Cybersecurity briefing, 2026-07-01

Once an AI agent can act, its tool descriptions become the trust boundary attackers target, not the prompts it reads.

• Apple closes browser-to-kernel paths across its fleet
• Oracle Payments bug can leak the keys behind it
• Defender flaw becomes ransomware’s privilege shortcut
• AI-generated domains become pre-positioned attack surface
• Microsoft 365 phishing now leaves long-lived control
• Blogspot delivery hides a session-stealing loader
• Signed installers hide a remote-control malware network
• Poisoned AI tools turn agents into control planes
• Exposed Langflow apps become network pivots
• MFA fails on the legacy OAuth path
• AI-branded extension quietly harvested search traffic
• AWS WAF can miss fragmented HTTP/2 bodies
• Bespoke backdoor marks CL-STA-1062’s next stage
• Chrome fleet exposure ends only after every build updates
• AI skills marketplace becomes a credential channel
• Cursor sandbox breaks on trusted AI inputs
• Region-locked banking trojan hides from sandboxes
• Flowise session cookies can be forged

Recent editions

• Tuesday, June 30, 2026: Oracle Payments bug can leak the keys behind it · 17 stories
• Monday, June 29, 2026: Gamaredon builds persistence through cloud and WinRAR abuse · 13 stories
• Sunday, June 28, 2026: Recovery keys let messaging account theft persist · 1 story
• Saturday, June 27, 2026: Repo opens became live cloud compromise · 14 stories
• Friday, June 26, 2026: Bespoke backdoor marks CL-STA-1062’s next stage · 17 stories
• Thursday, June 25, 2026: Internet-facing PeopleSoft console becomes extortion foothold · 17 stories
• Wednesday, June 24, 2026: Criminal malware assembly lines are being torn down · 19 stories