July 9, 2026 A large-scale AWS intrusion reveals how AI-assisted attackers can chain familiar cloud techniques to move from initial access to full environmental compromise in roughly 72 hours, not through novel exploits, but through unprecedented speed, scale, and orchestration. …
Roundcube 0-Click Vulnerability Enables Stored XSS Attack via MIME Type Attachment
July 9, 2026 Roundcube has released version 1.7 to patch six security vulnerabilities, including two critical stored cross-site scripting (XSS) flaws that require zero user interaction to exploit. The update addresses issues discovered by researchers at Samsung R&D Institute Ukraine …
Hackers Abuse Microsoft Entra Passkey Enrollment to Hijack Enterprise Accounts
Cybercriminals have found a new way to hijack corporate Microsoft accounts by exploiting the very feature meant to protect them: passkeys. A threat group tracked as O UNC 066, also called Pink by Palo Alto Networks Unit 42, has run …
HP Linux Printing Software Vulnerability Allows Remote Attackers to Execute Arbitrary Code
July 9, 2026 A critical security vulnerability has been identified in HP Linux Imaging and Printing (HPLIP) software that could allow remote attackers to execute arbitrary code on affected systems. The flaw, tracked as CVE-2026-14544, carries a high-severity CVSS v3 …
Windows Update Silently Installs LG Monitor App That Pushes McAfee Ads
July 9, 2026 A recent user report has raised concerns about Windows Update silently installing third-party applications, after an LG monitor-related app allegedly appeared on systems and began displaying McAfee advertisements without user consent. The issue surfaced in a discussion …
UNC6692 Hackers Uses Microsoft Teams Helpdesk Impersonation to Deploy SNOW Malware
July 9, 2026 A newly identified threat group tracked as UNC6692 is hijacking Microsoft Teams to install a custom malware suite called SNOW. The campaign relies almost entirely on social engineering, which makes it dangerous because it feels routine to …
Everest Ransomware Claims 1 TB Data Theft But Encryptor Shows No Exfiltration Code
July 9, 2026 A new technical breakdown of the Everest ransomware family reveals a strange contradiction at the heart of one of its recent attack claims. Despite boasting about stealing a full terabyte of data from a victim organization, the …
Operationalizing Threat Intelligence: Bridging the Gap Between Feed Data and SOC Action
Threat intelligence feeds have become a staple line item in security budgets. Yet a persistent gap exists between purchasing a feed and actually using it to stop attacks. Many SOC teams receive a steady stream of indicators — IP addresses, …
AssuranceAmerica Data Breach Exposed 6.9 Million People’s License Numbers and Personal Data
July 9, 2026 AssuranceAmerica has disclosed a major data breach that exposed the personal information and driver’s license numbers of nearly 6.9 million individuals, marking one of the largest known leaks of U.S. driver’s license data in 2026. The incident …
GitLab Patches Eight Security Vulnerabilities Across Community and Enterprise Editions
July 9, 2026 GitLab has released critical security updates addressing eight vulnerabilities across its Community Edition (CE) and Enterprise Edition (EE), urging users to upgrade immediately to mitigate potential risks. The latest patch versions 19.1.2, 19.0.4, and 18.11.7 were published …