Cybersecurity briefing, 2026-07-14

Passkeys are not being broken.

• AsyncAPI Imports Now Trigger Malware at Load Time
• Europe Turns Sanctions on Turla’s Support Network
• Signed Mac Malware Turns Trust Into the Bypass
• Treasury Targets Ransomware’s Support Layer
• Malicious Jscrambler Releases Kept Coming
• CMS Upload Paths Are Becoming Server Takeovers
• Blank Entra Logs Can Hide Credential Checks
• Claude for Chrome Still Trusts Fake Clicks
• Trusted SaaS Access Becomes the Attack Path
• Leak-Site Bluff Targets Synopsys and Bosch
• RabbitMQ Secret Leak Can Become Broker Takeover
• Reusable Rust RAT Targets Windows Defenses First
• Wiping Malware Learns to Spy and Pretend to Extort
• Caller-ID Spoofing Platform Faces Pressure After NCA Charges
• DoD Delays Third-Party CMMC Checks

Recent editions

• Monday, July 13, 2026: Europe Turns Sanctions on Turla’s Support Network · 16 stories
• Sunday, July 12, 2026: CMS Upload Paths Are Becoming Server Takeovers · 6 stories
• Saturday, July 11, 2026: CMS Upload Paths Are Becoming Server Takeovers · 16 stories
• Friday, July 10, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Thursday, July 9, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Wednesday, July 8, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Tuesday, July 7, 2026: Roundcube Makes University Mail a Foothold · 18 stories