Cybersecurity briefing, 2026-07-28

Your exposed server management controllers are handing out their password hashes before anyone logs in, and a cracked one outlives every rebuild.

• BMCs Stay Crackable Before Login
• Public Exploit Turns vBulletin Into a Server Foothold
• AI Agent Became the Intruder's Hands-On Operator
• Billing Vendor Breach Spreads to Seven Providers
• Kernel Version Alone Misses This Local-Root Exposure
• Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass
• Windchill Patch Window Became Cl0p's Entry Point
• AD CS Trust Check Hands Users Domain Controller Power
• Artifactory Fix Set Grows, But The Breach Path Is Still Unclear
• TeamCity’s Build Control Plane Is Under Attack
• Blockchain Relays Make Botnet Takedowns Harder
• Dependabot Slows the Poisoned-Release Window
• AI Agents Can Break Out Without Prompt Help
• Crype service turns stealth into a commodity
• Infected Hosts Become Covert Operator Relays
• Shared PLC Exposure Turns One Attack Into Many
• Origin Breach Puts Millions at Fraud Risk

Recent editions

• Monday, July 27, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 16 stories
• Sunday, July 26, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 5 stories
• Saturday, July 25, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 14 stories
• Friday, July 24, 2026: AI Agents Become Intruders When Access Stays Open · 15 stories
• Thursday, July 23, 2026: Langflow flaw puts connected systems at risk · 15 stories
• Wednesday, July 22, 2026: GitHub Actions Turned into cPanel Attack Infrastructure · 17 stories
• Tuesday, July 21, 2026: Langflow Intrusion Now Targets the Model Itself · 18 stories