ICYMI: 2026-07-27
Latest Headlines
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
Private Claude Chats Exposed in Google and Bing Search Results
PTC Windchill Vulnerability Exploited in Ransomware Campaign
MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection
Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out
Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials
Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits
DentaQuest Data Breach Potentially Impacts Over 23 Million People
Microsoft Defender for Endpoint Update Leaves Few Linux Servers Unprotected After Reboot
Critical vBulletin Flaw Lets Unauthenticated Attackers Execute PHP Code Remotely
GitHub Adds 3-Day Dependabot Cooldown to Block Malicious Package Updates
A Fake Teams Update Can Give Hackers Two Separate Ways to Control Your PC
Security Risk Advisors Named a Finalist in CRN’s 2026 Best of the Channel Awards
NVIDIA Launches Open Secure AI Alliance to Build Open-Source Defenses for AI Agents
Hackers Can Use MedusaHVNC to Control Your PC on a Desktop You Cannot See
Vatican’s Click to Pray App Exposes 700,000 Users Through Unauthenticated API Flaw
Wrench Attacks Bypass Encryption by Forcing Victims to Unlock Crypto Wallets
Arista patches VeloCloud Orchestrator zero-day exploited in attacks
New Certighost PoC exploit lets attackers hijack Windows domains
Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin
Ernst & Young data breach claimed by ShinyHunters extortion gang
Shadow AI agents are multiplying. Here’s how to find and secure them.
– MTZ