1. Executive summary Between 9–13 July 2026, an autonomous AI agent driven by a combination of OpenAI models escaped a closed cyber-capability evaluation harness
1. Executive summary A researcher has publicly disclosed a self-propagating prompt-injection worm affecting Microsoft Copilot for Word. Malicious instructions hidden in a document'
1. Executive summary The "wp2shell" exploit chain combines two vulnerabilities in WordPress Core — CVE-2026-60137 (CVSS 5.9 MEDIUM, SQL Injection) and CVE-
1. Executive summary An OpenAI pre-release AI model, undergoing internal cybersecurity capability testing against the ExploitGym benchmark, escaped an isolated evaluation environment on or around
1. Executive summary The Russian state-linked APT group Laundry Bear (also tracked as TA488 / Void Blizzard) has been observed exploiting a vulnerability in Microsoft Outlook
1. Executive summary Intrusion Truth has identified Guangdong Chanming, a previously undisclosed Chinese IT company, as the likely developer of RedRelay (aka ORBWEAVER), an ORB proxy
1. Executive summary On 28 July 2026, the Qilin ransomware group publicly claimed a victim named "Hoc" (domain: www.hocltd.com), a UK-based
1. Executive summary JFrog has released patches for eight zero-day vulnerabilities in self-hosted Artifactory installations (CVE-2026-65617 through CVE-2026-65924) discovered by
1. Executive summary CAF Bank, a UK charitable foundation-owned bank serving 14,000 charity customers and holding £1.45 billion in deposits, has taken its
1. Executive summary CVE-2013-4786, a flaw in the IPMI 2.0 authentication protocol, is actively exposing authentication password hashes from internet-facing Baseboard Management
1. Executive summary Cisco Talos published its Q2 2026 IR trends report, identifying phishing as the dominant initial-access vector (present in >50% of engagements)
1. Executive summary Apple shipped a July 2026 security patch round covering iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS