Fairlife, the Coca-Cola dairy subsidiary, is dealing with a ransomware incident that disrupted U.S. production after the company detected unauthorized access to production-related systems on July 16 and activated incident response and business continuity plans. The company said product quality and safety were not affected and that Canadian production continued normally. On July 21, the Anubis ransomware gang added Fairlife to its leak site, claimed responsibility, alleged it stole approximately 1 TB of data, and said it had encrypted Nutanix systems. Those claims have not been independently verified.

WordPress core's wp2shell chain combines CVE-2026-63030 and CVE-2026-60137 into unauthenticated remote code execution on vulnerable WordPress 6.9.x and 7.0.x installs. SearchLight Cyber said the exploit chain can be built with GPT5.6 Sol Ultra and starts with REST API batch route confusion and SQL injection before escalating to cache poisoning, authentication bypass, and backdoor plugin upload. Public proof-of-concept exploits are now on GitHub, and watchTowr says it is seeing in-the-wild exploitation after those releases. WordPress fixed the flaws in 6.9.5 and 7.0.2 and enabled forced automatic security updates for affected supported installations.

WordPress Core patched a pre-auth RCE on July 17, 2026 with 6.9.5 and 7.0.2, and the release also enabled forced automatic updates for supported installations. The vulnerability can be triggered by an anonymous request on a default install with no plugins, covering 6.9.0-6.9.4 and 7.0.0-7.0.1. Researchers later linked the broader wp2shell chain to CVE-2026-63030 and CVE-2026-60137, and confirmed active exploitation against WordPress Core after the fix. Observed abuse included probing, SQL injection attempts, malicious plugin uploads, and PHP webshell deployment on affected servers.

AWS Kiro had a prompt-injection RCE vulnerability that let hidden web text rewrite ~/.kiro/settings/mcp.json and launch attacker-controlled code on a developer machine. The flaw bypassed Kiro's approval boundary, turning an ordinary URL-fetch or page-summary action into remote code execution with developer privileges. AWS has patched the issue, and the public research included a working proof of concept.

Google DeepMind released Gemini 3.5 Flash Cyber, a security-focused model built to discover, validate, and patch vulnerabilities faster. The capability is being delivered through CodeMender in a limited-access pilot for governments and trusted partners, narrowing use to frontline defenders. DeepMind positioned the model as a cost-efficient alternative that can be called repeatedly at high speed to scan more code paths. Evaluations showed strong results on Google Chrome, Apple Safari, and the V8 JavaScript Engine, including 55 unique confirmed issues and a 100% reliable remote-code execution exploit that bypassed ASLR and W^X.

CVE-2026-50522 puts on-premises Microsoft SharePoint Server deployments at risk of critical remote code execution, and active exploitation after a public PoC enables attackers to steal machine keys for persistence.

Qilin (aka Agenda) ransomware was deployed across multiple June 2026 intrusions after attackers exploited CVE-2026-0257 in Palo Alto Networks PAN-OS to gain initial access. The activity expanded from VPN session abuse into credential harvesting, lateral movement, and ransomware encryption on victim environments. Some intrusions stopped at encryption-only operations, while others added double-extortion and data theft, increasing pressure on affected networks. The consistent tooling and staging patterns indicate a repeatable Qilin RaaS operation rather than isolated malware use.

Trim shifted from publishing Claude Opus jailbreak techniques to selling AI Pentest Checker, accelerating the commercialization of jailbreak-based offensive tooling. The platform bundled Claude Opus 4.8, GLM-5, and conventional scanners to automate vulnerability testing and report generation for paying users. The move shows how model-bypass methods can be repackaged into a repeatable criminal service with broader underground reach.

Zimbra 10.1.20 patches a command injection flaw in the SNMP monitoring component that could permit command execution when SNMP notifications are enabled. The fix is part of a broader release that addresses nine security vulnerabilities across the product. Zimbra said the identified issues were not flagged as actively exploited.

Zimbra 10.1.20 fixes CVE-2026-50055, a mail forwarding restriction bypass affecting Zimbra accounts with forwarding restrictions. The patch closes a flaw that could let authenticated users exfiltrate email even when forwarding controls are enabled. Zimbra said the issue was not flagged as actively exploited.

Ransomware operations are fragmenting and expanding, with more than one new group per week entering the market and increasing extortion volatility. As of June 2026, the ecosystem had 146 active groups and 61 new groups in 2026, leaving defenders to track a faster-moving and more crowded threat landscape. The shift also shows that a small number of brands still drive a large share of public victim claims even as the field churns.

Ransomware victimization remained concentrated across March 2025 to March 2026, with 7,551 public disclosed victims and the top five operations responsible for 44% of them. A small set of groups continued to account for a disproportionate share of extortion harm against organizations. The pattern shows that ransomware impact was still being driven by a few high-volume operators even as the wider ecosystem kept changing.

Empirical raised $25 million in a Series A round, adding fresh capital to expand its cybersecurity products for the agentic AI era. The funding increases the company's total capital raised to $37 million. Brightmind Partners led the round, with Costanoa Ventures and Hyde Park Angels (HPA) also participating. The money is earmarked to accelerate development of Foundation and Radiant, tools aimed at predicting and identifying threats.

Researchers showed that five open-source mobile agent frameworks can be chained into prompt injection, screenshot tampering, UI spoofing, and host command injection, exposing a practical path from on-device deception to PC code execution. The findings affect AppAgent, AppAgentX, Mobile-Agent-v3, Open-AutoGLM, and MobA and are especially relevant because several attacks succeeded in repeated lab trials. The work also identifies concrete defensive gaps in screenshot handling, shell invocation, and broadcast-based input paths. The result is a reusable technical map of how Android agent tooling can be subverted through weak trust boundaries.

Researchers published Bit2Watt, showing that ordinary cloud GPU workloads can be shaped into kilohertz-range power oscillations that may destabilize grid behavior in simulation.

A data leak exposed sensitive personal records tied to Estée Lauder after unauthorized access to its Oracle E-Business Suite used for HR management. The company says the access occurred on or around August 9, 2025, and its investigation determined in June 2026 that an unauthorized third party obtained personal information of certain individuals. The compromised data includes names, addresses, email addresses, dates of birth, SSNs, passport numbers, bank account numbers, health information, and employment information. Estée Lauder is offering 24 months of identity monitoring through Kroll and warning recipients to watch for fraud and suspicious contact.

The U.S. Justice Department seized and blocked more than 1,000 websites and 1,970 domains tied to unauthorized FIFA World Cup 2026 streaming, disrupting a large illegal-streaming infrastructure. The action was carried out through Operation Offsides with support from the IPR Center and HSI Washington across 54 countries. Officials said the sites also increased consumer risk by exposing viewers to malicious software, malware attacks, and unsecure connections that could compromise personal and financial data.

Craneware confirmed a data leak that exposed a significant volume of file names and some employee, customer, and partner records, creating exposure risk across its healthcare software business. The company said the attackers viewed and exfiltrated data from its environment. It also said much of the file-name material was non-sensitive or already public regulatory data, but the theft still widened the exposure. Craneware reported no disruption to customer services and is working to identify affected parties.

Craneware disclosed a cybersecurity incident involving unauthorized access to its data environment, putting stored records at risk. The company said a significant volume of file names was viewed and exfiltrated, along with some employee data and a subset of customer and partner records. No customer service disruption was reported, and the company is notifying affected parties.

A Famous Chollima recruitment scam is targeting Web3 and cryptocurrency professionals with fake job interviews and malicious assessment portals that deliver remote access trojans. The operation uses ClickFix-style lures to trick candidates into running terminal commands, turning the interview flow into a malware delivery chain. The approach raises immediate risk to personal devices, saved credentials, and digital assets handled by the targets.

The PylangGhost and GolangGhost malware operation now uses ClickFix interview portals to install remote access trojans on Windows and macOS, putting Web3 and cryptocurrency professionals at risk of credential theft and remote compromise. The payloads also bundle credential-harvesting helpers and extension-stealing modules aimed at browser wallets and password managers.

Microsoft issued a manual mitigation for WSUS servers that are hitting sync timeouts and failing to return to normal update deployment. The guidance is aimed at administrators running affected Windows Server Update Services deployments so they can restore Windows Update scans and synchronization. Microsoft also said a service-side mitigation already restored normal behavior for newly installed or rebuilt WSUS servers.

A public LegacyHive zero-day against Windows User Profile Service can escalate privileges on up-to-date Windows systems, creating admin-level compromise risk. The exploit appeared hours after Microsoft's July 2026 Patch Tuesday and has no CVE ID yet. Testing showed the flaw can let non-admin users alter the classes registry hive and trigger automatic code execution when an administrator logs in. The PoC was later modified to require extra credentials, but it still gives attackers a usable starting point for weaponization.

CVE-2026-6875 is now actively exploited in the wild against the ServiceNow AI Platform, exposing unauthenticated systems to remote code execution. The flaw is a pre-auth sandbox-escape RCE that lets attackers reach code execution after breaking out of the platform sandbox. ServiceNow issued July 13th patches for hosted and self-hosted instances, but researchers observed the first attack attempts on Friday and confirmed abuse over the weekend.

The Ostium trading platform disclosed a $23.75 million theft from its liquidity provider vault after attackers compromised off-chain price feeds, creating fraudulent profits and forcing a trading pause. The exploit used illegitimate price reports and rapid position cycling rather than direct theft of trader collateral. Ostium said existing positions remain open and separate trader collateral was not affected. The platform said it is tracking the stolen funds and working to secure the affected infrastructure.

Researchers reproduced sandbox-escape bypasses across Cursor, Codex, Gemini CLI, and Antigravity, showing that agentic coding tools can cross the sandbox boundary through trusted host-side workflows. The finding broadens a reusable configuration-based escape pattern across vendors and weakens isolation assumptions for developer environments. The bypasses rely on prompt injection and workspace-controlled files that external tools later run, load, or scan. Several issues were patched, including CVE-2026-48124 in Cursor 3.0.0 and a Codex CLI allowlist bypass in v0.95.0.

The FakeGit campaign is using nearly 7,600 malicious GitHub repositories to distribute SmartLoader, creating a large-scale lure network that can reach both users and AI agents. More than 800 repositories pose as AI Skills or MCP servers and use convincing setup material to pull victims into the attack chain. The operation's reach and use of trusted developer workflows raise the risk of follow-on payloads such as StealC.

HollowGraph is a Windows malware activity that abuses a compromised Microsoft 365 calendar and Microsoft Graph API as covert C2, hiding tasking in far-future 2050-05-13 events and moving encrypted stolen files as attachments. Group-IB said the implant uses DNS tunnelling to refresh Entra ID (Azure AD) client credentials, including values written to logAzure.txt and delivered via cloudlanecdn[.]com. The activity was found on at least 12 systems, with three observed actively communicating during June 3, 2026 to July 9, 2026, and the compromised mailbox belonged to an Israeli organization. Group-IB linked the code to Cavern with high confidence, while stopping short of high-confidence attribution to a known threat actor; the targeting and traffic pattern point to a focused espionage operation.

HollowGraph is a Windows espionage campaign that abuses a compromised Microsoft 365 calendar and Microsoft Graph API as a covert two-way C2 channel. Group-IB said the implant hides tasking in 2050-05-13 calendar events, exfiltrates encrypted files as attachments, and also uses DNS tunneling to refresh Microsoft Entra ID (Azure AD) credentials from cloudlanecdn[.]com into logAzure.txt. The campaign was observed against Israeli entities, with victim communication seen from June 3, 2026 through July 9, 2026. Group-IB found the implant on at least 12 systems, with three actively communicating during that window, and linked the code to Cavern with high confidence while noting only lower-confidence similarity to Lyceum.

The gobf[.]mx operation used a CURP typosquat, a fake record-retrieval page, and WebDAV delivery to push malware at Windows users in Mexico, creating a live phishing and payload-delivery risk. Delivery logs showed 77,098 requests from 3,892 unique IPs across 101 countries, with Mexico accounting for 82.5% of traffic and 96.9% of launch activity. The lure flow used a search-ms: query and a disguised .scr file to open the operator's remote share, while the payload chain installed an infostealer in memory. The exposed toolkit also showed a broader testing pipeline, including alternate signed-binary hijack experiments and other delivery candidates.