Cybersecurity briefing, 2026-07-09

Passkeys are phishing-resistant at login.

• Roundcube Makes University Mail a Foothold
• Routers Become Shared Cover for Espionage
• Partial UniFi Patching Leaves the Stack Exposed
• Pinned Injective Packages Spread Wallet Key Theft
• Approval Boxes Are the New Attack Surface
• GitHub APIs Quietly Build Org Maps at Scale
• Passkey Enrollment Becomes the Account-Takeover Path
• Signed Driver Lets Ransomware Blind Defenses
• AI Browsing Agents Can Be Talked Into Paying
• Accenture Claim Extends From Code to Cloud Access
• Long-Old Linux Bug Now Breaks Host Isolation
• Wiping Malware Learns to Spy and Pretend to Extort
• npm v12 Turns Off Install-Time Code by Default
• Trusted SaaS Relays Hide a Job-Interview Phish
• Cyber Shield Makes Trust the National Bottleneck
• Six Million Driver’s Licenses Become Reusable Fraud Fuel
• AI Gateways Become the Real Cloud Chokepoint
• A Tax Vendor Became Wartime Infrastructure
• Patched FortiGates Still Leak Access Through Old Credentials

Recent editions

• Wednesday, July 8, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Tuesday, July 7, 2026: Roundcube Makes University Mail a Foothold · 18 stories
• Monday, July 6, 2026: Tiny Linux Kernel Race Opens Root on Desktops and Android · 15 stories
• Sunday, July 5, 2026: Ransomware Claims Concentrate as AI Polishes Pressure · 4 stories
• Saturday, July 4, 2026: Internet-Facing Sentry Appliances Become Trust-Boundary Footholds · 15 stories
• Friday, July 3, 2026: NetScaler Risk Spreads Beyond SAML IdP · 19 stories
• Thursday, July 2, 2026: FortiGate Credentials Now Feed Ransomware Runs · 19 stories