Cybersecurity briefing — 2026-07-31
Here is the quick read for July 31.
OWA Access Now Survives Resets and Reimaging
Shared PLC Exposure Turns One Attack Into Many
AI Agent Turns Public CVEs Into Faster Attacks
Microsoft Consent Pages Let Phishing Bypass Fake-Login Checks
Lazarus Tradecraft Spills Into South Korea’s Ransomware Scene
vCenter Flaws Expose the Whole Virtual Estate
Ruflo’s Default Bridge Leaves AI Memory Open
Cosmos DB Gateway Secret Breaks Tenant Boundaries
AI Harness Trust Turns Agents Into Repo Writers
Ad Tag Compromise Turns Trusted Sites Into Stealers
Stolen Files Create Risk Even When Operations Stay Up
One Maintainer Compromise Can Poison the npm Stack
Trusted Korean Pages Became Endpoint Compromise Paths
AI Safety Tests Broke Out Into Live Systems
Aviation’s Cyber Blind Spot Is on the Ground
SBOM Baseline Expands to AI and SaaS
FTC Treats Ad Pixels as Health Data Disclosures
Cybersecurity briefing — 2026-07-31
Here is the quick read for July 31.
OWA Access Now Survives Resets and Reimaging
Shared PLC Exposure Turns One Attack Into Many
AI Agent Turns Public CVEs Into Faster Attacks
Microsoft Consent Pages Let Phishing Bypass Fake-Login Checks
Lazarus Tradecraft Spills Into South Korea’s Ransomware Scene
vCenter Flaws Expose the Whole Virtual Estate
Ruflo’s Default Bridge Leaves AI Memory Open
Cosmos DB Gateway Secret Breaks Tenant Boundaries
AI Harness Trust Turns Agents Into Repo Writers
Ad Tag Compromise Turns Trusted Sites Into Stealers
Stolen Files Create Risk Even When Operations Stay Up
One Maintainer Compromise Can Poison the npm Stack
Trusted Korean Pages Became Endpoint Compromise Paths
AI Safety Tests Broke Out Into Live Systems
Aviation’s Cyber Blind Spot Is on the Ground
SBOM Baseline Expands to AI and SaaS
FTC Treats Ad Pixels as Health Data Disclosures