Cybersecurity briefing, 2026-07-21

Your commit review cannot see this malware, because it lives in the config your AI assistant obeys.

• Langflow Intrusion Now Targets the Model Itself
• GlobalProtect Auth Bypass Now Opens the Inside
• Oracle ERP Flaw Reaches HR Data
• Hidden PR Text Can Steer Review Agents
• Developer IDEs Became the Supply-Chain Entry Point
• SharePoint Patch Leaves Trusted Access Behind
• Vendor Breach Exposes Hospital Relationship Data
• Edge Appliances Become Ransomware’s Preferred Front Door
• Microsoft 365 Calendars Become a Durable C2 Store
• AI-Labeled Phishing Pipeline Is Already in Production
• Overdue Patch Follows AI-Found Sentry Command Injection
• AI Assistants Now Walk Into GitHub Lures
• Exposed Cameras Become State ISR Tools
• Windows Update Fixes Dell Shutdown Regressions
• Lagging ServiceNow Instances Stay Exposed After Patch Rollout
• Forged JWTs Can Impersonate Opcenter X Admins
• SmartPlug Update Closes Inherited Wireless Flaws
• Crype service turns stealth into a commodity

Recent editions

• Monday, July 20, 2026: Overdue Patch Follows AI-Found Sentry Command Injection · 17 stories
• Sunday, July 19, 2026: 7-Zip Fix Leaves Embedded Decoders Behind · 7 stories
• Saturday, July 18, 2026: Siemens OT Switches Can Keep Root After Reboot · 13 stories
• Friday, July 17, 2026: WordPress PoCs Leave Artifacts as Windmill Is Hit · 19 stories
• Thursday, July 16, 2026: AsyncAPI Imports Now Trigger Malware at Load Time · 19 stories
• Wednesday, July 15, 2026: AsyncAPI Imports Now Trigger Malware at Load Time · 18 stories
• Tuesday, July 14, 2026: AsyncAPI Imports Now Trigger Malware at Load Time · 15 stories