| |
|
|
|
A brutal week for defenders: an AI-driven phishing kit is hammering Microsoft 365, Progress is telling ShareFile admins to pull the plug, and CitrixBleed 2 intrusions are hitting ransomware speed records. Here are the 10 stories you can’t afford to miss.
|
|
🔥 TOP STORY • PHISHING
Forg365 Phishing Platform Uses AI to Attack Microsoft 365 Accounts
Forg365 is a phishing-as-a-service platform that bundles AI-powered lure generation, session-cookie theft, and post-compromise mailbox access into a single operator panel — industrializing Microsoft 365 account takeover for low-skill attackers.
By Abinaya • July 11, 2026
|
|
|
⚡ ACT NOW — THIS WEEK’S PATCH PRIORITIES
● ShareFile: Progress says power down on-prem Storage Zone Controllers immediately
● CitrixBleed 2: exploitation-to-ransomware observed in under 60 minutes
● GNU Guix: upgrade guix & guix-daemon to close four substitution flaws
|
|
|
THIS WEEK’S TOP STORIES
|
| 02 |
CLOUD SECURITY
In a rare, candid after-action report, CISA reveals a contractor accidentally exposed the agency’s own AWS GovCloud credentials and Infrastructure-as-Code repositories — and what every org should learn from it.
|
| |
|
| 03 |
VULNERABILITY
A critical weakness in how Dell stores BIOS administrator and user passwords allows full password recovery from a flash dump in milliseconds — no brute force required.
|
| |
|
| 04 |
MOBILE / PRIVACY
A new study uncovers serious privacy failures across 281 Android VPN apps — the very tools users install to stay private are exposing their traffic instead.
|
| |
|
| 05 |
URGENT ALERT
An urgent advisory instructs customers running on-premises ShareFile Storage Zone Controllers to power the servers down immediately in response to a credible threat.
|
| |
|
| 06 |
AI SECURITY
Three high-severity flaws in OpenClaw — the open-source AI coding assistant with 381K GitHub stars — let attackers achieve remote code execution from a single message.
|
| |
|
| 07 |
RANSOMWARE
Intruders are turning a single internet-facing Citrix gateway into a full ransomware event at record speed — compressing the defender response window to minutes.
|
| |
|
| 08 |
MALWARE
A booking-themed spam campaign weaponizes ordinary .LNK shortcut files, chaining PowerShell and Node.js to turn a routine download into a full RCE foothold.
|
| |
|
| 09 |
VULNERABILITY
Four flaws in Guix’s package substitution and channel management enable privilege escalation, file disclosure, and package compromise. Upgrade guix and guix-daemon now.
|
| |
|
| 10 |
TOP 10 / BUYER’S GUIDE
Need one appliance for firewalling, IPS, VPN, antivirus, and web filtering — without a full security team to run it? Our 2026 ranking, led by Fortinet FortiGate.
|
|
|
|
|
Never miss a threat.
Follow Cyber Security News for real-time alerts between briefings.
|
|
© 2026 Cyber Security News. All rights reserved.
|