July 7, 2026 A newly disclosed vulnerability dubbed “GitLost” shows how attackers can weaponize a single GitHub Issue to trick GitHub’s new AI-powered Agentic Workflows into leaking private repository contents …
AnyDesk Phishing Attack Uses Scheduled Task Persistence and Artifact Deletion to Evade Detection
July 7, 2026 A new phishing campaign is turning a trusted remote access tool into a long term backdoor for espionage. Attackers hide behind fake invoices to slip past email …
Ubiquiti Disclosed 25 Security Vulnerabilities Across the UniFi Ecosystem
July 7, 2026 Ubiquiti has disclosed 25 security vulnerabilities affecting its UniFi ecosystem in Security Advisory Bulletin 066, including several critical flaws rated 9.9 and 10.0 on the CVSS v3.1 …
STOCKSTAY Backdoor Uses Malicious RDP Files and WinRAR Exploit to Target Ukraine
July 7, 2026 A newly detailed cyber-espionage campaign is using fake remote desktop files and a recently patched WinRAR flaw to plant a stealthy backdoor called STOCKSTAY on computers in …
Windows Adds Microsoft Execution Containers to Secure AI Agent Workflows
July 7, 2026 Microsoft has introduced Microsoft Execution Containers (MXC), a new security capability designed to protect AI agent workflows on Windows, marking a significant step toward making Windows more …
U.S. Cyber Defense Agency Reportedly Using Anthropic’s Mythos to Audit Government Code Repositories
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is reportedly deploying Anthropic’s advanced AI model, Mythos, to audit federal government code repositories, signaling a growing reliance on artificial intelligence for …
Critical PHP PDO Driver Bugs Expose Firebird SQL Injection and PostgreSQL DoS Risks
July 7, 2026 A newly disclosed pair of flaws in PHP’s database driver layer shows that even mature code can hide dangerous surprises. The bugs live inside PHP Data Objects …
Microsoft Confirms Windows 11, 26H2 Comes With Change in Backup Policy
July 7, 2026 Microsoft has confirmed a significant change to its Windows settings backup policy with the upcoming release of Windows 11 version 26H2, marking a shift toward improved system …
Hackers Use Recruiter Phishing Emails and Fake Career Pages to Harvest Gmail Logins
July 7, 2026 A new phishing campaign is targeting job seekers by posing as recruiters from recognizable brands. The scheme uses fake career pages and worded emails to trick people …
Hackers Leverage Microsoft Teams Call to Install RMM Tools and Deploy EtherRAT
July 7, 2026 Threat actors are now weaponizing something as ordinary as a Microsoft Teams call to slip past corporate defenses and plant a stealthy new remote access trojan called …