🚨 148 npm packages disguised as student web proxies turned visitors’ browsers into a DDoS botnet.

The code never ran at install time. It waited inside working proxy sites, beyond scanners focused on install-time behavior.

Here's how the campaign worked: https://thehackernews.com/2026/07/148-npm-packages-disguised-as-student.html

💪 U.S. sanctions hit First VPN, its administrator, and a cryptor seller over support for #ransomware attacks on American businesses, hospitals, financial firms, and local governments.

The VPN was dismantled in May 2026 after allegedly helping attackers hide their origins.

How the operation worked: https://thehackernews.com/2026/07/us-sanctions-first-vpn-service-and.html

🛑 Grok Build uploaded entire Git repositories, full commit history and all, to xAI storage, not just the files the agent read.

A captured bundle contained a file the agent had been explicitly told not to open.

What was uploaded, and which secrets users should rotate: https://thehackernews.com/2026/07/grok-build-uploads-entire-git.html

⚠️ Attackers can validate stolen #Microsoft Entra credentials without generating a successful sign-in event.

Researchers tracked two campaigns using spoofed OAuth client IDs, including one that targeted over 2 million users. App-scoped detections may miss it.

Read why Entra logs may miss it: https://thehackernews.com/2026/07/oauth-client-id-spoofing-lets-attackers.html

🚨 Researchers tested 85 browser crypto wallets representing 35.16 million Chrome Web Store users.

Some linked separate addresses, kept exposing previously granted addresses after logout, or enabled tracking across unrelated sites.

How it works: https://thehackernews.com/2026/07/study-of-85-crypto-wallet-extensions.html

🛑 11 old Microsoft-signed UEFI shims could let attackers with admin access bypass Secure Boot and run code before the OS starts.

Microsoft revoked the vulnerable shims in June 2026, but systems without the revocation update may still accept them.

Read how the bypass works: https://thehackernews.com/2026/07/11-old-microsoft-signed-linux-uefi.html

⚠️ A RabbitMQ flaw can leak an OAuth client secret in one unauthenticated request, potentially giving attackers full broker control in affected setups.

A second bug lets logged-in users read queue and exchange metadata beyond their permissions.

Details: https://thehackernews.com/2026/07/rabbitmq-flaws-could-leak-oauth-secrets.html

⚡ Pentera’s MCP Server gives AI assistants validated attack paths, not just scanner scores.

A critical finding may be unreachable, while a medium-severity flaw may be the one that leads to privileged access.

How validation changes the workflow: https://thehackernews.com/2026/07/how-pentera-turns-ai-security-workflows.html

UPDATE: Progress has restored ShareFile Storage Zone Controllers.

Progress Software told The Hacker News it patched a high-severity flaw in versions 5.x and 6.x. It found no evidence of account or data access and no active threat.

No CVE or actor was named.

Read: https://thehackernews.com/2026/07/urgent-progress-tells-sharefile.html

⚠️ LabubaRAT masquerades as NVIDIA software on Windows.

The Rust-based RAT profiles 12 security products and can run commands, move files, capture screenshots, and proxy traffic through the infected host.

Here's how it stays connected: https://thehackernews.com/2026/07/labubarat-masquerades-as-nvidia.html

🛑 Claude for Chrome still lets another extension running on claude[.]ai trigger tasks that read Gmail, Docs, and Calendar.

One approval click remains by default. With “Act without asking” enabled, the same task runs silently.

Eight releases later, the path is still open.

How it works: https://thehackernews.com/2026/07/claude-for-chrome-flaw-lets-other.html

SAP patched a CVSS 9.9 NetWeaver ABAP flaw that could let an authenticated attacker access or modify data, or knock systems offline.

The same update fixes a Commerce Cloud issue tied to publicly documented sample OAuth credentials left unchanged in production.

Read : https://thehackernews.com/2026/07/sap-patches-cvss-99-netweaver-abap-flaw.html

🔥 Microsoft patched a record 622 CVEs, including two exploited zero-days in SharePoint Server and AD FS.

The SharePoint flaw allows remote, unauthenticated privilege escalation. The AD FS bug lets authenticated attackers elevate privileges locally.

Here's what to patch first: https://thehackernews.com/2026/07/microsoft-patches-record-622-flaws.html

🛑 Two SonicWall SMA 1000 zero-days are under active attack, the company says.

One could let authenticated attackers run OS commands as administrator. The other is a CVSS 10.0 SSRF flaw.

What to patch and check: https://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.html

🚨 Five poisoned versions of four AsyncAPI npm packages shipped a multi-stage botnet loader.

They carried valid provenance attestations, and the malware ran when affected modules were loaded, not at install time.

How trusted releases carried the malware: https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html

🚨 Cursor on Windows can silently run an attacker-supplied binary when a developer opens a cloned repository.

A repo-root git.exe is enough. No prompt, agent, approval, or prior access. It runs as the logged-in user.

Reported in December. Still unpatched.

How it works and what stops it: https://thehackernews.com/2026/07/cursor-flaw-lets-malicious-cloned.html

One approved marketing tag can quietly load unvetted fourth-party code into your site.

Those scripts can access forms, checkout fields, and customer data long after the original vendor review.

How the approval gap forms: https://thehackernews.com/2026/07/new-webinar-closing-approval-gap-in-ai.html

🛑 Right after #Microsoft’s July Patch Tuesday, Chaotic Eclipse dropped a Windows 0-Day PoC that still works on every supported desktop and server release.

It is the latest turn in the researcher’s months-long dispute with Microsoft.

Here's what LegacyHive exploit can do - https://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.html

Traditional SASE sees the HTTPS connection to an LLM, not the intent inside it.

An AI agent can use MCP tools to pull proprietary code or internal documents while the proxy sees only valid encrypted traffic.

What changes at the point of interaction: https://thehackernews.com/2026/07/sase-has-ai-blind-spot-inspecting.html

AI-driven threats move daily, but most security programs still rely on week-old spreadsheets to report risk to the board.

Join next week’s Axonius webinar as Frederico Hakamine breaks down how to close this reporting gap with automated baselines and metrics that stand up to executive scrutiny.

Cyber Metrics That Matter in the Age of AI >> https://thn.news/cyber-metrics

🚨 Public exploit code is available for two critical #Firefox flaws.

Google fixed 15 #Chrome bugs, #Adobe patched 88 vulnerabilities across ColdFusion, Commerce, Experience Manager, and Illustrator, and Broadcom closed a critical #VMware Avi authentication bypass.

Full patch roundup: https://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.html