Cybersecurity briefing, 2026-07-10

Here is the briefing for July 10, 2026.

• Roundcube Makes University Mail a Foothold
• Compromised Sites Become Resale Inventory
• One Header Can Own a Gitea Repo Fleet
• Pinned Injective Packages Spread Wallet Key Theft
• Extradition Lets Ransomware Cases Outlast the Intrusion
• Wiping Malware Learns to Spy and Pretend to Extort
• Passkey Enrollment Becomes the Account-Takeover Path
• AI Gateways Become the Real Cloud Chokepoint
• HTTP/3 Servers Crash on Ordinary QPACK Traffic
• Go Version History Is Now the Lure
• The Gentlemen Becomes a High-Payout RaaS Platform
• Build Repos Leak Live Cloud Keys
• Six Million Driver’s Licenses Become Reusable Fraud Fuel
• Cyber Shield Makes Trust the National Bottleneck
• Hallucinated Package Names Become a New Infection Path
• ShareFile Cloud Returns, But Customer Controllers Stay Offline
• Signed Driver Lets Ransomware Blind Defenses
• Police Portal Became a Shared Spy Surface
• Approval Boxes Are the New Attack Surface

Recent editions

• Thursday, July 9, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Wednesday, July 8, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Tuesday, July 7, 2026: Roundcube Makes University Mail a Foothold · 18 stories
• Monday, July 6, 2026: Tiny Linux Kernel Race Opens Root on Desktops and Android · 15 stories
• Sunday, July 5, 2026: Ransomware Claims Concentrate as AI Polishes Pressure · 4 stories
• Saturday, July 4, 2026: Internet-Facing Sentry Appliances Become Trust-Boundary Footholds · 15 stories
• Friday, July 3, 2026: NetScaler Risk Spreads Beyond SAML IdP · 19 stories