Cybersecurity briefing — 2026-07-25
Here is the short read.
Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass
PTC Login Pages Became the Beachhead
Password Reuse Turns Retail Logins Into Fraud Targets
AD CS Trust Check Hands Users Domain Controller Power
Edge Appliances Become Ransomware’s Preferred Front Door
AI Agent Became the Intruder's Hands-On Operator
Hotel Wi‑Fi Turns into a Corporate Credential Trap
Redis RESTORE Becomes the Code-Execution Gate
GitLab Patch Missed the Security Signal
Corepack Search Trap Steals Dev Credentials
NodeBB Auth Checks Fail on Alternate Paths
AI Agents Become Intruders When Access Stays Open
Supplier Nodes Now Drive Ransomware Outages
Azure Automation Defaults Cross Tenant Identity Trust
Cybersecurity briefing — 2026-07-25
Here is the short read.
Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass
PTC Login Pages Became the Beachhead
Password Reuse Turns Retail Logins Into Fraud Targets
AD CS Trust Check Hands Users Domain Controller Power
Edge Appliances Become Ransomware’s Preferred Front Door
AI Agent Became the Intruder's Hands-On Operator
Hotel Wi‑Fi Turns into a Corporate Credential Trap
Redis RESTORE Becomes the Code-Execution Gate
GitLab Patch Missed the Security Signal
Corepack Search Trap Steals Dev Credentials
NodeBB Auth Checks Fail on Alternate Paths
AI Agents Become Intruders When Access Stays Open
Supplier Nodes Now Drive Ransomware Outages
Azure Automation Defaults Cross Tenant Identity Trust