Cybersecurity briefing — 2026-07-02

Here is the uncomfortable part of today's biggest identity story.

• FortiGate Credentials Became Ransomware Entry Points
• Exposed Oracle EBS Servers Become a Mass Target
• PoC Repos Become the Malware Trap
• AI Access Now Depends on Government-Approved Guardrails
• AI Fuzzing Turns One Dump Into Mass PoCs
• Langflow Becomes a Ransomware Launchpad
• MFA Fails on the Legacy OAuth Path
• AI-Generated Domains Become Pre-Positioned Attack Surface
• Signed Installers Hide a Remote-Control Malware Network
• Gmail Access Moves Past the Endpoint
• Paste-to-Run Attacks Break Endpoint Assumptions
• Blogspot Delivery Hides a Session-Stealing Loader
• ColdFusion Input Bugs Reach Code Execution Again
• Apple Closes Browser-to-Kernel Paths Across Its Fleet
• Cursor Sandbox Breaks on Trusted AI Inputs
• Agentic Browsers Leak Secrets When Context Is Faked
• Qilin Split Spawns a Top-Tier Ransomware Crew
• Proton Drive Phishing Turns Trusted Links into Ransomware
• Phishing Kit Becomes a Full BEC Platform