ICYMI: 2026-07-20
Latest Headlines
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
Mythos Didn’t Break Your Security Program. Your Exposure Window Could.
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
The ACLU Is Arming Lawyers to Expose State Surveillance Secrets
Apps Marketed to US Troops Are Shipping Chinese and Russian Code
Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
New Index Tracks Material Breaches — And Refuses to Add Up the Losses
Ernst & Young Data Breach Affects Personal, Financial Information
Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool
Hackers Are Turning Microsoft 365 Calendar Invites Into Secret Malware Command Channels
Windows Bind Link Abuse Lets Attackers Blind EDR and Bypass AMSI, AppLocker, and Sysmon
Paidwork Data Breach Exposes 23 Million Users’ Banking and Personal Data
ClickFix Campaign Delivers Modular TELEPUZ Malware With 36 Remote Commands
GPT-5.6 Sol Ultra Found Wp2shell RCE Flaw That Could Be Worth $500,000 for About $25
Researchers Claim LG Monitors are Silently Installing Adware on Windows Using App
Microsoft Releases KB5121767 Out-of-Band Update to Fix Dell USB-C Compatibility Bug
Kimai Docker Flaw Lets Unauthenticated Attackers Forge Cookies and Take Over Accounts
Estée Lauder discloses data breach via Oracle E-Business flaw
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Hackers steal $23.7 million in crypto from Ostium in off-chain attack
Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
JadePuffer agentic attacks now target AI model data with ransomware
New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
Hugging Face warns an autonomous AI agent hacked its network
Microsoft confirms Windows Server Update Services sync delays
Windows KB5121767 OOB update fixes shutdowns on some Dell PCs
Critical ServiceNow code execution flaw now exploited in attacks
– MTZ