Cybersecurity briefing — 2026-07-21

Your commit review cannot see this malware, because it lives in the config your AI assistant obeys.

• Langflow Intrusion Now Targets the Model Itself
• GlobalProtect Auth Bypass Now Opens the Inside
• Oracle ERP Flaw Reaches HR Data
• AI Assistants Become a Malware Distribution Layer
• Developer IDEs Became the Supply-Chain Entry Point
• SharePoint RCE Is Becoming Persistent Access
• Vendor Breach Exposes Hospital Relationship Data
• Ransomware Gets More Fragmented, Not Less Dangerous
• Microsoft 365 Calendars Become a Durable C2 Store
• AI-Labeled Phishing Pipeline Is Already in Production
• Overdue Patch Follows AI-Found Sentry Command Injection
• AI Assistants Now Walk Into GitHub Lures
• Exposed Cameras Become State ISR Tools
• Windows Update Fixes Dell Shutdown Regressions
• Lagging ServiceNow Instances Stay Exposed After Patch Rollout
• Forged JWTs Can Impersonate Opcenter X Admins
• SmartPlug Update Closes Inherited Wireless Flaws
• Crype service turns stealth into a commodity