ICYMI: 2026-07-22
Latest Headlines
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
States Want ICE Agents to Show Their Faces. The Trump Administration Is Blocking Them
Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
Palo Alto Networks to Acquire Observability Platform Provider Embrace
Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft
When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover
StrongestLayer Raises $4.1 Million in Seed Funding Extension
Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks
Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation
Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates
Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife
RefluXFS Linux Kernel Vulnerability Lets Attackers Gain Root Access
Adobe Acrobat Extension Flaw Lets Attackers Steal WhatsApp Chats From 329 Million Users
ASUS Patches Critical Router Vulnerability Enabling Remote Command Execution
A Hidden Line of Website Text Can Turn AWS Kiro Into a Remote Code Execution Tool
Public PoC Released for Windows NT OS Kernel Privilege Escalation Vulnerability
Hackers Let Victims Complete MFA Then Steal the Entire Microsoft 365 Session
Kali365 Phishing Kit Abuses Microsoft Device Codes to Hijack Microsoft 365 Accounts
What 434 AI-Generated Vulnerabilities Reveal About Secure Software Development
Iranian Hackers Are Quietly Building Access They Can Turn Into Wartime Disruption
Apple Releases Fixes for Hide My Email Flaw that Exposes Users’ Real Email Addresses
Upbound says hack caused $13 million in fraudulent Acima leases
South Korea discloses data breach impacting diplomats worldwide
Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
How enterprise GenAI can amplify ransomware risk — and how to contain it
New InfraTrust report reveals infrastructure flaws admins should patch first
Adobe Chrome extension flaw let sites access private WhatsApp chats
CISA orders urgent action on actively exploited Langflow RCE flaw
Stop renting storage space — this lifetime 2TB plan is yours for $59
Microsoft to stop Exchange 2016 / 2019 security updates in October
Chick-fil-A discloses data breach after credential stuffing attacks
OpenAI says its AI models hacked Hugging Face during testing
– MTZ