Cybersecurity July 2026
Global headlines curated by our intelligent agents.
Latest News
Anthropic found Claude hacking real companies during supposedly sealed tests
Anthropic reviewed its cyber tests after OpenAI’s incident and found Claude had also reached the internet and hacked real companies.
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
HollowFrame and Matryoshka use DLL side-loading and GitHub C2 to gain a persistent foothold on two law firm endpoints.
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Push tracks 25-plus device code phishing kits that bypass passkeys; Barracuda counted 7 million attacks in four weeks.
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Chinese-speaking actor used DeepSeek through Hermes Agent to launch attacks after one Telegram instruction in a 460-plus-target operation.
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations
Anthropic says 3 Claude models breached real organizations after misconfigured CTF evaluations exposed them to the open internet and production system
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
DPRK-linked macOS malvertising uses fake updates and ClickFix to install a backdoor that fetches a stealer targeting 157 crypto wallets.
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
Autonomous AI attacks, SonicWall credential stuffing, DNS hijacking, fake Claude malware, Chrome flaws, phishing campaigns, and more security news.
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
Azure Cosmos DB's Gremlin flaw let Wiz escape the sandbox and retrieve an account key. Microsoft found no unauthorized activity outside Wiz's testing.
The Network Has Become the Control Plane for AI Security
Check Point launches an AI Network Firewall to inspect prompts, model calls, APIs, and agent activity across enterprise networks.
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
State-sponsored hackers used compromised South Korean websites to exploit AnySign4PC and install SIGNBT or COPPERHEDGE without a download prompt.
This new app lets you root your Galaxy flagship without tripping Knox or unlocking the bootloader
Root My Galaxy is an open-source tool using the GhostLock Linux exploit for temporary root access on select Samsung Galaxy flagship phones.
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential rotation and device re-imaging.
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
Cisco FMC flaw CVE-2026-20316 is under active exploitation, letting unauthenticated attackers use static credentials to access sensitive data
Trump considering AI controls after OpenAI hacking incidents
It marks a change of tone for his administration, which has taken a more hands-off approach to the technology.
Yaga Showrunner Kat Sandler Talks Baba Yaga Being the 'OG Bad Girl of Fairytales'
IGN spoke with the showrunner and executive producer of Yaga, Kat Sandler at San Diego Comic-Con, along with cast members Clark Backo and Noah Reid.Yaga is based on the play by the same name created by Sandler, which is drawn from the Slavic folktale of Baba Yaga.In speaking about what it was like bringing the story to the screen, Sandler said, "The fun thing about transitioning something from theater to film is you get to put so many more Easter eggs visually in it. You get to direct the eye with the camera to highlight lots of little tiny pieces and really build the mystery, build the sex, build the horniness by just being able to zero in on it a lot more, rather than just seeing one big picture of it."When asked if the series has given Sandler interest in revisiting the play, she laughed, saying, "No, no. The play exists in its own thing, and it has now moved into something completely different with these wonderful, fabulous people (pointing to Reid and Backo) and Carrie-Anne and Hudson, and I can't wait to see where this version of it goes."In terms of what drew Sandler to the tale of Baba Yaga to begin with, Sandler said, "she's always just been this incredible figure of wisdom and rage, and she's one of the only witches I think that has a name across all of these countries. She's such a big figure in Eastern European folklore, and she has this kind of very ambiguous moral code that was really resonant for me as someone looking to adapt things about female anti-heroes. I really grew up with Dexter and Hannibal and I was like, "can we do this but with a woman?' and still find it viciously entertaining and so fun and so sexy and really be along for the ride with her, enjoying her being the OG bad girl of fairytales."Backo dug into her character, Detective Carson, explaining she's the practical one, and is very grounded and disciplined, while also intentionally focusing on protecting women."(She's) very skeptical of the case and this one (pointing to Reid). She believes deeply in the importance of her job as a cop to serve and protect. And I think she especially underlines protecting women, and understands the vulnerability in being a woman in this world – obviously because she is one herself – but also because its very apparant all around us that we live in a patricarchal society that does not lend well to the safety of women."Even though Yaga has been described as a dark, mystery-thriller show, Reid and Backo spoke of the humor and comedy included as well, with the series sounding like a mash-up of multiple genres."I feel like this show really is a '90s detective movie wrapped in a pulpy rom-com with a dark, mythological thriller in it," Reid said. "I feel like the shift of that within the show is one of the things I love. And as a performer, one of the things I love so much is the switch of gears that way, from moments that feel like they are romantically-driven to comedy-driven to thriller/horror-driven."Backo shared her thoughts saying, "I think the way that she (Sandler) blends all these genres together, especially using humor and comedy to be able to dive into extremely complicated, fragile, and complex themes – I think it just invites everybody to be able to pause and really think about, what does justice really look like? What does it look like when justice is served? Who are the monsters? What does good and evil really mean and look like?"Backo added, "What she (Sandler) does so well, is keep it ambiguous, right until the end. And you kind of have to sit with yourself and decide 'what would you do?' in these peoples' positions."Jessie Wade is Associate Director of Editorial Programming at IGN. You can find her watching the latest rom-com and drama shows, reading a ridiculous amount of fiction books, and throwing herself into way too many hobbies.
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
CVE-2026-66066 could expose Rails server files through image uploads, leaking secrets that may enable RCE or lateral movement.
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Ruflo CVE-2026-59726 exposes an unauthenticated MCP bridge that could enable RCE, LLM key theft, conversation access, and AI memory poisoning.
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom fixes two critical VMware vCenter flaws and a VMXNET3 ESX escape, with no evidence of exploitation in the wild.
Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline
A coordinated cyberattack targeted more than 30 Minnesota water systems, disrupting a plant and cellular links while affecting automated controls.
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
A fraud campaign active since 2017 uses nearly 100 clone domains to steal advance payments from international B2B buyers.
Mythos Asks the Right Question. It Doesn't Answer It.
50,000 findings sorted by CVSS isn't a priority list. See the 12 that reach a crown-jewel asset.
Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
Nebula says CVE-2026-10702 lets a malicious webpage compromise Tor Browser and start an Android 17 root chain.
OpenAI’s rogue AI agent didn’t stop at hacking Hugging Face
New details reveal OpenAI’s agent hacked several other companies, intensifying already heightened concerns over advanced AI safety.
We’re running out of reasons to ignore AI safety
In the aftermath of OpenAI’s attack on Hugging Face, experts say it’s time for everyone to take security far more seriously.