Cybersecurity briefing, 2026-07-15

Ransomware isn't a malware problem anymore.

• AsyncAPI Imports Now Trigger Malware at Load Time
• Legacy Shim Revocations Leave Secure Boot Gaps
• AI Pipeline Shortens the Path to Exploits
• Cursor Opens the Repo, and the Repo Runs Code
• Signed Mac Malware Turns Trust Into the Bypass
• RabbitMQ Secret Leak Can Become Broker Takeover
• SSH-Orchestrated Malware Keeps Swapping Payloads
• Malicious Jscrambler Releases Kept Coming
• Treasury Targets Ransomware’s Support Layer
• Blank Entra Logs Can Hide Credential Checks
• Caller-ID Spoofing Platform Faces Pressure After NCA Charges
• Ransomware Now Enters Through Stolen Logins
• Entra ID Makes Passkeys the Default Login Path
• IoT Botnet Adds Fallback Control Paths
• Hosting Providers Face Criminal Prosecution, Not Just Sanctions
• Leak-Site Bluff Targets Synopsys and Bosch
• AI Agents Become Identity Risk, Not Just Output Risk
• DoD Delays Third-Party CMMC Checks

Recent editions

• Tuesday, July 14, 2026: AsyncAPI Imports Now Trigger Malware at Load Time · 15 stories
• Monday, July 13, 2026: Europe Turns Sanctions on Turla’s Support Network · 16 stories
• Sunday, July 12, 2026: CMS Upload Paths Are Becoming Server Takeovers · 6 stories
• Saturday, July 11, 2026: CMS Upload Paths Are Becoming Server Takeovers · 16 stories
• Friday, July 10, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Thursday, July 9, 2026: Roundcube Makes University Mail a Foothold · 19 stories
• Wednesday, July 8, 2026: Roundcube Makes University Mail a Foothold · 19 stories