Cybersecurity briefing — 2026-07-10

Here is the briefing for July 10, 2026.

• Roundcube Makes University Mail a Foothold
• Compromised Sites Become Resale Inventory
• One Header Can Own a Gitea Repo Fleet
• Pinned Injective Packages Spread Wallet Key Theft
• Extradition Lets Ransomware Cases Outlast the Intrusion
• Wiping Malware Learns to Spy and Pretend to Extort
• Passkey Enrollment Becomes the Account-Takeover Path
• AI Gateways Become the Real Cloud Chokepoint
• HTTP/3 Servers Crash on Ordinary QPACK Traffic
• Go Version History Is Now the Lure
• The Gentlemen Becomes a High-Payout RaaS Platform
• Build Repos Leak Live Cloud Keys
• Six Million Driver’s Licenses Become Reusable Fraud Fuel
• Cyber Shield Makes Trust the National Bottleneck
• Hallucinated Package Names Become a New Infection Path
• ShareFile Edge Controllers Pulled Offline
• Signed Driver Lets Ransomware Blind Defenses
• Police Data Became a Rival Spy Target
• Approval Boxes Are the New Attack Surface