Cybersecurity briefing, 2026-07-19

Stolen session tokens outlive the password reset.

• 7-Zip Fix Leaves Embedded Decoders Behind
• WordPress PoCs Leave Artifacts as Windmill Is Hit
• ViPNet Updates Now Carry the Intruder Too
• Run-Box Lures Steal Cloud Sessions Too
• Hikvision Status Endpoint Makes Cameras Easier to Find
• Fake CAPTCHAs Shift Sandworm Past Installer Detections
• NGINX Patch Bundle Includes ASLR-Dependent RCE