https://threatvectr.com/story/microsofts-july-2026-patch-tuesday-is-the-biggest-ever-622-fixes-at-once ThreatVectr en 2026-07-14T22:24:00.105Z Microsoft's July 2026 Patch Tuesday Is the Biggest Ever, 622 Fixes at Once https://threatvectr.com/story/sonicwall-says-two-sma1000-flaws-are-being-used-in-live-attacks ThreatVectr en 2026-07-14T21:42:00.914Z SonicWall says two SMA1000 flaws are being used in live attacks https://threatvectr.com/story/spanish-police-dismantle-euro140-million-fraud-ring-that-drained-company-bank-ac ThreatVectr en 2026-07-14T20:54:00.099Z Spanish police dismantle €140 million fraud ring that drained company bank accounts https://threatvectr.com/story/the-safety-system-keeping-6-ghz-wi-fi-away-from-critical-infrastructure-has-seri ThreatVectr en 2026-07-14T20:42:00.173Z The Safety System Keeping 6 GHz Wi-Fi Away From Critical Infrastructure Has Serious Holes https://threatvectr.com/story/sap-fixes-critical-netweaver-bug-that-lets-logged-in-users-corrupt-memory ThreatVectr en 2026-07-14T20:02:00.023Z SAP Fixes Critical NetWeaver Bug That Lets Logged-In Users Corrupt Memory https://threatvectr.com/story/fake-github-pages-impersonate-292-real-brands-to-push-password-stealing-malware ThreatVectr en 2026-07-14T19:43:00.529Z Fake GitHub Pages Impersonate 292 Real Brands to Push Password-Stealing Malware https://threatvectr.com/story/microsoft-fixes-record-622-security-flaws-two-already-used-in-live-attacks ThreatVectr en 2026-07-14T19:25:00.181Z Microsoft Fixes Record 622 Security Flaws, Two Already Used in Live Attacks https://threatvectr.com/story/microsoft-ships-windows-10-kb5099539-as-record-570-flaw-patch-tuesday-lands ThreatVectr en 2026-07-14T19:15:00.433Z Microsoft ships Windows 10 KB5099539 as record 570-flaw Patch Tuesday lands https://threatvectr.com/story/cisa-warns-of-active-attacks-on-sharepoint-servers-urges-immediate-patching ThreatVectr en 2026-07-14T19:13:00.208Z CISA Warns of Active Attacks on SharePoint Servers, Urges Immediate Patching https://threatvectr.com/story/ransomware-gang-claims-bosch-and-synopsys-hacks-synopsys-says-it-sees-nothing ThreatVectr en 2026-07-14T18:43:00.905Z Ransomware Gang Claims Bosch and Synopsys Hacks. Synopsys Says It Sees Nothing. https://threatvectr.com/story/microsoft-ships-fixes-for-570-flaws-in-july-including-two-bugs-already-used-in-a ThreatVectr en 2026-07-14T18:32:00.110Z Microsoft ships fixes for 570 flaws in July, including two bugs already used in attacks https://threatvectr.com/story/your-vendors-are-a-risk-you-cannot-ignore-here-is-how-boards-should-own-it ThreatVectr en 2026-07-14T18:27:00.733Z Your Vendors Are a Risk You Cannot Ignore. Here Is How Boards Should Own It. https://threatvectr.com/story/microsoft-ships-july-2026-patch-tuesday-571-fixes-better-airpods-pairing-and-a-q ThreatVectr en 2026-07-14T18:01:00.901Z Microsoft Ships July 2026 Patch Tuesday: 571 Fixes, Better AirPods Pairing, and a Quieter Widgets Panel https://threatvectr.com/story/adobe-rushes-out-fixes-for-88-security-flaws-eight-of-them-critical-in-coldfusio ThreatVectr en 2026-07-14T17:32:00.810Z Adobe Rushes Out Fixes for 88 Security Flaws, Eight of Them Critical in ColdFusion https://threatvectr.com/story/labubarat-new-rust-malware-poses-as-nvidia-software-to-sneak-onto-windows-pcs ThreatVectr en 2026-07-14T17:29:00.625Z LabubaRAT: New Rust Malware Poses as NVIDIA Software to Sneak Onto Windows PCs https://threatvectr.com/story/progress-sharefile-zero-day-forced-emergency-server-shutdowns-patch-is-out ThreatVectr en 2026-07-14T16:44:00.306Z Progress ShareFile zero-day forced emergency server shutdowns; patch is out https://threatvectr.com/story/clickfix-the-fake-error-pop-up-that-tricks-you-into-hacking-yourself ThreatVectr en 2026-07-14T16:36:00.780Z ClickFix: The Fake Error Pop-Up That Tricks You Into Hacking Yourself https://threatvectr.com/story/three-states-write-the-rules-on-powerful-ai-before-washington-does ThreatVectr en 2026-07-14T16:25:00.978Z Three States Write the Rules on Powerful AI Before Washington Does https://threatvectr.com/story/fake-lastpass-and-bitwarden-emails-send-users-to-bogus-docusign-pages ThreatVectr en 2026-07-14T15:55:00.837Z Fake LastPass and Bitwarden emails send users to bogus DocuSign pages https://threatvectr.com/story/rabbitmq-bugs-could-have-handed-attackers-the-keys-to-corporate-messaging ThreatVectr en 2026-07-14T14:47:00.967Z RabbitMQ Bugs Could Have Handed Attackers the Keys to Corporate Messaging https://threatvectr.com/story/you-dont-need-to-fire-the-exploit-to-know-youre-exposed ThreatVectr en 2026-07-14T14:26:00.519Z You Don't Need to Fire the Exploit to Know You're Exposed https://threatvectr.com/story/seven-security-flaws-fixed-in-vmware-avi-load-balancer-one-rated-critical ThreatVectr en 2026-07-14T14:18:00.936Z Seven Security Flaws Fixed in VMware Avi Load Balancer, One Rated Critical https://threatvectr.com/story/popular-ai-coding-tool-cursor-runs-malicious-files-automatically-researcher-warn ThreatVectr en 2026-07-14T14:03:00.889Z Popular AI Coding Tool Cursor Runs Malicious Files Automatically, Researcher Warns https://threatvectr.com/story/pentera-pitches-validation-as-the-missing-layer-in-ai-security-workflows ThreatVectr en 2026-07-14T13:48:00.787Z Pentera Pitches Validation as the Missing Layer in AI Security Workflows https://threatvectr.com/story/hackers-are-faking-oauth-app-ids-to-quietly-test-stolen-microsoft-logins ThreatVectr en 2026-07-14T13:42:00.373Z Hackers Are Faking OAuth App IDs to Quietly Test Stolen Microsoft Logins https://threatvectr.com/story/eleven-old-microsoft-signed-boot-files-could-let-hackers-slip-past-secure-boot ThreatVectr en 2026-07-14T13:38:00.059Z Eleven Old Microsoft-Signed Boot Files Could Let Hackers Slip Past Secure Boot https://threatvectr.com/story/ku-leuven-researchers-find-85-browser-crypto-wallets-leak-user-data ThreatVectr en 2026-07-14T13:34:00.811Z KU Leuven Researchers Find 85 Browser Crypto Wallets Leak User Data https://threatvectr.com/story/a-bug-in-the-claude-for-chrome-extension-has-survived-eight-fixes-and-still-leak ThreatVectr en 2026-07-14T13:34:00.783Z A Bug in the Claude for Chrome Extension Has Survived Eight Fixes and Still Leaks Your Gmail https://threatvectr.com/story/microsoft-is-killing-sms-logins-for-business-accounts-passkeys-take-over-in-sept ThreatVectr en 2026-07-14T13:06:00.823Z Microsoft is killing SMS logins for business accounts. Passkeys take over in September 2026. https://threatvectr.com/story/sap-patches-critical-flaws-in-netweaver-approuter-and-commerce-cloud ThreatVectr en 2026-07-14T11:47:00.917Z SAP Patches Critical Flaws in NetWeaver, Approuter, and Commerce Cloud https://threatvectr.com/story/microsoft-trials-an-ad-free-windows-search-for-insiders ThreatVectr en 2026-07-14T11:16:00.665Z Microsoft trials an ad-free Windows Search for Insiders https://threatvectr.com/story/forg365-sells-ready-made-microsoft-365-hijacking-kits-on-telegram-for-dollar400- ThreatVectr en 2026-07-14T10:22:00.350Z Forg365 Sells Ready-Made Microsoft 365 Hijacking Kits on Telegram for $400 a Month https://threatvectr.com/story/valarian-raises-dollar50-million-to-lock-down-ai-workloads-in-sensitive-organisa ThreatVectr en 2026-07-14T10:11:00.631Z Valarian Raises $50 Million to Lock Down AI Workloads in Sensitive Organisations https://threatvectr.com/story/us-sanctions-a-vpn-a-malware-disguiser-and-the-people-behind-them-for-helping-ra ThreatVectr en 2026-07-14T10:10:00.554Z US sanctions a VPN, a malware disguiser, and the people behind them for helping ransomware gangs https://threatvectr.com/story/your-incident-response-playbook-almost-certainly-does-not-cover-ai-failures-that ThreatVectr en 2026-07-14T10:02:00.968Z Your Incident Response Playbook Almost Certainly Does Not Cover AI Failures. That Is a Problem. https://threatvectr.com/story/groks-coding-assistant-was-quietly-shipping-whole-git-repos-to-xai ThreatVectr en 2026-07-14T09:48:00.958Z Grok's Coding Assistant Was Quietly Shipping Whole Git Repos to xAI https://threatvectr.com/story/poisoned-developer-tool-downloaded-nearly-1500-times-before-anyone-noticed ThreatVectr en 2026-07-14T09:23:00.114Z Poisoned Developer Tool Downloaded Nearly 1,500 Times Before Anyone Noticed https://threatvectr.com/story/fake-student-proxies-on-npm-turned-browsers-into-a-ddos-weapon ThreatVectr en 2026-07-14T08:53:00.918Z Fake Student Proxies on npm Turned Browsers Into a DDoS Weapon https://threatvectr.com/story/us-treasury-sanctions-vpn-provider-accused-of-selling-cover-to-ransomware-gangs ThreatVectr en 2026-07-14T08:43:00.219Z US Treasury Sanctions VPN Provider Accused of Selling Cover to Ransomware Gangs https://threatvectr.com/story/ai-agents-are-now-running-entire-cyberattacks-start-to-finish ThreatVectr en 2026-07-14T07:29:00.852Z AI Agents Are Now Running Entire Cyberattacks, Start to Finish https://threatvectr.com/story/how-shinyhunters-walked-into-salesforce-accounts-without-breaking-anything ThreatVectr en 2026-07-14T06:59:00.693Z How ShinyHunters walked into Salesforce accounts without breaking anything https://threatvectr.com/story/pentagon-hits-pause-on-contractor-cybersecurity-checks-citing-too-few-auditors-a ThreatVectr en 2026-07-14T06:54:00.283Z Pentagon Hits Pause on Contractor Cybersecurity Checks, Citing Too Few Auditors and Too Much Red Tape https://threatvectr.com/story/fake-guardian-articles-are-tricking-people-into-scam-investment-sites ThreatVectr en 2026-07-14T00:32:00.151Z Fake Guardian Articles Are Tricking People Into Scam Investment Sites https://threatvectr.com/story/scammers-are-calling-telstra-customers-and-pretending-to-help-after-last-weeks-o ThreatVectr en 2026-07-14T00:30:01.055Z Scammers Are Calling Telstra Customers and Pretending to Help After Last Week's Outage https://threatvectr.com/story/the-engineers-building-both-sides-of-the-ai-security-war ThreatVectr en 2026-07-13T22:05:00.881Z The Engineers Building Both Sides of the AI Security War https://threatvectr.com/story/russian-spies-are-breaking-into-the-worlds-routers-the-password-is-often-still-a ThreatVectr en 2026-07-13T21:59:00.356Z Russian Spies Are Breaking Into the World's Routers. The Password Is Often Still 'Admin'. https://threatvectr.com/story/japans-biggest-taxi-firm-nihon-kotsu-hit-by-malware-dispatch-system-still-down ThreatVectr en 2026-07-13T20:36:00.839Z Japan's biggest taxi firm Nihon Kotsu hit by malware, dispatch system still down https://threatvectr.com/story/malicious-jscrambler-npm-package-stole-developer-secrets-for-two-hours-before-ta ThreatVectr en 2026-07-13T19:56:00.540Z Malicious Jscrambler npm package stole developer secrets for two hours before takedown https://threatvectr.com/story/crashstealer-the-new-mac-malware-that-slips-past-apples-own-safety-checks ThreatVectr en 2026-07-13T18:24:00.865Z CrashStealer: the new Mac malware that slips past Apple's own safety checks https://threatvectr.com/story/chrome-and-edge-yank-modheader-extension-after-hidden-history-collector-found ThreatVectr en 2026-07-13T18:12:00.928Z Chrome and Edge Yank ModHeader Extension After Hidden History Collector Found https://threatvectr.com/story/russias-fsb-is-quietly-hijacking-old-routers-across-critical-infrastructure-alli ThreatVectr en 2026-07-13T17:59:00.937Z Russia's FSB Is Quietly Hijacking Old Routers Across Critical Infrastructure, Allies Warn https://threatvectr.com/story/gigawiper-the-malware-that-destroys-on-demand ThreatVectr en 2026-07-13T17:26:00.334Z GigaWiper: The Malware That Destroys on Demand https://threatvectr.com/story/your-ai-risk-register-is-a-list-not-a-plan-here-is-what-organisations-are-missin ThreatVectr en 2026-07-13T16:57:00.034Z Your AI risk register is a list, not a plan. Here is what organisations are missing. https://threatvectr.com/story/cisa-flags-active-attacks-on-two-joomla-add-ons-that-let-hackers-take-over-websi ThreatVectr en 2026-07-13T15:53:00.384Z CISA flags active attacks on two Joomla add-ons that let hackers take over websites https://threatvectr.com/story/one-poisoned-email-can-rewrite-what-your-ai-assistant-remembers-about-you ThreatVectr en 2026-07-13T15:40:00.482Z One Poisoned Email Can Rewrite What Your AI Assistant 'Remembers' About You https://threatvectr.com/story/the-week-trusted-software-turned-hostile-sharefile-citrix-bleed-2-and-ai-coding- ThreatVectr en 2026-07-13T15:34:00.017Z The Week Trusted Software Turned Hostile: ShareFile, Citrix Bleed 2, and AI Coding Attacks https://threatvectr.com/story/cisa-left-aws-govcloud-keys-on-github-for-six-months-ignored-nine-alerts ThreatVectr en 2026-07-13T15:29:00.620Z CISA Left AWS GovCloud Keys on GitHub for Six Months, Ignored Nine Alerts https://threatvectr.com/story/scambuster-turns-phishing-emails-into-intelligence-by-pretending-to-be-the-victi ThreatVectr en 2026-07-13T15:08:00.993Z ScamBuster Turns Phishing Emails Into Intelligence by Pretending to Be the Victim https://threatvectr.com/story/from-prison-to-cybersecurity-advocate-the-jesse-mcgraw-story ThreatVectr en 2026-07-13T15:00:00.451Z From Prison to Cybersecurity Advocate: The Jesse McGraw Story https://threatvectr.com/story/lidl-customers-in-three-countries-warned-after-supplier-breach-exposes-personal- ThreatVectr en 2026-07-13T14:36:00.666Z Lidl Customers in Three Countries Warned After Supplier Breach Exposes Personal Data https://threatvectr.com/story/varonis-launches-free-entra-id-training-game-to-teach-cloud-identity-attacks ThreatVectr en 2026-07-13T14:29:00.157Z Varonis Launches Free Entra ID Training Game to Teach Cloud Identity Attacks https://threatvectr.com/story/forg365-a-dollar400-a-month-kit-that-hijacks-microsoft-365-logins ThreatVectr en 2026-07-13T13:55:00.726Z Forg365: A $400-a-Month Kit That Hijacks Microsoft 365 Logins https://threatvectr.com/story/five-londoners-charged-over-russian-coms-the-scam-call-platform-behind-18-millio ThreatVectr en 2026-07-13T13:42:00.719Z Five Londoners Charged Over Russian Coms, the Scam-Call Platform Behind 1.8 Million Fake Calls https://threatvectr.com/story/37-cybersecurity-deals-in-one-month-what-june-2026s-manda-surge-tells-us ThreatVectr en 2026-07-13T13:02:00.799Z 37 Cybersecurity Deals in One Month: What June 2026's M&A Surge Tells Us https://threatvectr.com/story/attacker-uses-ai-written-powershell-script-to-map-a-companys-network ThreatVectr en 2026-07-13T12:49:00.892Z Attacker Uses AI-Written PowerShell Script to Map a Company's Network https://threatvectr.com/story/the-two-speed-soc-why-autonomous-ai-and-analyst-copilots-need-different-guardrai ThreatVectr en 2026-07-13T12:49:00.858Z The Two-Speed SOC: Why Autonomous AI and Analyst Copilots Need Different Guardrails https://threatvectr.com/story/metas-patent-bid-an-ai-that-listens-all-day-and-guesses-your-mood ThreatVectr en 2026-07-13T12:36:00.935Z Meta's Patent Bid: An AI That Listens All Day and Guesses Your Mood https://threatvectr.com/story/a-hidden-door-in-rabbitmq-left-company-systems-wide-open-for-two-years ThreatVectr en 2026-07-13T12:36:00.904Z A Hidden Door in RabbitMQ Left Company Systems Wide Open for Two Years https://threatvectr.com/story/two-security-flaws-in-rabbitmq-could-let-attackers-steal-login-secrets-and-take- ThreatVectr en 2026-07-13T12:26:00.262Z Two Security Flaws in RabbitMQ Could Let Attackers Steal Login Secrets and Take Over Corporate Messaging Systems https://threatvectr.com/story/eu-and-uk-hit-russian-spy-hackers-with-joint-sanctions ThreatVectr en 2026-07-13T11:55:00.972Z EU and UK Hit Russian Spy Hackers With Joint Sanctions https://threatvectr.com/story/ransomware-group-claims-attack-on-els-for-autism-foundation ThreatVectr en 2026-07-13T11:10:00.186Z Ransomware group claims attack on Els for Autism Foundation https://threatvectr.com/story/your-dashboards-are-not-your-defence-why-visibility-is-not-the-same-as-surviving ThreatVectr en 2026-07-13T11:08:00.036Z Your dashboards are not your defence: why 'visibility' is not the same as surviving an attack https://threatvectr.com/story/eu-sanctions-russian-intelligence-officers-over-years-long-cyber-spying-and-sabo ThreatVectr en 2026-07-13T11:01:01.005Z EU Sanctions Russian Intelligence Officers Over Years-Long Cyber Spying and Sabotage Campaign https://threatvectr.com/story/russian-fsb-hackers-are-quietly-hijacking-routers-at-hospitals-power-firms-and-b ThreatVectr en 2026-07-13T09:51:00.677Z Russian FSB hackers are quietly hijacking routers at hospitals, power firms and banks, nine countries warn https://threatvectr.com/story/hackers-are-breaking-into-websites-through-two-popular-joomla-add-ons ThreatVectr en 2026-07-13T09:22:00.563Z Hackers Are Breaking Into Websites Through Two Popular Joomla Add-Ons https://threatvectr.com/story/a-phishing-crew-forgot-to-lock-its-own-front-door ThreatVectr en 2026-07-13T08:42:00.897Z A Phishing Crew Forgot to Lock Its Own Front Door https://threatvectr.com/story/half-a-million-patients-data-stolen-from-new-jersey-lab-company ThreatVectr en 2026-07-13T08:33:00.253Z Half a Million Patients' Data Stolen From New Jersey Lab Company https://threatvectr.com/story/ai-is-making-rich-organisations-even-safer-what-happens-to-everyone-else ThreatVectr en 2026-07-13T07:32:00.623Z AI Is Making Rich Organisations Even Safer. What Happens to Everyone Else? https://threatvectr.com/story/us-cyber-agency-flags-two-joomla-add-on-flaws-already-being-exploited ThreatVectr en 2026-07-13T07:08:00.896Z US Cyber Agency Flags Two Joomla Add-On Flaws Already Being Exploited https://threatvectr.com/story/openai-lifts-the-five-hour-cap-on-chatgpt-and-codex-after-a-weekend-of-overloade ThreatVectr en 2026-07-13T00:52:00.944Z OpenAI Lifts the Five-Hour Cap on ChatGPT and Codex After a Weekend of Overloaded Demand https://threatvectr.com/story/nine-in-ten-top-adult-sites-now-check-ages-in-australia-but-vpn-workarounds-are- ThreatVectr en 2026-07-13T00:36:00.713Z Nine in Ten Top Adult Sites Now Check Ages in Australia, But VPN Workarounds Are Next on the Regulator's List https://threatvectr.com/story/meta-kills-ai-image-tool-days-after-launch-over-privacy-backlash ThreatVectr en 2026-07-13T00:31:00.323Z Meta Kills AI Image Tool Days After Launch Over Privacy Backlash https://threatvectr.com/story/you-probably-cant-spot-an-ai-fake-face-researchers-think-they-can-teach-you ThreatVectr en 2026-07-13T00:26:00.955Z You Probably Can't Spot an AI Fake Face. Researchers Think They Can Teach You