Cybersecurity briefing, 2026-07-31

Here is the quick read for July 31.

• OWA Access Now Survives Resets and Reimaging
• PLC Access Reaches Past Disruption Into Lockout
• AI Eval Misconfigurations Reached Real Production Systems
• Ad Tag Compromise Turns Trusted Sites Into Stealers
• SBOM Baseline Expands to AI and SaaS
• Chrome Bug Discovery Is Outrunning Release Cadence
• Trusted Korean Pages Became Endpoint Compromise Paths
• Android TV Boxes Now Double as Residential Proxies
• One CareCloud Breach Reaches Thousands of Practices
• vCenter Flaws Expose the Whole Virtual Estate
• GitLab Patch Cuts Across Review and Release Controls
• TeamCity’s Build Control Plane Is Under Attack
• Cosmos DB Gateway Secret Breaks Tenant Boundaries
• Memory-Only Backdoors Evade Disk-Based Hunting
• Microsoft Consent Pages Let Phishing Bypass Fake-Login Checks

Recent editions

• Thursday, July 30, 2026: OWA Access Now Survives Resets and Reimaging · 16 stories
• Wednesday, July 29, 2026: OWA Access Now Survives Resets and Reimaging · 17 stories
• Tuesday, July 28, 2026: BMCs Stay Crackable Before Login · 17 stories
• Monday, July 27, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 16 stories
• Sunday, July 26, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 5 stories
• Saturday, July 25, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 14 stories
• Friday, July 24, 2026: AI Agents Become Intruders When Access Stays Open · 15 stories