Cybersecurity briefing, 2026-07-13

Android defenders have a new problem.

• Europe Turns Sanctions on Turla’s Support Network
• CMS Upload Paths Are Becoming Server Takeovers
• Signed Mac Malware Turns Trust Into the Bypass
• Passkey Enrollment Becomes the Account-Takeover Path
• Malicious Jscrambler Releases Kept Coming
• Wiping Malware Learns to Spy and Pretend to Extort
• Exposed AiTM Toolkit Lowers the Bar for MFA Bypass
• Treasury Targets Ransomware’s Support Layer
• Blank Entra Logs Can Hide Credential Checks
• Build Repos Leak Live Cloud Keys
• Forgotten Web Hosts Are Now AI Discovery Points
• RabbitMQ Secret Leak Can Become Broker Takeover
• ShareFile Cloud Returns, But Customer Controllers Stay Offline
• Ransom Negotiators Become Part of the Attack Surface
• ShareFile Shutdown Signals More Than Maintenance
• Police Portal Became a Shared Spy Surface

Recent editions

• Sunday, July 12, 2026: CMS Upload Paths Are Becoming Server Takeovers · 6 stories
• Saturday, July 11, 2026: CMS Upload Paths Are Becoming Server Takeovers · 16 stories
• Friday, July 10, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Thursday, July 9, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Wednesday, July 8, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Tuesday, July 7, 2026: Roundcube Makes University Mail a Foothold · 18 stories
• Monday, July 6, 2026: Tiny Linux Kernel Race Opens Root on Desktops and Android · 15 stories