July 10, 2026
Valkyrie-bot deployed a WHQL-signed kernel rootkit (WindowsService.sys) operating as a device filter driver with ring0 memory-access capabilities, evading endpoint detection through novel persistence primitives. GodDamn ransomware, a rebrand of Beast, uses the PoisonX Microsoft-signed kernel driver to neutralize EDR in attacks against US companies, continuing BYOVD abuse tactics. Microsoft patched RoguePlanet (CVE-2026-50656), a privilege-escalation flaw in Defender's mpengine.dll that grants SYSTEM access, after a researcher published a PoC following June Patch Tuesday. A pre-auth remote-code execution zero-day in OpenWRT (claimed CVSS 9.6) was disclosed affecting routers; the same vulnerability technique also impacts Horde, Django, WordPress, GitLab, and Dropbear.
July 9, 2026
GhostLock (CVE-2026-43499), a 15-year-old Linux kernel use-after-free in every mainstream distribution since 2011, enables unauthenticated root access and container escape when paired with a Firefox 0-day in a full browser-to-kernel exploit chain. GhostApproval symlink flaws in six AI coding assistants (Amazon Q Developer, Claude Code, Cursor, Google Antigravity, Windsurf, Augment) allow booby-trapped repositories to redirect file writes and achieve RCE via misleading confirmation dialogs. CISA added actively-exploited Adobe ColdFusion (CVE-2026-48282) and Langflow auth-bypass flaws to its KEV catalog, with the Langflow issue matching the JADEPUFFER operator's exploitation from the prior week. AI agents are lowering the barrier for less-skilled attackers: hallucination-squatting registers fake package names that models invent, delivering malware to developers, while researchers demonstrate that agents scanning untrusted code for bugs can instead execute the attacker's payload on the analyst's machine.
June 26, 2026
Gaslight, a Rust-based macOS stealer, is the first malware documented to embed prompt-injection payloads designed to sabotage AI-assisted malware analysis. ESET published a detailed breakdown of Gamaredon's 2025 arsenal, revealing six new PowerShell downloaders and extensive infrastructure laundering targeting Ukrainian government and military entities. Multiple critical vulnerabilities are being actively exploited, including CVE-2025-52465 in GeoServer for credential theft and CVE-2026-8461 in FFmpeg for remote code execution. curl patched a 24-year-old credential-leak vulnerability (CVE-2026-9079) alongside four additional flaws affecting SSH, STARTTLS, and proxy authentication.
June 25, 2026
Cisco Catalyst SD-WAN Manager zero-day CVE-2026-20245 allows attackers to escalate from admin accounts to root by uploading malicious CSV files, as disclosed by Mandiant. Microsoft and Europol disrupted the shared infrastructure behind Amadey and StealC infostealers in Operation Endgame, recovering ~27M credentials and seizing over $47M. Anthropic alleges Alibaba illicitly extracted capabilities from Claude, highlighting emerging model-distillation IP-theft disputes. A stealthy Mistic RAT serves as entry point for initial-access broker Woodgnat (aka KongTuke), feeding multiple ransomware families including Qilin, Interlock, and Black Basta.