[dysphoria]

July 29, 2026

• PhantomEnigma is delivering malware through hijacked legitimate government websites (Hackread). Hunt.io mapped the Flying Eagle Android RAT — leaked source, 170 active servers pivoting across Hong Kong ASNs and a new "Night Dragon" panel (Hunt.io). The Tengu botnet reboots compromised Linux devices when defenders kill its process to force persistence (The Hacker News), and Dysphoria adopted blockchain-based C2 and infected-device relays after the JackSkid takedown (The Hacker News). · Threat Activity

in Artifactory Zero-Days Confirmed as the Hugging Face AI Agent's Escape Route

July 28, 2026

Agentic AI Muscles Into the Offensive Toolkit

PortSwigger released Burp AT, an agentic-AI testing tool, while researchers demonstrated the first fully AI-written iOS jailbreak (Relaxin) for Apple devices with SPTM protection. Microsoft launched MAI-Cyber-1-Flash, a security model scoring 96% on CyberGym benchmarks for autonomous attack/defense simulation. Multiple zero-day exploits surfaced including a pre-auth vBulletin RCE (CVE-2026-61511), an exploited Arista VeloCloud zero-day, an n8n sandbox escape, and active FastJSON2 exploitation against US firms, while Hugging Face published a CISO post-mortem of autonomous-AI intrusion revealing 17,000+ logged actions and lateral movement.