GitHub Dependabot and PyPI added time-based controls that slow malicious package adoption and restrict late release tampering across the software supply chain. Dependabot now defaults to a 72-hour cooldown, while PyPI rejects new files for releases older than 14 days. The changes are meant to reduce exposure to newly published malicious packages and release poisoning. The rollout tightens package trust windows after a run of supply-chain attacks across both ecosystems.

A ClickFix lure on Steam discussion forums now turns fake troubleshooting replies into XMRig infections on Windows computers. Victims are told to run an administrator PowerShell command, and the command quietly downloads the miner from msfconfig[.]icu and launches it locally. The payload also creates a Microsoft Defender exclusion and sets up startup persistence, increasing the chance the miner stays active.

An ongoing ClickFix campaign on Steam discussion forums is tricking users into running PowerShell commands that install XMRig cryptominers. The operation abuses help threads about game crashes and other problems to gain execution on victim machines. It turns a seemingly helpful fix into a malware-delivery path that can persist across reboots.

The SourTrade malvertising campaign targets retail traders and cryptocurrency investors by impersonating TradingView, Solana, and Luno. It operates across 12 countries and 25 languages, with activity reported since late 2024 and concentration in Asia Pacific and Latin America. The campaign’s delivery chain assembles malware locally in the browser to reduce detection, using ServiceWorker and SharedWorker logic to build a unique payload. Earlier reporting also shows an older StreamSaver.js-based download path, indicating an evolving delivery chain that still ends in a Windows executable.

A sextortion email campaign is using leaked email addresses and ShinyHunters impersonation to demand $2,000 in Bitcoin, broadening abuse of previously exposed breach data. The messages claim device compromise and threaten to release intimate videos, but there is no indication the sender accessed devices, installed malware, or monitored activity. The operation has reused addresses from published leaks tied to Amtrak, Hallmark, Substack, Betterment, CarGurus, ADT, Panera Bread, and McGraw Hill. The campaign appears to have begun in April and has generated similar reports across multiple people and organizations.

CVE-2026-16723 is a Fastjson RCE affecting Spring Boot fat-JAR deployments, letting attacker-controlled JSON execute with the Java process's privileges. ThreatBook and Imperva said they saw in-the-wild exploitation, while Alibaba had not released a fixed Fastjson 1.x build as of July 25. The confirmed chain requires Fastjson 1.2.68 through 1.2.83, a network-reachable parser path, and SafeMode left disabled. Mitigations include enabling -Dfastjson.parser.safeMode=true or using com.alibaba:fastjson:1.2.83_noneautotype.

Alibaba issued SafeMode mitigation guidance for Fastjson 1.x after CVE-2026-16723, giving affected organizations a temporary defense against unauthenticated code execution in reachable Spring Boot deployments. The advisory says operators that cannot migrate immediately should enable `-Dfastjson.parser.safeMode=true` or switch to `com.alibaba:fastjson:1.2.83_noneautotype`. Fastjson2 remains the long-term fix, and no fixed Fastjson 1.x release was available as of July 25.

The insurance-focused phishing campaign now uses Google Ads, lookalike domains, and real-time OTP relaying to hijack sessions before victims notice. The operation spans Saudi Arabia, Europe, the United States, and India, broadening exposure across multiple insurers. Instead of delayed credential theft, attackers can complete login and take over accounts during the same browsing session. That raises the risk of immediate access to customer data, policy records, and payment information.

The Cl0p campaign is targeting internet-exposed PTC Windchill and FlexPLM deployments in a data extortion operation, with CVE-2026-12569 enabling unauthenticated remote code execution and JSP web shell deployment. Researchers said the attackers chain a FlexPLM WSDL information disclosure with a flaw in the Windchill login servlet, then enumerate file systems, stage engineering and design data, and steal sensitive product data. The activity has hit manufacturing, automotive, aerospace, and retail sectors, while PTC issued patches and CISA added the flaw to its Known Exploited Vulnerabilities catalog. Companies have also received extortion emails from [email protected].

DevMan has consolidated its RaaS affiliate portal, tightening control over payload creation, victim handling, and payouts across its criminal service network. PRODAFT tracks the operation as Funky Mantis, and the portal's v3 update in January 2026 added structured victim records, lifecycle states, team controls, deadline tracking, and revenue fields. The platform also bundles build generation, finance, victim chat, support, and access brokerage, giving administrators more leverage over affiliate activity and attack tempo. That structure reduces affiliate autonomy and helps the operators scale multi-victim extortion while steering attacks toward targets outside the CIS and Serbia and toward SCADA-related operations.

The DevMan ransomware locker now supports payload builds for Windows, ESXi, and Linux, expanding the operation's reach across server and workstation environments. Analysis of the Windows build shows features for privilege checks, process and service termination, recovery inhibition, event log clearing, lateral movement, and multi-threaded encryption, all of which increase the impact of an infection. The locker also uses ChaCha20-Poly1305 and can self-delete, making remediation harder after deployment.

A public PoC exploit now shows an authenticated RCE path in GitLab that can run commands as git on vulnerable self-managed servers. The flaw affects GitLab CE/EE 15.2.0 through 18.10.7, 18.11.0 through 18.11.4, and 19.0.0 through 19.0.1, with the exploit demonstrated against GitLab 18.11.3. GitLab fixed the issue in 18.10.8, 18.11.5, and 19.0.2, and successful exploitation can expose source code, Rails secrets, service credentials, and CI/CD data.

Researchers published deep exploit analysis of Oj parser bugs in GitLab's notebook diff path, showing how callback-pointer corruption and a heap-address leak can be combined to drive authenticated RCE.

OnTrac confirmed a corporate network breach that may have exposed customer personal details, creating identity-risk exposure for customers. The company detected the intrusion on March 23 and found the attacker accessed certain files between March 20 and 22. OnTrac says it is not aware of fraud or publication of stolen information, but it is offering 12 months of credit monitoring and identity protection through CyberScout.

Compromised Wi-Fi gateways at hotels and conference centers are redirecting travelers to fake Microsoft 365 login pages, creating a live credential-theft campaign that can expose business email, documents, and other sensitive data. The operation has been active since at least June and has reached organizations across financial services, professional services, legal, health care, energy, and retail in the U.S. and abroad. Attackers are using DNS changes, device-code authentication tricks, and in some cases WPAD abuse to push victims onto attacker-controlled login pages and bypass MFA.

A maintenance-system bug triggered a massive Microsoft outage that disrupted access to Azure and Microsoft 365 services for customers tied to West US infrastructure. The disruption affected core collaboration and admin tools, including OneDrive, SharePoint Online, Teams, and the Microsoft 365 Admin Center. Microsoft reverted the networking change and said affected services had recovered by 3:41 PM ET. The event shows how an automated maintenance workflow can create broad availability and functionality failures across a large cloud stack.

BlueNoroff's ClickFix-style phishing campaign is using typosquatted Zoom and Microsoft Teams domains to deliver malware and steal Telegram sessions from high-value crypto targets. The operation combines trusted-contact compromise, wallet reconnaissance, and self-propagating messaging to turn one account takeover into the next. The result is a repeatable victim-acquisition pipeline that raises the risk of account theft, malware infection, and follow-on targeting across the cryptocurrency sector.

Microsoft's July 14 update patched CVE-2026-54121 in Active Directory Certificate Services (AD CS), closing an improper authorization flaw that could let a low-privileged domain user impersonate a Domain Controller. The release matters because the resulting credential path could reach DCSync and expose krbtgt. Administrators running an Enterprise CA were told to install the update on AD CS hosts.

Microsoft Active Directory Certificate Services (AD CS) CVE-2026-54121 now has a public working exploit, exposing low-privileged domain users to Domain Controller impersonation and DCSync risk.

Europol led a takedown referral action against The Com, flagging 4,340 URLs for removal to disrupt an extremist online ecosystem and generate new investigative leads. The multi-week Referral Action Days operation involved investigators from nine countries between June and July 2026. The targeted content included self-harm, CSAM, grooming, extortion, doxing, swatting, and violent attack material.

AegisAI raised $36 million in a Series A led by Battery Ventures, giving the email security startup capital to expand AI detection agents and its enterprise go-to-market. The round also included Accel and Foundation Capital, and it lifted the company’s total funding to $49 million. AegisAI is using the money to push Vanguard toward general availability and scale its phishing and business email compromise defense platform.

ReliaQuest issued mitigation advice for DNS poisoning that can redirect legitimate traffic and expose endpoints to credential-harvesting. The guidance targets operators of hotel and other captive Wi‑Fi environments facing the same attack surface. It recommends preventing the poisoning from reaching endpoints, eliminating the attack surface, and detecting credential-harvesting activity if it occurs.

An ongoing DNS poisoning campaign is redirecting traffic from hotel and conference venue Wi‑Fi routers to harvest corporate login credentials, putting traveling employees and their accounts at risk. The operation uses exposed management interfaces and weak or reused admin credentials to take control of public Wi‑Fi gateways. Compromised gateways have been seen across multiple US cities, India and Saudi Arabia, showing a geographically broad operation. The attack can capture sensitive information without phishing links or malicious attachments by funneling legitimate domains through attacker-controlled infrastructure.

OpenAI addressed AgentForger in ChatGPT Workspace Agents / Agent Builder, closing a flaw that could let a single phishing link create and deploy an autonomous agent inside a victim organization.

OpenAI's ChatGPT Workspace Agents faced a cross-site request forgery (CSRF) flaw that let a single phishing link create and deploy an attacker-controlled agent inside a victim organization's trust boundary. The bug, dubbed AgentForger by Zenity Labs, could run in a logged-in user's session and turn approved connectors into a persistence mechanism. OpenAI addressed the issue on June 8, 2026, closing a path to unauthorized agent creation, internal reconnaissance, and data theft.

A crafted SVG in Bing image search triggered OS command injection in Bing image-processing workers, causing code execution as NT AUTHORITY\SYSTEM on Windows and root on Linux through CVE-2026-32194 and CVE-2026-32191.

The Kyle Svara campaign used social engineering to phish Snapchat access codes from a large victim pool, enabling account takeover and the theft of intimate photos. The operation ran from May 2020 to February 2021 and reached more than 4,500 victims, making it a sustained credential-theft and privacy-abuse campaign.

Private nude and semi-nude photos from approximately 517 Snapchat accounts were stolen and later traded or sold online, exposing intimate images from over 750 women. The leak stemmed from credential theft and unauthorized account access rather than an open public database dump. The actor also used two-factor authentication to lock victims out after the theft. The result was a privacy breach that enabled further redistribution of highly sensitive images.

Phishing impersonation of technology brands rose in Q2 2026, with ChatGPT entering the top 10 of most impersonated brands for the first time and signaling growing attacker attention toward AI services. Microsoft remained the most impersonated brand at 23% of all attempts, showing how heavily major tech platforms are still abused for brand-phishing lures.

Thailand's Ministry of Finance is linked to a post-exploitation intrusion in which an operator used Hermes AI agent in unattended YOLO mode to automate activity inside the ministry network. Hunt.io and Bob Diachenko tied the activity to July 9–July 13-era artifacts from three exposed directories on a server hosted in Hong Kong, with 585 files totaling about 470 MB that included web shells, stolen credentials, and Hermes logs. The recovered material points to checks for root access, filesystem crawling, and access to staff records dating to 2012, while the ministry has not confirmed a breach and the recovered files do not show data leaving the network.