Security Feed

1. Executive summary Ernst & Young (EY) has notified clients of a data breach stemming from the compromise of a third-party support ticket

1. Executive summary Elastic Security Labs documented a new Contagious Interview campaign (tracked as REF9403) deploying OTTERCOOKIE-aligned malware via trojanized coding challenge repositories

1. Executive summary From late April to mid-June 2026, Microsoft Defender Experts observed two prevalent intrusion chains delivering ACR Stealer, an information-stealing

1. Executive summary Unit 42 published a supplementary analysis to its 2026 Global Incident Response (IR) Report on 16 July 2026, concluding that AI

1. Executive summary Cisco Talos has disclosed a financially motivated campaign by threat actor UAT-11795 distributing trojanized installers for widely used software (MobaXterm,

1. Executive summary CVE-2026-25089 is a critical (CVSS 9.8, CWE-78) OS command injection vulnerability in Fortinet FortiSandbox, FortiSandbox Cloud, and

1. Executive summary CVE-2026-58644 is a critical (CVSS 9.8) deserialization of untrusted data vulnerability in Microsoft SharePoint Server, enabling an unauthenticated,

1. Executive summary ClickLock Stealer is a previously undocumented macOS infostealer detailed by Group-IB, active since approximately May 2026, with at least 100

1. Executive summary Kaspersky GReAT has published details of "OkoBot," a sophisticated Windows malware framework active since at least March 2025 that

1. Executive summary CISA has confirmed active in-the-wild exploitation of four Microsoft SharePoint Server vulnerabilities — CVE-2026-32201 (CVSS 6.5 MEDIUM)

1. Executive summary Fortinet FortiSandbox versions 4.4.0 through 4.4.8 contain CVE-2026-39808, a critical (CVSS 9.8) OS command

1. Executive summary On 16 July 2026, the ransomware group "incransom" publicly listed ASA International (asa-international.com) as a victim on