🚨 Five poisoned versions of four AsyncAPI npm packages shipped a multi-stage botnet loader.

They carried valid provenance attestations, and the malware ran when affected modules were loaded, not at install time.

How trusted releases carried the malware: https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html

🚨 Cursor on Windows can silently run an attacker-supplied binary when a developer opens a cloned repository.

A repo-root git.exe is enough. No prompt, agent, approval, or prior access. It runs as the logged-in user.

Reported in December. Still unpatched.

How it works and what stops it: https://thehackernews.com/2026/07/cursor-flaw-lets-malicious-cloned.html

One approved marketing tag can quietly load unvetted fourth-party code into your site.

Those scripts can access forms, checkout fields, and customer data long after the original vendor review.

How the approval gap forms: https://thehackernews.com/2026/07/new-webinar-closing-approval-gap-in-ai.html

🛑 Right after #Microsoft’s July Patch Tuesday, Chaotic Eclipse dropped a Windows 0-Day PoC that still works on every supported desktop and server release.

It is the latest turn in the researcher’s months-long dispute with Microsoft.

Here's what LegacyHive exploit can do - https://thehackernews.com/2026/07/researcher-drops-new-windows-zero-day.html

Traditional SASE sees the HTTPS connection to an LLM, not the intent inside it.

An AI agent can use MCP tools to pull proprietary code or internal documents while the proxy sees only valid encrypted traffic.

What changes at the point of interaction: https://thehackernews.com/2026/07/sase-has-ai-blind-spot-inspecting.html

AI-driven threats move daily, but most security programs still rely on week-old spreadsheets to report risk to the board.

Join next week’s Axonius webinar as Frederico Hakamine breaks down how to close this reporting gap with automated baselines and metrics that stand up to executive scrutiny.

Cyber Metrics That Matter in the Age of AI >> https://thn.news/cyber-metrics

🚨 Public exploit code is available for two critical #Firefox flaws.

Google fixed 15 #Chrome bugs, #Adobe patched 88 vulnerabilities across ColdFusion, Commerce, Experience Manager, and Illustrator, and Broadcom closed a critical #VMware Avi authentication bypass.

Full patch roundup: https://thehackernews.com/2026/07/firefox-chrome-adobe-and-vmware-updates.html

⚠️ On an infected Windows PC, OkoBot can make a fake seed phrase request appear inside the real Ledger Live or Trezor Suite app.

The app looks genuine because it is genuine. The request is not.

It may even wait until you plug in the hardware wallet.

Here's how this trap works: https://thehackernews.com/2026/07/okobot-malware-framework-injects-seed.html

⚠️ Researchers found raw LLM reasoning and an AI safety disclaimer left inside TuxBot v3 Evolution.

The unfinished IoT botnet packs 1,496 Telnet credential pairs and exploit code for more than 30 device families.

What already works: https://thehackernews.com/2026/07/tuxbot-v3-evolution-shows-signs-of-llm.html

🚨 Zoom has patched a 9.8-rated Windows flaw that could let an unauthenticated attacker take over accounts via network access.

CVE-2026-53412 affects the Desktop Client, VDI Client, and Meeting SDK.

Affected versions and update details: https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html

A valid login is not always enough.

A password may let someone read an account, but not change payout details. OIDC AMR, ACR, and SAML AuthnContext help applications decide when stronger proof is required.

How each signal works: https://thehackernews.com/expert-insights/2026/07/authncontext-and-amr-we-remember-what.html

⚡ OpenAI built an AI model to attack its own AI models.

GPT-Red develops prompt injections automatically. In one test, it got an AI vending machine to order a $100 item for $0.50 and cancel another customer’s order.

Read more on GPT-Red » https://thehackernews.com/2026/07/openais-gpt-red-automates-prompt.html

🛑 ALERT - Pull one certificate from a Shark robot vacuum, and it could run root commands on other Shark vacuums across the same AWS region.

In 24 hours, a researcher saw 673,816 devices return Exec_Response, which he treats as confirmation that they support the command handler.

Read how it worked - https://thehackernews.com/2026/07/unpatched-shark-vacuum-flaw-could-let.html

AI can generate polished vulnerability reports, payloads, and severity scores in seconds.

That does not prove the bug is reachable, exploitable, or even real. Without validation, faster testing becomes faster noise.

Why offensive security still runs on proof: https://thehackernews.com/2026/07/ai-can-find-bugs-but-human-knowledge.html

⚠️ Stupig can run SYSTEM commands from the Windows logon screen before anyone signs in.

The previously unreported backdoor surfaced alongside Daxin on a #Taiwan manufacturer’s host, where the intrusion may have gone unnoticed for 13 years.

How it hides inside Windows logon: https://thehackernews.com/2026/07/daxin-resurfaces-in-taiwan-alongside.html

🛑 Claude Code, Codex, Gemini CLI, and three browser agents were vulnerable to an attack that makes forged data look trusted.

It could lead to wrong clicks or running an attacker’s command, even when the user is asked to approve the action.

Why current defenses miss it: https://thehackernews.com/2026/07/new-agent-data-injection-attack-can.html

🛑 ClickLock Stealer turns a Mac into a password trap.

Cancel its fake prompt, and at the next login it kills Finder, Terminal, Activity Monitor, and major browsers every 210 milliseconds until a valid password is entered.

The desktop comes back. One implant stays.

How the trap works: https://thehackernews.com/2026/07/new-clicklock-macos-stealer-kills-apps.html

🔥 Hidden Infrastructure Exposed: ANY.RUN Reveals Hijacked Gov Websites Delivering Malware.

ANY.RUN's latest threat investigation uncovered previously undocumented backdoors and relationships behind the active PhantomEnigma campaign.

By connecting hundreds of seemingly unrelated sandbox sessions, the analysts exposed the full scope of attacks targeting banks and public agencies.

Read the exclusive report ↓ https://thehackernews.com/2026/07/20-hijacked-government-websites.html

🚨 ClickFix now delivers TELEPUZ, a new modular Windows malware.

Paste the command behind a fake browser fix, and it can steal browser cookies, log keystrokes, capture screenshots, and run operator commands.

How the attack chain gets there: https://thehackernews.com/2026/07/new-telepuz-malware-spreads-via.html

⚡ A flaw in #n8n’s Enterprise token exchange could let a valid JWT from one trusted issuer log its holder into an account tied to another.

The token is valid. The account is not theirs. The victim’s password never enters the picture.

Here's how the identity check failed: https://thehackernews.com/2026/07/n8n-token-exchange-flaw-could-let.html

🎮 Game-cheat spyware
🧩 Fake installer RATs
⏱️ Network encrypted in under 24 hours

Also this week:
▸ 290 fake GitHub repos
▸ Chrome Sync stalking
▸ OAuth phishing
▸ Windows EDR bypasses
▸ Major fraud busts
▸ 3,900 threat servers mapped

Read the full ThreatsDay Bulletin: https://thehackernews.com/2026/07/threatsday-game-cheat-spyware-24-hour.html