ICYMI: 2026-07-02
Latest Headlines
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure
How to Conduct a Successful Audit of AI-Driven Software Development
Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm
Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability
‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials
CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability
AsyncRAT Campaign Uses DLL Sideloading and ScreenConnect for Stealthy Remote Access
Microsoft 365 Phishing Panel Uses OAuth Device Code Flow to Capture Tokens and Persist Access
AsyncRAT Campaign Abuses TryCloudflare Tunnels and Python Scripts for Malware Delivery
Ousaban Malware Uses Phishing PDFs and VBS Downloader to Target Iberian Banking Users
Claude Cowork’s Sandbox Vulnerability Allows Attackers to Run Arbitrary Commands as Root
CitrixBleed Vulnerability Exploited by Hackers Within 24 Hours of Public Disclosure
DHS Confirms Breach of Information-Sharing Network Platform HSIN
ChatGPT File Download Flow Vulnerability Could Be Abused to Access System Files
900+ Oracle E-Business instances Exposed Online Amid Active Vulnerability Exploitation
Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT
ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
Opera rolls out Paste Protect feature to fight ClickFix attacks
Alleged Scattered Spider hacker extradited to the United States
Medtronic notifies customers impacted by ShinyHunters data breach
– MTZ