Cybersecurity briefing — 2026-07-09
Passkeys are phishing-resistant at login.
Roundcube Makes University Mail a Foothold
Routers Become Shared Cover for Espionage
Partial UniFi Patching Leaves the Stack Exposed
Pinned Injective Packages Spread Wallet Key Theft
Approval Boxes Are the New Attack Surface
GitHub APIs Quietly Build Org Maps at Scale
Passkey Enrollment Itself Becomes the Takeover Trap
Signed Driver Lets Ransomware Blind Defenses
AI Browsing Agents Can Be Talked Into Paying
Accenture Claim Extends From Code to Cloud Access
Long-Old Linux Bug Now Breaks Host Isolation
Wiping Malware Learns to Spy and Pretend to Extort
npm v12 Turns Off Install-Time Code by Default
Trusted SaaS Relays Hide a Job-Interview Phish
Cyber Shield Makes Trust the National Bottleneck
Six Million Driver’s Licenses Become Reusable Fraud Fuel
AI Gateways Become the Real Cloud Chokepoint
A Tax Vendor Became Wartime Infrastructure
Patched FortiGates Still Leak Access Through Old Credentials
Cybersecurity briefing — 2026-07-09
Passkeys are phishing-resistant at login.
Roundcube Makes University Mail a Foothold
Routers Become Shared Cover for Espionage
Partial UniFi Patching Leaves the Stack Exposed
Pinned Injective Packages Spread Wallet Key Theft
Approval Boxes Are the New Attack Surface
GitHub APIs Quietly Build Org Maps at Scale
Passkey Enrollment Itself Becomes the Takeover Trap
Signed Driver Lets Ransomware Blind Defenses
AI Browsing Agents Can Be Talked Into Paying
Accenture Claim Extends From Code to Cloud Access
Long-Old Linux Bug Now Breaks Host Isolation
Wiping Malware Learns to Spy and Pretend to Extort
npm v12 Turns Off Install-Time Code by Default
Trusted SaaS Relays Hide a Job-Interview Phish
Cyber Shield Makes Trust the National Bottleneck
Six Million Driver’s Licenses Become Reusable Fraud Fuel
AI Gateways Become the Real Cloud Chokepoint
A Tax Vendor Became Wartime Infrastructure
Patched FortiGates Still Leak Access Through Old Credentials