Begun, the Patch Wars have
1. Executive summary Cisco Talos has disclosed an active, financially motivated campaign by actor "UAT-11795" (no MITRE ATT&CK profile — attribution unconfirmed)
16 Jul 2026 · 9 min read
read →
// author
Jeff Davies
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
1. Executive summary Elastic Security Labs has published a technical report on TELEPUZ, a modular, C-based Windows malware offered under a malware-as-a-service
16 Jul 2026 · 7 min read
read →
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
1. Executive summary Researchers from Seoul National University, the University of Illinois Urbana-Champaign, and Largosoft published a paper on 6 July 2026 detailing a new
16 Jul 2026 · 8 min read
read →
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
1. Executive summary A financially motivated Russian threat actor tracked as "UAT-11795" is distributing trojanized installers for common enterprise and developer software — including
16 Jul 2026 · 7 min read
read →
New Spirals ransomware encrypts victim network in under 24 hours
1. Executive summary A new ransomware actor dubbed "Spirals" completed a full intrusion cycle — from initial access through data theft to file encryption — in
16 Jul 2026 · 7 min read
read →
F5 Patches Multiple NGINX, BIG-IP Vulnerabilities
1. Executive summary F5 released an out-of-band security rollout on 16 July 2026 patching eight vulnerabilities across NGINX Open Source, NGINX Plus, NGINX Ingress
16 Jul 2026 · 6 min read
read →
Srsly Risky Biz: Ransomware Uses AI To Amp Up Negotiations
1. Executive summary A GuidePoint Security report details how data-extortion groups — principally FulcrumSec (active since ~September 2025) and DragonForce (active since 2023) — are using LLMs
16 Jul 2026 · 7 min read
read →
Ransom demands are down, email is the top way attackers get in
1. Executive summary Sophos's State of Ransomware 2026 report, based on a survey of 2,158 IT and security leaders whose organisations were hit
16 Jul 2026 · 4 min read
read →
Zoom warns of critical account takeover vulnerability
1. Executive summary Zoom has disclosed CVE-2026-53412, a critical vulnerability (CVSS 9.8) caused by improper input validation in the Zoom Desktop Client for
15 Jul 2026 · 5 min read
read →
Google Gemini CLI abused as a hacking agent, malware botnet operator
1. Executive summary A Russian-speaking threat actor dubbed "bandcampro" used Google's open-source Gemini CLI as an autonomous hacking agent to
15 Jul 2026 · 7 min read
read →
TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains
1. Executive summary Elastic Security Labs reports active in-the-wild distribution of TELEPUZ, a modular, lightweight Windows DLL malware likely operated as a Malware-as-
15 Jul 2026 · 8 min read
read →
Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption
1. Executive summary Progress Software has confirmed that a high-severity zero-day vulnerability in ShareFile Storage Zones Controller (SZC) versions 5.x and 6.x
15 Jul 2026 · 6 min read
read →