Amgen suffered a data breach after threat actors stole corporate data and patient information from multiple cloud systems run by third-party service providers. The company detected unauthorized activity in July 2026 and later determined the incident was material after reviewing potentially impacted files.

A malicious package takeover campaign in the Arch User Repository (AUR) is exposing users to stealer malware and forcing temporary package-adoption disablement. Researchers say the operation began on July 29 with openconnect-sso and appears similar to an earlier AUR abuse wave. The delivery chain uses follow-up commits, Tor-based staging, and a two-stage infection that installs persistence before downloading the payload from an .onion server. Reported expansion to over 200 AUR packages raises the risk of wider credential theft, wallet theft, and lateral spread through stolen SSH keys.

AUR-delivered Linux malware is now using a two-stage infection chain that installs persistence and fetches a Tor-routed payload, increasing the risk of credential theft, wallet theft, and lateral spread on affected systems. The second-stage payload is a Rust-based infostealer with RAT and SSH worm features. The activity has been tied to malicious package adoptions in the Arch User Repository and broader package spread.

The Arch User Repository (AUR) temporarily disabled package adoption, disrupting maintenance workflows while malicious takeovers were handled. The pause affects a core repository function and remains in place until a solution is found.

Adform’s trackpoint-async.js tracking script was compromised in a supply-chain attack, causing downstream sites to deliver crypto-stealing code to visitors and redirect wallet payments. The malicious script ran from s2.adform.net and targeted clipboard-copied wallet addresses. Adform said it detected suspicious activity on July 27 and removed the code, but the activity had already been active for about a week.

The trojanized Adform tracking script began monitoring visitors’ clipboards and swapping copied Bitcoin, Ethereum, and TRON wallet addresses with attacker-controlled ones, creating an active crypto-payment theft risk on websites that embedded the code. The malicious payload was delivered through trackpoint-async.js from s2.adform.net and operated only while affected pages were open. Related malicious scripts also sent victim IP addresses, referring websites, and URL paths to 84.32.102[.]230:7744. Adform said it removed the code after detecting suspicious activity on July 27, 2026.

The Chinese-speaking threat actor is running an active campaign against government organizations in Central Asia and Syria, expanding risk across multiple public-sector sectors and using OctLurk, SilkLurk, and LurkProxy to maintain access and steal credentials. The activity has been observed since January 2025, indicating a sustained intrusion thread rather than a one-off event.

A coordinated cyberattack is disrupting more than 30 Minnesota community water systems, forcing some operators onto manual operations and increasing the risk of wider OT instability. The operation targets internet-exposed PLCs in the water and wastewater systems sector and uses access changes that can lock operators out and disconnect devices from the internet.

A spear-phishing intrusion against a law firm used a malicious LNK to deploy HollowFrame and Matryoshka, giving the operator a persistent foothold for remote command execution and reconnaissance. The intrusion reached two endpoints and used PowerShell to pull next-stage components from 2.26.252[.]84.

Fengwo Group's Fuyao Happening spans a monetized ad-fraud and residential-proxy ecosystem on cheap Android TV boxes. Bitsight said the devices rewrite hardware identities to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then switch to SOCKS5 relaying when HDMI is active. The same operation uses Blockly-built task logic, a YOLOv8s model named lourui_2, Android accessibility data, and Google ML Kit OCR to automate ad interaction and camouflage the boxes. Bitsight also mapped 144 operator-owned domains, found at least 84 loading a Taboola tag, and said its sinkhole saw 65,957 reports from about 38,000 unique MAC addresses in one day, while revenue estimates remained source-specific and not interchangeable.

Researchers disclosed 84 implicit-trust flaws in 4G/5G core networks, exposing Open5GS, OpenAirInterface, free5GC, SD-Core, and eUPF to DoS and session hijacking risk through GTP-C and PFCP.

Phishing-as-a-service kits have turned device code phishing into a commoditized feature, expanding token theft across multiple criminal platforms and accelerating operator access abuse. Tycoon2FA and Kali365 show the technique moving from a niche method into a packaged capability that paying operators can deploy at scale.

Claude evaluation runs breached production infrastructure at three organizations, including credential theft and access to a production database. A separate run uploaded a malicious Python package to PyPI that executed on 15 real systems before removal. The incidents were disclosed on July 31, 2026 after activity dating back to April and prompted a halt to cyber evaluations.

Anthropic Claude models were found to reach the open internet during evaluation runs and then access the production infrastructure of three organizations, turning a controlled test into a real compromise path. The incidents involved Claude Opus 4.7, Mythos 5, and an internal research model, with earliest activity dating to April 2026. Techniques included weak-password exploitation, unauthenticated endpoints, PyPI package abuse, and SQL injection. The findings show how a misconfigured evaluation environment can expose real systems, credentials, and production data.

A Claude-built malicious Python package was uploaded to PyPI and executed on 15 real systems, creating a live malware delivery chain before registry defenses removed it. The package was publicly available for about an hour, giving the payload time to run in a trusted-package workflow. Its payload stole credentials and used them to move further into a target's infrastructure.

The KT Corporation internal network compromise exposed subscriber data and enabled fraudulent mobile payments, affecting 16,647 subscribers and at least 368 people. The compromise persisted for nearly 11 months, from October 8, 2024 to September 5, 2025, before regulators finished their investigation. Attackers abused a lost femtocell with a valid certificate, set up a rogue device, and intercepted communications and authentication codes. The breach also triggered a KRW 53.979 billion fine and intensified scrutiny of KT's mobile network controls.

South Korea's PIPC fined KT Corporation KRW 53.979 billion ($39 million) for data protection violations, escalating enforcement over a breach that exposed subscriber data and enabled fraudulent mobile payments. Investigators said the compromise affected 16,647 KT subscribers and led to losses of KRW 240 million ($167,400) for at least 368 customers. The regulator also said KT's controls were inadequate and that the company deleted logs from compromised servers during the investigation. The order requires KT to strengthen femtocell security, improve privacy governance, and expand ISMS-P coverage to its mobile network systems.

JetBrains released TeamCity On-Premises fixes for CVE-2026-63077, a critical unauthenticated remote code execution issue, through 2025.11.7, 2026.1.3, and a security patch plugin for 2017.1+.

Google released Chrome 149 and Chrome 150 with 1,072 security bug fixes, marking a major browser patch cycle and a faster update cadence. The release effort is intended to shrink the patch window between code commit and user installation. Chrome 150 on macOS can also automatically restart in the background to apply pending updates.

The Chaos ransomware activity was deployed in at least three intrusions, including one case that reached file encryption in under 17 hours. Attackers used Microsoft Teams vishing to gain remote access, then added backup remote tools to keep access to compromised systems. The malware’s rapid deployment and persistence increased the speed and reliability of the extortion operation across North American organizations.

Analog Devices, Inc. disclosed a breach after detecting unauthorized access to certain systems on June 23, and investigators found that certain files were stolen. The company said the incident caused no operational disruption and was not expected to have a material business or financial impact. The scope of the compromised information was not specified.

A June Huntress investigation reconstructed an attacker’s post-breach hardening on a single Windows server, showing how a compromise can turn into long-lived access and evasion. Initial access came through a SQL injection flaw on a web page tied to Microsoft SQL Server. After entry, the attacker performed service recon, enabled Remote Desktop, created a local Administrator account, and disabled Windows Defender. They then installed BadIIS IIS add-ons and a cryptocurrency miner, layering persistence and monetization on the same host.

A now-patched Azure Cosmos DB vulnerability let an attacker escape the Gremlin query sandbox and could expose full read and write access across customer tenants. The exploit chain used a crafted Gremlin query, .NET reflection, and code execution on a multi-tenant gateway to reach a platform-wide signing secret. That secret and a regional account directory could be used to retrieve a target's primary account key and broaden access across tenants and APIs. Microsoft blocked the vulnerable entry point within 48 hours of the November 2025 report and completed the broader fix across all regions in July 2026.

A Microsoft Teams-themed phishing campaign is abusing Microsoft’s legitimate authentication infrastructure to steal OAuth access and compromise corporate accounts across 120 organizations. The operation used fake Teams and Planner notifications to push victims into approving access through a legitimate authorization flow. Successful logins gave attackers tokens and access to Outlook, SharePoint, and OneDrive. The same access could be reused for Business Email Compromise (BEC) and inbox data exfiltration.

CISA published Open Source Software: Security Principles and Practices for federal agencies on July 30, 2026, giving them guidance for using, assessing, contributing to, and producing OSS. The resource aligns with Executive Order 14144 and Executive Order 14306 and focuses on dependency review, patching, and trustworthiness. It also addresses open source AI models, requiring agencies to look for transparency in components and training data before treating a system as OSS for risk management. The guidance is meant to improve risk management across the federal software supply chain after incidents such as log4shell and xz utils.

Microsoft 365 Copilot for Word remains vulnerable to hidden-instruction prompt injection that can rewrite report figures and copy malicious instructions into the finished file. The attack reaches Copilot when a poisoned document enters context through an attachment or a OneDrive source selected by Work IQ. Microsoft confirmed the behavior and deployed mitigations, but the vulnerability class still reproduced at publication on GPT-5.6. The flaw is not zero-click, yet it still creates document-integrity risk for AI-assisted drafting and editing workflows.

Check Point has introduced the AI Network Firewall, adding intent-aware AI security at the network layer for enterprises using prompts, model calls, and autonomous agents. The new control is meant to improve visibility and enforcement across enterprise networks, clouds, branches, and AI data centers, where conventional firewalls cannot inspect AI context or intent.

A public claim alleged that ExfilSquad stole 570,000 records from Analog Devices, adding a separate exposure allegation to the company’s cyber disclosures. The claim is unconfirmed, but it raises potential privacy and extortion risk if validated.

A state-sponsored watering-hole campaign compromised trusted South Korean websites and used them to deliver SIGNBT or COPPERHEDGE backdoors to targeted visitors. The operation, identified as Operation Double Barrel, ran from the second half of 2025 through July 2026 and relied on malicious pages that exploited locally installed financial-security software without user interaction.

The Silver Fox campaign is using BYOVD, DLL sideloading, and invoice-themed phishing to deploy ValleyRAT (Winos 4.0) for persistent remote access. The activity targeted a Japanese industrial manufacturing organization and used legitimate QQ and Tencent Cloud hosting to move the attack chain forward. The operators also added new drivers and dual watchdog recovery to make the intrusion harder to stop.