DIGEST
Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.
Wednesday, July 22, 2026
Saturday, July 18, 2026
HIGH7-Zip Fixes RCE Flaw Exploitable with Malicious ArchivesHIGHMicrosoft Warns of Surge in ACR Stealer AttacksMEDIUMFrida 17.16.1 Released with Darwin-Focused Bug Fixes
Friday, July 17, 2026
CRITICALPublic Exploits Released for WordPress Core 'wp2shell' RCE FlawsHIGHAbbott Laboratories Investigates Two Cyber Incidents Amid Extortion ClaimsHIGHOpenSSL 'HollowByte' DoS Flaw Exploitable with 11-Byte TLS RequestsCRITICALInc Ransomware Exploits SonicWall SMA Zero-Days for Root AccessHIGHMalicious Vite npm Packages Use Blockchain C2 to Deliver RATHIGHNew NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes TokensHIGHGoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate TheftMEDIUMErnst & Young Discloses Data Breach from Third-Party Support System HackHIGHNorth Korean Hackers Use Steganography in SVG Images to Deliver OtterCookie MalwareCRITICALNew Windows 'LegacyHive' Zero-Day Grants Admin PrivilegesHIGHNew GoSerpent Malware Targets Southeast Asian Governments and DiplomatsCRITICALCISA Urges Immediate Patching for Actively Exploited Fortinet FortiSandbox Flaws
Thursday, July 16, 2026
HIGHNew ClickLock macOS Malware Traps Users into Revealing Login PasswordHIGHCoca-Cola's Fairlife Subsidiary Hit by Ransomware, Halts US Dairy ProductionHIGHClaude Chrome Extension Flaw Allows Malicious Extensions to Trigger AI ActionsHIGHNew Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
Saturday, July 11, 2026
CRITICALCompromised jscrambler npm Package Drops Rust InfostealerHIGH'Ghostcommit' Hides Prompt Injection in Images to Exfiltrate Secrets from AI AgentsCRITICALCritical Zimbra Flaw Allows Remote Code Execution via Crafted Emails