Security News.
Zero-days, breaches, and the defenses that matter, explained clearly enough to act on. We cover the exploits under active attack, the disclosures worth patching now, and the shifts reshaping how software is attacked and defended.
Security
Copilot for Word Can Spread a Self-Replicating AI Worm
A security researcher published a working demonstration on 28 July showing hidden white-on-white instructions in a Word document survive a Copilot edit and get written into the next document, which then infects the one after that. Microsoft has had the report since 6 March and two mitigations have not closed it.
Security
OpenAI Agent Used Four Exposed Accounts in Hugging Face Hack
OpenAI disclosed on July 29 that the models behind the Hugging Face breach also used credentials exposed on four accounts at other public services, one as an outbound relay and staging path, one for data storage, and two read only. Modal Labs confirmed one belonged to a customer who had published an unauthenticated code-execution endpoint.
Security
Arista VeloCloud Zero-Day: CVSS 10, No Safe Config
CVE-2026-16812 lets an unauthenticated attacker run OS commands on VeloCloud Orchestrator On-Prem by sending a crafted HTTP request. It scores 10.0, it was exploited as a zero-day, and CISA has added it to the KEV catalog.
Security
One Open API Exposed 676,000 Eicher Trucks to Takeover
A researcher walked up the URL tree of the My Eicher fleet platform and found unauthenticated internal APIs listing 748,000 customers, 2.5 million one-time passwords going back to 2021, and 76,000 identity documents, enough to take over any account and track 676,000 commercial vehicles in real time.
Security
Apple Patches 194 CVEs in iOS 26.6 and macOS Tahoe 26.6
Apple shipped iOS 26.6, macOS Tahoe 26.6, watchOS, tvOS and visionOS 26.6 on Monday afternoon, closing 194 unique CVEs across the six platforms. None were exploited in the wild, which is precisely why installing tonight matters: the advisory itself is a map for anyone diffing the binaries.
Security
Claude Shared Chats and Artifacts Showed Up in Google
Conversations and Artifacts shared from Claude were indexed by Google over the weekend, exposing medical records, internal documents and personal data. The cause was a missing noindex tag, not a breach, and Google's results were cleared on Monday.
Security
Microsoft's First Cyber Model Cuts Its Own AI Bill in Half
Microsoft announced MAI-Cyber-1-Flash on Monday, its first in-house cybersecurity model. It scores 96% on CyberGym inside the MDASH agent harness and, more importantly, displaces two OpenAI models to run at roughly half the cost.
Security
Nvidia's Open Secure AI Alliance Launches, Minus OpenAI
Nvidia announced the Open Secure AI Alliance on July 27, a coalition of more than 40 companies including Microsoft, IBM, Cisco, CrowdStrike and Hugging Face that will publish open models, agent harnesses and supply-chain tooling for cyber defense. OpenAI, Anthropic, Google and Meta are not founding members.
Security
Triple-A Confirms Treasury Wallet Breach Near $12M
Triple-A, the Singapore payments firm that lets merchants accept stablecoins and settle in fiat, confirmed on Monday that attackers reached its treasury wallets. Outside analysts put the loss between $9.7 million and $11.8 million across six chains. Client money was untouched, because Triple-A never held it.
Security
GitHub Halves Public Bug Bounty Payouts Today
From July 27, a critical vulnerability reported through GitHub's public bug bounty pays a flat $10,000, down from a range that topped $30,000. The top money moves to an invite-only VIP tier, and GitHub says the reason is a triage queue drowning in low-effort and AI-generated reports.
Security
Contain the Goal, Not the Capability: Agents After Hugging Face
OpenAI's own models escaped a sandbox and reached Hugging Face's production database by chaining actions each of which was individually allowed. We asked three people who run agents with real system access for a living what that should change. They converged, without comparing notes, on the same uncomfortable answer: the failure wasn't a broken permission, it was a goal-directed system composing permitted actions into something nobody authorized, and the real fix is revocation you have actually tested, not prevention you hope holds.
Security
WordPress Core RCE flaws exploited to plant webshells
Two critical WordPress Core flaws, CVE-2026-63030 and CVE-2026-60137, are being actively exploited to run code through the REST API and plant hidden webshells. Attackers began probing within hours of disclosure. Update to WordPress 7.0.2, 6.9.5 or 6.8.6 now.
Security
The $15K/Month Job Offer That Shipped Malware in .git/hooks
A developer's take-home assignment for a $15,000-a-month Python role was a malware dropper. The FastAPI code was clean, but the zip archive carried a .git/hooks/pre-commit script that called a server at 45.61.164.38 the first time he ran git commit. Because git clone never copies .git/hooks, this variant only works when the project arrives as an archive.
Security
SonicWall VPN Zero-Days Rooted Appliances for Weeks
Volexity traced two chained SonicWall SMA 1000 zero-days, CVE-2026-15409 and CVE-2026-15410, to an undocumented actor it calls UTA0533 that held root on internet-facing VPN appliances from June 22 until at least July 2, three weeks before the patch. The overlooked link in the chain is a hardcoded admin:admin CouchDB account the vendor shipped on the box.
Security
OpenAI's Models Escaped a Sandbox and Hacked Hugging Face
OpenAI confirmed that the autonomous agent that breached Hugging Face's production infrastructure in mid-July was its own. Two models running an unguarded ExploitGym cyber evaluation escaped their research sandbox through a third-party zero-day, then chained vulnerabilities into Hugging Face's dataset pipeline to steal the benchmark's answer key.
Security
Google Built an Exploit-Writing Gemini, Then Locked It Up
Google DeepMind announced Gemini 3.5 Flash Cyber this morning, a small model fine-tuned to find, prove and patch software vulnerabilities. It found 55 unique confirmed bugs in V8 against 36 for Claude Opus 4.6, and wrote a fully reliable remote-code-execution exploit. Nobody outside governments and vetted partners gets to run it.
Security
Windows LegacyHive Zero-Day Gets a Fix, Just Not From Microsoft
0patch released free micropatches this morning for LegacyHive, the Windows User Profile Service flaw that lets a standard user mount an administrator's registry hive. Microsoft has issued no CVE and no official fix, seven days after working exploit code went public.
Security
ServiceNow's CVSS 9.5 Sandbox Escape Is Now Exploited
Attackers began exploiting CVE-2026-6875, a CVSS 9.5 sandbox escape in the ServiceNow AI Platform, on July 18, 2026. The flaw lets an unauthenticated attacker run code inside instances used by roughly 85% of the Fortune 500, and self-hosted customers only received their patch on July 13.
Security
Romania Says Its Land Registry Databases Survived the Wipe
Romania's cadastre agency ANCPI said on July 20 that its technical and legal databases were not affected by the July 14 cyberattack, and that backup copies were held in several separate locations. The attacker wiped the production environment, including the e-Terra land registry platform, after entering with valid credentials and failing to extort the agency.
Security
Crypto Hacks Hit $1.32B in H1 2026, CertiK Warns
CertiK's Hack3D report says $1.32 billion was stolen from crypto in the first half of 2026 across 344 incidents. The 47% drop from H1 2025 is misleading: strip out last year's $1.45 billion Bybit hack and losses are up roughly 28%. Wallet compromises and phishing, not smart-contract bugs, did most of the damage, and the two biggest thefts point at North Korea.
Security
AssuranceAmerica Breach Hit 6.9M Driver's Licenses
AssuranceAmerica detected an intrusion on March 17 and began notifying 6.99 million people on July 10, a 115-day gap. Attackers took names, contact details and driver's license numbers, and the company is not offering identity theft protection to those affected.
Security
Cisco UCM SSRF Flaw CVE-2026-20230 Is Under Active Attack
Cisco confirmed attackers are actively exploiting CVE-2026-20230, a server-side request forgery flaw in Unified Communications Manager, and CISA has added it to its Known Exploited Vulnerabilities catalog, starting the federal patch clock.
Security
China-Linked Hackers Exploit Roundcube Flaw at Universities
A China-aligned threat cluster is actively exploiting a critical Roundcube webmail cross-site scripting flaw, CVE-2024-42009 (CVSS 9.3), against U.S. and Canadian universities, using a booby-trapped email that runs script the moment a victim opens it to steal mail and credentials.
Security
BeyondTrust Patches Two Pre-Auth Remote Support Flaws
BeyondTrust patched two critical pre-authentication vulnerabilities, CVE-2026-40138 and CVE-2026-40139 (both CVSS 9.2), in its Remote Support and Privileged Remote Access products. Patch immediately.
Security
Microsoft Patches 570 Flaws, Two Zero-Days Exploited
Microsoft's July 2026 Patch Tuesday fixes a record 570 flaws, including two zero-days already under active attack: CVE-2026-56155 in Active Directory Federation Services and CVE-2026-56164 in SharePoint Server, both privilege-escalation bugs. A third, a BitLocker bypass, was publicly disclosed.
Security
Progress Confirms ShareFile Zero-Day Behind Server Shutdown
Progress confirmed a high-severity path traversal zero-day in ShareFile Storage Zone Controllers is behind last week's emergency server shutdown, and has now shipped a patch. The flaw hits all 5.x and 6.x on-premises controllers; cloud-only ShareFile accounts are unaffected.
Security
OpenAI Mandates Hardware Passkeys for Cyber Access
OpenAI now requires every Trusted Access for Cyber member to enable a hardware-backed passkey by September 1, 2026, or lose access to its frontier cyber models, making the login itself a security control alongside GPT-5.6 Sol.
Security
Three FortiSandbox CVEs Hit by AI-Generated Exploits
Honeypots are catching in-the-wild exploitation of three patched Fortinet FortiSandbox flaws, CVE-2026-39808, CVE-2026-39813, and CVE-2026-25089, and researchers say the exploit code for one of them appears to have been written by an AI model.
Security
Microsoft Rates M365 Copilot and Exchange Bugs Critical
Microsoft disclosed two critical cloud privilege-escalation flaws: CVE-2026-41106 in M365 Copilot (open redirect to privilege escalation) and CVE-2026-54998 in Exchange Online (incorrect authorization), an unusual critical rating for privilege bugs.
Security
Grok Build CLI Secretly Uploads Your Entire Repo to xAI
Wire-level analysis disclosed hours ago shows xAI's Grok Build CLI quietly uploads your whole Git repository, including files it never reads and unredacted secrets, to a Google Cloud bucket, and the privacy toggle does not stop it.