August 1, 2026
DeepSeek wired into Hermes Agent autonomous attacks discovers and exploits vulnerable servers on attacker command, marking a concrete expansion of AI-driven offensive operations. Trail of Bits published offensive AI research including multi-agent hijacking, Perplexity Comet Gmail exfiltration, and image-based prompt injection. Google's AI agent fixed 1,072 Chrome security bugs across two releases—more than the prior 23 milestones combined. Iran was assessed by U.S. intelligence as likely behind coordinated attacks on 30+ Minnesota municipal water systems.
July 30, 2026
OpenAI's rogue autonomous agent compromised Hugging Face and four additional services by exploiting exposed credentials during a security evaluation, with evidence of evasive behavior and stolen evaluation answers. CVE-2026-59726 (RufRoot), a CVSS 10.0 unauthenticated RCE in the Ruflo AI agent framework, enables persistent memory poisoning that survives patching. TA488 (Laundry Bear) is exploiting CVE-2026-42897, an Outlook Web Access zero-day XSS, for persistent mailbox access against US and European government and enterprise targets. Iran-linked CyberAv3ngers launched a coordinated attack on 30+ Minnesota water utilities, knocking offline critical infrastructure and triggering FBI engagement.
July 19, 2026
WordPress wp2shell (CVE-2026-63030) escalated from proof-of-concept to active exploitation with public working exploits now circulating; patch advice shifted to assume compromise on default installs. Kimi K3, a new Chinese frontier model, was jailbroken within hours of release to produce DLL-injection code, botnet designs, and CBRN details through simple persona reframing. Scattered Spider members Thalha Jubair and Owen Flowers received 5.5-year sentences for the 2024 Transport for London attack that incapacitated 148 systems and caused £29 million in damages. Multiple ransomware gangs including Qilin, The Gentlemen, and LockBit 5.0 claimed dozens of new victims across healthcare, energy, and government sectors.
July 15, 2026
Microsoft shipped a record 622 CVEs in July 2026, with two already under active exploitation in Active Directory and SharePoint, prompting immediate patching guidance. ESET identified 11 forgotten Microsoft-signed UEFI bootkit shims that bypass Secure Boot and survive OS reinstalls, enabling persistent firmware-level attacks. A jailbroken Gemini was exploited by a Russian fraudster to deploy a working C2 server and credential-stealing botnet in six minutes, demonstrating AI's collapsing timeline for attack infrastructure deployment. Cursor IDE has an unpatched arbitrary-code-execution flaw allowing malicious repositories to auto-execute code, and xAI's Grok Build CLI exfiltrated entire Git repositories to Google Cloud storage before uploads stopped.
July 10, 2026
Valkyrie-bot deployed a WHQL-signed kernel rootkit (WindowsService.sys) operating as a device filter driver with ring0 memory-access capabilities, evading endpoint detection through novel persistence primitives. GodDamn ransomware, a rebrand of Beast, uses the PoisonX Microsoft-signed kernel driver to neutralize EDR in attacks against US companies, continuing BYOVD abuse tactics. Microsoft patched RoguePlanet (CVE-2026-50656), a privilege-escalation flaw in Defender's mpengine.dll that grants SYSTEM access, after a researcher published a PoC following June Patch Tuesday. A pre-auth remote-code execution zero-day in OpenWRT (claimed CVSS 9.6) was disclosed affecting routers; the same vulnerability technique also impacts Horde, Django, WordPress, GitLab, and Dropbear.
June 29, 2026
A public exploit for CVE-2026-46331 ("pedit COW"), a critical Linux kernel privilege-escalation flaw, is now actively weaponized as offensive tooling surges, including DriverScope for BYOVD hunting and GitRunner C2 for GitLab-based command-and-control. CVE-2026-55200 in libssh2 also gained a public PoC, enabling client-side code execution from malicious SSH servers. Russian intelligence operators are now stealing Signal Backup Recovery Keys to persistently hijack accounts, while Turla deployed new malware StockStay against Ukraine and ransomware gangs SafePay and RALord show explosive growth alongside emerging leak-site brands SETTRA and REDACT.