Cybersecurity briefing, 2026-07-07

Agentic ransomware did not break in on its own.

• Roundcube Makes University Mail a Foothold
• Mixed .NET Builds Make Cavern Harder to See
• Exfiltrated Resident Data Pushes County to Pay Seven Figures
• AI Browsing Agents Can Be Talked Into Paying
• Tiny Linux Kernel Race Opens Root on Desktops and Android
• Guest Root Can Break KVM Host Isolation
• Fake CAPTCHA Fraud Tools Stay Inside Live Banking Sessions
• One Editable Bot Could Hijack the Whole Project
• Gitea Docker Images Trust Spoofed Logins by Default
• The Gentlemen Becomes a High-Payout RaaS Platform
• 404 Pages Became the Compromise Signal
• Poisoned AI Tools Turn Agents Into Control Planes
• Ransomware Claims Concentrate as AI Polishes Pressure
• Cyber Shield Makes Trust the National Bottleneck
• AI-Polished Phishing Hides a New Espionage Stack
• Trusted SaaS Relays Hide a Job-Interview Phish
• Public Issues Can Drive Private Repo Leaks
• Routers Become Shared Cover for Espionage

Recent editions

• Monday, July 6, 2026: Tiny Linux Kernel Race Opens Root on Desktops and Android · 15 stories
• Sunday, July 5, 2026: Ransomware Claims Concentrate as AI Polishes Pressure · 4 stories
• Saturday, July 4, 2026: Internet-Facing Sentry Appliances Become Trust-Boundary Footholds · 15 stories
• Friday, July 3, 2026: NetScaler Risk Spreads Beyond SAML IdP · 19 stories
• Thursday, July 2, 2026: FortiGate Credentials Now Feed Ransomware Runs · 19 stories
• Wednesday, July 1, 2026: Apple Closes Browser-to-Kernel Paths Across Its Fleet · 18 stories
• Tuesday, June 30, 2026: Oracle Payments Bug Can Leak the Keys Behind It · 17 stories