Cybersecurity briefing — 2026-07-17
Default WordPress Sites Face Anonymous Code Execution
Acquisition Boundaries Did Not Stop Abbott Breach
GoSerpent Kept Access Alive for Months
Siemens OT Switches Can Keep Root After Reboot
LLMs Now Chain Prompts Into Domain Access
AI Agents Become Identity Risk, Not Just Output Risk
Legacy Shim Revocations Leave Secure Boot Gaps
SSH-Orchestrated Malware Keeps Swapping Payloads
Stolen Code-Signing Certs Break Trusted-Binary Checks
A Fake Prompt Becomes the Password Theft Point
Signed Mac Malware Turns Trust Into the Bypass
Zoom account takeover, Splunk credential exposure
Hosting Providers Face Criminal Prosecution, Not Just Sanctions
Spirals Shrinks the Ransomware Response Window
Gold Eagle Makes Vulnerability Triage a Federal Pipeline
Fairlife Ransomware Hits Shelf Supply, Not Data
Ransomware Starts at the Gateway, Not the Endpoint
Trusted Metadata Lets Agents Be Steered
n8n Flaws Let Input Become Execution
Cybersecurity briefing — 2026-07-17
Default WordPress Sites Face Anonymous Code Execution
Acquisition Boundaries Did Not Stop Abbott Breach
GoSerpent Kept Access Alive for Months
Siemens OT Switches Can Keep Root After Reboot
LLMs Now Chain Prompts Into Domain Access
AI Agents Become Identity Risk, Not Just Output Risk
Legacy Shim Revocations Leave Secure Boot Gaps
SSH-Orchestrated Malware Keeps Swapping Payloads
Stolen Code-Signing Certs Break Trusted-Binary Checks
A Fake Prompt Becomes the Password Theft Point
Signed Mac Malware Turns Trust Into the Bypass
Zoom account takeover, Splunk credential exposure
Hosting Providers Face Criminal Prosecution, Not Just Sanctions
Spirals Shrinks the Ransomware Response Window
Gold Eagle Makes Vulnerability Triage a Federal Pipeline
Fairlife Ransomware Hits Shelf Supply, Not Data
Ransomware Starts at the Gateway, Not the Endpoint
Trusted Metadata Lets Agents Be Steered
n8n Flaws Let Input Become Execution