-side value from false to true.WIZ.IO
15 JulTrump’s DNI pick grilled about election security, voter fraudSenators pressed director of national intelligence nominee Jay Clayton about his stance on the 2020 election and previous statements about voter fraud. Other issues took a back seat.THERECORD.MEDIA
15 JulIs 'Tech-xit' Imminent? UK Steps Up Sovereignty Push Amid AI StrifeThe US government's restrictions on Anthropic and OpenAI frontier models have intensified calls in the UK and other countries to reduce their reliance on US tech companies, with significant cyber implications.DARKREADING.COM
15 JulIsraeli identity management startup Oak emerges from stealth with $60 million in seed funding.Barracuda Networks has acquired Austin, Texas-based identity and access management provider Evo Security.THECYBERWIRE.COM
15 JulHere’s the Truth About Whether Meta’s NameTag Face Recognition Tech ‘Exists’Since WIRED reported on Meta’s NameTag face recognition system, company executives have made confusing and conflicting remarks about its very existence.WIRED.COM
15 JulOperation Fake KickOff: Attackers Abuse Recruiters and SaaS to Harvest Work CredentialsIntel 471 investigated an ongoing, multi-stage phishing operation that systematically abuses legitimate software-as-a-service (SaaS) sales and marketing, and cloud platforms to orchestrate corporate credential theft.INTEL471.COM
15 JulCIS Benchmarks July 2026 UpdateThese CIS Benchmarks and CIS Build Kits have been updated or recently released and include a full changelog that references all changes.CISECURITY.ORG
15 JulDutch police bust investment fraud ring stealing over €100 millionThe Dutch Police announced the arrest of multiple individuals suspected of being part of an international investment fraud scheme estimated to have tens of thousands of victims. [...]BLEEPINGCOMPUTER.COM
15 JulForgotten Bootloaders Expose Secure Boot Blind SpotNearly a dozen vulnerable and now revoked UEFI shim bootloaders remained trusted for years, giving attackers a path to bypass Secure Boot.DARKREADING.COM