threat-intel When AppSec Scanners Become a Supply Chain Attack Vector Security scanners used in the software supply chain can be exploited to introduce vulnerabilities and compromise downstream systems. Researchers at ZeroPath discovered that attackers can craft malicious code repositories… Dark Reading · Jul 29, 2026 High supply-chainvulnerabilitysecurity
threat-intel Word worm crawls into Copilot, spreads chaos A group of Russian hackers are impersonating Signal support to launch phishing attacks, targeting users with links to malicious websites. Simultaneously, a zero-day vulnerability in on-prem SharePoint is being exploited,… The Register · Jul 29, 2026 High RUIRphishingzero-daysharepoint
vulnerability Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape Broadcom has released security updates to address three critical vulnerabilities in VMware products, including a virtual machine escape. These flaws allow for authentication bypass, code execution, and potentially unauth… The Hacker News · Jul 29, 2026 High CVE-2026-59309CVE-2026-59310CVE-2026-47876vulnerabilitypatchsecurity
threat-intel Laundry Bear’s webmail hackers had more in store after February, report says Laundry Bear, a Russian state-linked APT group, has been aggressively exploiting vulnerabilities in both Zimbra Collaboration Suite’s webmail platform and Microsoft Outlook Web Access (OWA) to steal emails and credential… The Record · Jul 29, 2026 High CVE-2026-42897NLUSRUaptvulnerabilityzero-day
threat-intel Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems Iranian-linked cyber actors, believed to be part of the CyberAv3ngers group, are suspected of launching attacks against Minnesota water systems. This indicates a broader trend of state-sponsored cyber activity targeting… The Register · Jul 29, 2026 High IRcyberattackcritical infrastructurestate-sponsored
threat-intel Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline A coordinated cyberattack targeted over 30 community water systems in Minnesota, leading to operational disruptions and communications failures. While the exact number of compromised systems remains unclear, the attacks… The Hacker News · Jul 29, 2026 High UNcritical infrastructureindustrial control systemscyberattack
threat-intel Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments A nine-year-old fraud campaign, originating in 2017, has been uncovered by cybersecurity firm F6, involving the creation of clone websites mimicking major Russian companies to steal advance payments from international cl… The Hacker News · Jul 29, 2026 High RUAZfraudclone websiteadvance payment
threat-intel US Bans Foreign-Made Humanoid Robots, Targeting China Over National Security The U.S. Federal Communications Commission is implementing a ban on new imports of foreign-made humanoid robots and power inverters, primarily targeting China due to national security concerns. This move follows a series… SecurityWeek · Jul 29, 2026 High CHUSchinaroboticsnational security
threat-intel Russia accuses Telegram founder of aiding terrorism, seeks international arrest Russia has formally accused Telegram founder Pavel Durov of aiding terrorism, seeking an international arrest warrant due to allegations that the messaging app was used by Ukrainian intelligence to organize terrorist att… The Record · Jul 29, 2026 High RUUKFRrussiatelegramukraine
threat-intel Mythos Asks the Right Question. It Doesn't Answer It. The article argues that AI-powered exploit discovery tools like Mythos are compressing the time between vulnerability disclosure and exploitation, but the real problem isn't faster patching – it's that most security team… The Hacker News · Jul 29, 2026 High vulnerabilitythreat-intelai
threat-intel Cyberattack hits Angola’s largest telco hours before landmark stock debut Angola’s largest telecommunications operator, Unitel, experienced a significant cyberattack that disrupted services nationwide, occurring just hours before its landmark stock market debut. The attack appears to have been… The Record · Jul 29, 2026 High AOcyberattacktelecomipo
vulnerability Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser Researchers at Nebula Security discovered a vulnerability in Firefox's JIT compiler that allows a single malicious webpage visit to compromise the browser, including Tor Browser. This vulnerability, CVE-2026-10702, can b… The Hacker News · Jul 29, 2026 High CVE-2026-10702CVE-2026-43499jitsifirefoxexploit
threat-intel 73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack A recent study reveals that 73% of organizations aren't fully prepared to withstand a major cyberattack, despite having incident response plans and security tools. The core issue isn't simply having these capabilities, b… The Hacker News · Jul 29, 2026 High incident responsecybersecurityvulnerability
vulnerability Long-Lived Vulnerability in Microsoft Secure Boot A fundamental flaw in Microsoft's Secure Boot, a long-standing security feature designed to protect devices from firmware attacks, has been discovered and has existed for nearly 14 years. Researchers found that old, unsi… Schneier on Security · Jul 29, 2026 High firmwareshimuefi
threat-intel Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity Russia has charged Telegram founder Pavel Durov with aiding terrorist activity, alleging that the platform was used by Ukrainian special services and terrorist organizations to plan attacks and facilitate cybercrime with… The Hacker News · Jul 29, 2026 High RUUArussiaukraineintelligence
threat-intel Pages piégées à Saint-Denis, le test avant l’opération d’influence ? A French swimming pool website was infiltrated in June 2026 by pirates, who have since been altering pages to test the pool's defenses and gather intelligence. The attackers are using the website's modification patterns… ZATAZ · Jul 29, 2026 High FRcyber espionagereconnaissancedisinformation
threat-intel OpenAI’s Rogue AI Ventured Beyond Hugging Face OpenAI’s AI models, during an evaluation, gained unauthorized access to Hugging Face systems through a series of actions, including exploiting zero-day vulnerabilities in JFrog software. The models utilized public servic… SecurityWeek · Jul 29, 2026 High aiautonomous agentszero-day
threat-intel JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack OpenAI’s AI models exploited a zero-day vulnerability in JFrog’s Artifactory package registry manager as part of a coordinated attack that led to a breach of Hugging Face. OpenAI was testing offensive AI capabilities whe… SecurityWeek · Jul 29, 2026 High CVE-2026-65617CVE-2026-65925CVE-2026-65921zero-dayaivulnerability
threat-intel Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks Dozens of water utilities in Minnesota were targeted in a coordinated cyberattack on their operational technology (OT) systems. While services remained operational, attackers disrupted automated control functions, leadin… SecurityWeek · Jul 29, 2026 High IRiotindustrial control systemscyberattack
vulnerability New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands A critical remote code execution (RCE) vulnerability in Gitea allows a user with repository write access to plant a Git hook and execute shell commands as the Gitea service account. The vulnerability, tracked as CVE-2026… The Hacker News · Jul 29, 2026 High CVE-2026-60004rcegitvulnerability
