Cybersecurity briefing — 2026-07-20

The AI agent searching GitHub for a tool to install is a user with no phishing training.

• Overdue Patch Follows AI-Found Sentry Command Injection
• Langflow Foothold Becomes Model-Destruction Path
• AI-Labeled Phishing Pipeline Is Already in Production
• Patching WordPress No Longer Means Cleared
• Oracle ERP Flaw Reaches HR Data
• Developer IDEs Became the Supply-Chain Entry Point
• Vendor Breach Exposes Hospital Relationship Data
• Lagging ServiceNow Instances Stay Exposed After Patch Rollout
• Microsoft 365 Calendars Become the C2 Channel
• OpenSSL Fix Misses the Usual Scanner Signals
• Exposed Cameras Become State ISR Tools
• Windows Update Fixes Dell Shutdown Regressions
• Crype service turns stealth into a commodity
• AI Assistants Now Walk Into GitHub Lures
• Phishing Delivery Is Getting QA and AI
• Persistent Memory Turns Gemini CLI into an Operator
• ViPNet Updates Now Carry the Intruder Too