⚠️ VULNERABILITY DISCLOSURE 5[−]
26 Jul KEVWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedHere’s an overview of some of last week’s most interesting news, articles, interviews and videos: AI agents are still logging in as humans Most large companies run more than one AI platform at the same time. Developers pull up coding assistants, marketing teams lean on writing to…HELPNETSECURITY.COM
26 JulWeekly Update 514: This Week in Data BreachesPresently sponsored by: CoreView: Misconfigurations in Microsoft 365 leave doors open. Scan your tenant for free. The Origin Energy breach down here in Aus is all over the news this week, and as with many breaches, it's multi-faceted. You've got them leading with "…TROYHUNT.COM
26 JulA-list directors, actors and celebrities exposed in Tribeca film festival data leakResearcher Jeremiah Fowler provides today’s entry in the “No Need to Hack When It’s Leaking” files: I recently discovered a publicly accessible database that was not password-protected or encrypted and contained what appeared to be records associated with …DATABREACHES.NET
26 JulScans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)ESAFENET&#;x26;#;39;s CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The "CDG" stands for "Content Data Guard", and the product appears to be mostly targeting the Chinese marke…ISC.SANS.EDU
26 JulDeveloping: AnMed reports phone and internet outage impacting all hospital locations; ERs remain openMedia outlets are reporting that all AnMed hospital locations are experiencing a phone and internet outage, but patients are being seen in the emergency rooms. AnMed is an independent, not-for-profit health system serving Upstate South Carolina and northeast Georgia with four hos…DATABREACHES.NET
🔥 INCIDENT REPORTING 4[−]
26 JulSecurity Affairs newsletter Round 587 by Pierluigi Paganini – INTERNATIONAL EDITIONA new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Iran-Linked Actors Breach Are…SECURITYAFFAIRS.COM
26 JulHackers Hijack Hotel Wi-Fi to Steal Microsoft 365 CredentialsHackers compromised hotel Wi-Fi gateways to redirect users to fake Microsoft 365 login pages and steal credentials. ReliaQuest’s threat research team just documented attackers compromising the Wi-Fi gateways at hotels and conference centers, then quietly rerouting guests to…SECURITYAFFAIRS.COM
26 JulSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter UAC-0145 Primary Compromise Vectors as of July 2026 SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyG…SECURITYAFFAIRS.COM
26 JulHugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack"The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!"TECHCRUNCH.COM
🕵️ THREAT INTELLIGENCE 1[−]
26 JulClaude Opus 5 sharpens coding and cybersecurity work on AWSClaude Opus 5 went live on Amazon Bedrock and Claude Platform on AWS. Anthropic says the model improves on Claude Opus 4.8’s cyber capabilities, coding through cybersecurity. Anyone with an AWS account in a supported region can call it. On higher-risk requests, Opus 5 hands…HELPNETSECURITY.COM
🌐 CYBER THREAT LANDSCAPE 3[−]
26 JulMalvertising Sends Malware in Pieces, Then Makes the Browser Build the ExecutableA malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL. Confiant, which detailed the campaign on July 23, 2026,…THEHACKERNEWS.COM
26 JulHow sovereign is Europe's space industry?As space becomes an increasingly important part of global communications, national security, and critical infrastructure, European governments are confronting a difficulty: How much control do they need over their own space capabilities? In this week’s episode, host Maria Varmazi…THECYBERWIRE.COM
26 JulGitHub, PyPI add time-absed defenses against supply chain attacksGitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact. [...]BLEEPINGCOMPUTER.COM
📰 CYBERSECURITY BRIEFINGS 1[−]
26 JulThe myth of space sovereignty.This week on T-Minus: Space-Cyber Briefing: we dive deeper into space sovereignty. While achieving true space independence may be the goal, achieving this objective often proves significantly harder than many realize.THECYBERWIRE.COM