ICYMI: 2026-07-13
Latest Headlines
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
Meta Files Patent for AI That Can Listen All Day and Track How You’re Feeling
Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance
Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption
EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign
Organizations Warned of Exploited Joomla Extension Vulnerabilities
Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns
New macOS Stealer Mimics Apple’s Crash Report Framework to Steal Browser Credentials
Turla Hackers Exploit SharePoint Flaw to Access Thousands of French User Accounts
Internet-Wide Scans Target MCP Servers, Claude Credentials, and Exposed AI Models
NSA Urges Organizations to Disable Cisco Smart Install as Russian Hackers Target Routers
Debian 13 Released With Security Updates, Bug Fixes and Driver Updates
Hackers Using Vibe-Coded Generated PowerShell Script to Enumerate Active Directory Accounts
CISA Warns of Joomla Sites Running iCagenda or Balbooa Exploited in Attacks
AI-Powered ‘Intelligent Worm’ Could Regenerate Exploits and Adapt to Defenses in Real Time
iPhone and MacBook Forensics Investigation Exposes £113,000 Property Fraud Operation
Japan’s largest taxi operator shuts systems after cyberattack
Hackers backdoor Jscrambler npm package with infostealer malware
New CrashStealer malware poses as Apple crash reporting tool
CISA warns of actively exploited RCE flaws in Joomla extensions
Lidl discloses online shop breach after service provider hack
UK charges suspects linked to Russian Coms call spoofing platform
US and allies warn of Russian critical infrastructure attacks
– MTZ