Cybersecurity briefing — 2026-07-14
Passkeys are not being broken.
AsyncAPI Packages Turn Installs Into Malware Execution
Europe Turns Sanctions on Turla’s Support Network
Signed Mac Malware Turns Trust Into the Bypass
Treasury Targets Ransomware’s Support Layer
Malicious Jscrambler Releases Kept Coming
CMS Upload Paths Are Becoming Server Takeovers
Blank Entra Logs Can Hide Credential Checks
Claude for Chrome Still Trusts Fake Clicks
Trusted SaaS Access Becomes the Attack Path
Leak-Site Bluff Targets Synopsys and Bosch
RabbitMQ Secret Leak Can Become Broker Takeover
Reusable Rust RAT Targets Windows Defenses First
Wiping Malware Learns to Spy and Pretend to Extort
Caller-ID Spoofing Platform Faces Pressure After NCA Charges
DoD Delays Third-Party CMMC Checks
Cybersecurity briefing — 2026-07-14
Passkeys are not being broken.
AsyncAPI Packages Turn Installs Into Malware Execution
Europe Turns Sanctions on Turla’s Support Network
Signed Mac Malware Turns Trust Into the Bypass
Treasury Targets Ransomware’s Support Layer
Malicious Jscrambler Releases Kept Coming
CMS Upload Paths Are Becoming Server Takeovers
Blank Entra Logs Can Hide Credential Checks
Claude for Chrome Still Trusts Fake Clicks
Trusted SaaS Access Becomes the Attack Path
Leak-Site Bluff Targets Synopsys and Bosch
RabbitMQ Secret Leak Can Become Broker Takeover
Reusable Rust RAT Targets Windows Defenses First
Wiping Malware Learns to Spy and Pretend to Extort
Caller-ID Spoofing Platform Faces Pressure After NCA Charges
DoD Delays Third-Party CMMC Checks