Cybersecurity briefing — 2026-07-03

Coordinated disclosure has always assumed defenders hear about a bug before attackers can weaponize it.

• NetScaler Risk Spreads Beyond SAML IdP
• Internet-Facing Sentry Appliances Become Trust-Boundary Footholds
• FortiGate Credentials Now Feed Ransomware Runs
• Langflow Bug Opens a Path to Stolen Secrets
• PoC Repos Become the Malware Trap
• Proxy Broker Takedown Cuts Off Many Abuse Campaigns
• Cursor Sandbox Breaks on Trusted AI Inputs
• AI Fuzzing Turns One Dump Into Mass PoCs
• Agentic Browsers Leak Secrets When Context Is Faked
• Microsoft 365 Phishing Now Leaves Long-Lived Control
• Argo CD’s Internal Repo-Server Becomes the Blast Radius
• Medtronic Breach Count Lands at 3.8 Million
• AI-Polished Phishing Hides a New Espionage Stack
• Proton Drive Phishing Turns Trusted Links into Ransomware
• GitHub Enterprise Server Fixes Hidden Access Gaps
• Malicious npm Packages Hide Payloads in Install Steps
• Ransomware Power Is Consolidating Around Qilin
• Catalyst Center File-Read Bug Exposes Local Secrets
• Spyware Targets the Oversight Process Itself