ICYMI: 2026-07-23
Latest Headlines
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
How Synthetic Identity Fraud is Coming for Machine Identities
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
For Taylor Swift, Madison Square Garden’s Controversial Cameras Briefly Went Dark
OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider
Is Patching Dead? Vulnerability Management in the Post-Mythos Era
Chick-fil-A Accounts Get Fried in Credential Stuffing Attack
Abstract Raises $25 Million to Expand Composable Security Operations Platform
Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models
Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses
New Check Point Zero-Day Vulnerability Exploited in the Wild
US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices
Hackers Abuse Notepad++ Plugins to Compromise Your System Silently
Chaos Ransomware Turns Your Chrome and Edge Web Browser Into an Invisible Malware Command Channel
Hackers’ OPSEC Mistake Exposed a Global Espionage Campaign and Its New TriBack Malware
Next.js Patches Nine Security Flaws Enabling SSRF, Authentication Bypass, and DoS Attacks
Exim Directory Traversal Vulnerability Enables Privilege Escalation Attacks
Hackers Abuse GitHub Actions to Exploit cPanel and WHM Servers and Steal Cloud Credentials
Fake Bahrain Civil Defense App Deploys Android RAT to Steal PINs, OTPs, and Banking Credentials
Google’s New “Selfie Video” Identity Verification Feature to Gain Access to Locked Accounts
Windows 11 and Server 2025 Exposed to High-Severity Brokering File System Vulnerability
New Dolphin X Malware Steals Credentials From 300+ Apps and Profiles Victims With AI
Australian energy provider Origin says data breach exposes client data
Fake Claude app promoted by Bing ads pushes SectopRAT malware
Russian hackers exploit Zimbra zero-click flaw for email theft
Hackers abuse Notepad++ plugins to stealthily install malware
Microsoft 365 outage affects Teams, SharePoint and other services
FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires
EU fines Google $1 billion for search, app store antitrust violations
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
Microsoft working to fix Exchange Online mailbox quarantine issue
Check Point warns of SmartConsole zero-day exploited in attacks
– MTZ