Cybersecurity briefing, 2026-07-10

Here is the briefing for July 10, 2026.

• Roundcube makes university mail a foothold
• Compromised sites become resale inventory
• One header can own a Gitea repo fleet
• Pinned Injective packages spread wallet key theft
• Extradition lets ransomware cases outlast the intrusion
• Wiping malware learns to spy and pretend to extort
• Passkey enrollment becomes the account-takeover path
• AI gateways become the real cloud chokepoint
• HTTP/3 servers crash on ordinary QPACK traffic
• Go version history is now the lure
• The Gentlemen becomes a high-payout RaaS platform
• Build repos leak live cloud keys
• Six million driver’s licenses become reusable fraud fuel
• Cyber Shield makes trust the national bottleneck
• Hallucinated package names become a new infection path
• ShareFile cloud returns, but customer controllers stay offline
• Signed driver lets ransomware blind defenses
• Police portal became a shared spy surface
• Approval boxes are the new attack surface

Recent editions

• Thursday, July 9, 2026: Routers become shared cover for espionage · 19 stories
• Wednesday, July 8, 2026: Accenture claim extends from code to cloud access · 19 stories
• Tuesday, July 7, 2026: Mixed .NET builds make Cavern harder to see · 18 stories
• Monday, July 6, 2026: Tiny Linux kernel race opens root on desktops and Android · 15 stories
• Sunday, July 5, 2026: Ransomware claims concentrate as AI polishes pressure · 4 stories
• Saturday, July 4, 2026: Internet-facing Sentry appliances become trust-boundary footholds · 15 stories
• Friday, July 3, 2026: NetScaler risk spreads beyond SAML IdP · 19 stories