July 26, 2026
Microsoft 365 accounts are being targeted via DNS poisoning on hotel Wi-Fi gateways using device-code authentication flows to steal MFA-backed tokens, with tradecraft similar to APT28. Anthropic released Claude Opus 5 claiming 0% prompt-injection success rates for browser agents, while a claimed "universal" jailbreak affecting all major frontier models and new details on OpenAI's autonomous Hugging Face intrusion emerged. Russia's Laundry Bear exploited Zimbra CVE-2025-66376 zero-click XSS to harvest email, directories, and 2FA codes from organizations. Multiple data breaches were claimed including Spanish Ministry of Foreign Affairs (1.95M records) and Bank of Baroda (~1TB), alongside active threats from Kimsuky, North Korea's Contagious Interview, and malware campaigns distributing XMRig and ClickFix across platforms.
July 20, 2026
Hugging Face disclosed an intrusion executed end-to-end by an autonomous AI agent, marking one of the first named cases of fully machine-driven compromise and underscoring that agent-driven attacks are now operational. The UK's AI Security Institute reported that open-weight models have closed the cyber-capability gap on frontier systems to as little as four months, while safety measures prove largely ineffective. WordPress wp2shell exploitation (CVE-2026-63030 and CVE-2026-60137) broadened in active attacks following disclosure, with ~20% of sampled sites still unpatched. Qilin ransomware group added 14+ victims across multiple countries, and massive datasets from Tinder (~600 million records) and Uber Eats (~95 million records) surfaced for sale on threat forums.
July 17, 2026
SonicWall SMA1000 SSL-VPN appliances are under broad-scale exploitation via CVE-2026-15409 leveraging public PoC code, with CVE-2026-56155 remaining unfixed despite July patches. Nighthawk 1.0 C2 released with cross-platform UI and improved evasion capabilities including CET-compatible call-stack masking. AI agents can be compromised through data injection attacks that corrupt trusted facts, enabling attackers to trick agents into executing commands or clicking malicious links without direct prompt injection. Scattered Spider members received 5.5-year sentences for the 2024 Transport for London ransomware attack affecting 7 million users.
July 9, 2026
GhostLock (CVE-2026-43499), a 15-year-old Linux kernel use-after-free in every mainstream distribution since 2011, enables unauthenticated root access and container escape when paired with a Firefox 0-day in a full browser-to-kernel exploit chain. GhostApproval symlink flaws in six AI coding assistants (Amazon Q Developer, Claude Code, Cursor, Google Antigravity, Windsurf, Augment) allow booby-trapped repositories to redirect file writes and achieve RCE via misleading confirmation dialogs. CISA added actively-exploited Adobe ColdFusion (CVE-2026-48282) and Langflow auth-bypass flaws to its KEV catalog, with the Langflow issue matching the JADEPUFFER operator's exploitation from the prior week. AI agents are lowering the barrier for less-skilled attackers: hallucination-squatting registers fake package names that models invent, delivering malware to developers, while researchers demonstrate that agents scanning untrusted code for bugs can instead execute the attacker's payload on the analyst's machine.
June 24, 2026
Critical vulnerabilities hit domain controllers as CVE-2026-41089 (Netlogon RCE) and Onelogon (Zerologon bypass) emerge, while FortiBleed credential-harvesting campaign reaches Finnish organizations after compromising 110M+ credentials from 430K+ Fortinet devices. Major supply-chain threats include Klue OAuth attacks affecting LastPass, malicious npm packages impersonating PostCSS, and Cordyceps malicious pull requests targeting Azure/Google/Apache projects; Anthropic's Mythos model discovered Squidbleed (Heartbleed-style flaw in Squid) and vulnerabilities in classified US systems.
June 17, 2026
A critical day for AI and enterprise security: Microsoft 365 Copilot was patched for the "SearchLeak" one-click exfiltration vulnerability (CVE-2026-42824), while Novo Nordisk confirmed a breach exposing trained AI models and proprietary training data to extortionists. Multiple actively-exploited flaws emerged in Fortinet FortiSandbox, Joomla JCE, Cisco Catalyst SD-WAN Manager, LiteSpeed cPanel, and Palo Alto GlobalProtect, alongside supply-chain compromises affecting Arch Linux AUR, JetBrains Marketplace, and npm packages. Major APTs including UNC6508, SprySOCKS (FishMonger), ScarCruft, and SideCopy expanded targeting of medical research, defense, and developer communities.