Weekly News - OpenAI: Our models breached Hugging Face during a cyber capability test

ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875) - View in browser  Weekly cybersecurity news July 27, 2026 Latest articles: Product Showcase: AppViewX Agent Identity Security Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached Meta tackles AI-generated accounts with a free Facebook verification badge Russian hackers exploit unpatched Zimbra servers to steal emails Microsoft tightens Windows enterprise activation security Google gives developers an AI bug hunter that also writes patches Google’s newest sign-in method asks you to look at the camera The automotive software vulnerabilities hiding in your dashboard Ransomware gangs go after EMEA healthcare’s supply chain The best-funded companies open the most phishing attachments Ransomware in 2026: More groups, more victims, no slowdown New infosec products of the week: July 24, 2026 How attackers hosted a fake Claude download page on the claude.ai domain Months-long breach exposes South Korean diplomats’ personal data Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process PyPI hardens package security with new upload restrictions Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack GitHub revamps bug bounty program with new VIP tier, payout changes Shadow AI is becoming enterprise security’s biggest blind spot Multi-patch vulnerability fixes can leave open source exposed The AI code vulnerabilities that grow with your app Building a defense in depth strategy for sensitive data OpenAI: Our models breached Hugging Face during a cyber capability test OpenAI Presence connects AI agents to enterprise data with built-in guardrails Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522) US seizes over 1,000 domains used for illegal World Cup 2026 streams AI models cheat on cybersecurity evaluations, then fail to admit it Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter Police dismantle Kratos phishing platform behind 15,000 monthly campaigns Small teams are the heaviest users of AI coding agents Snowpick: Open-source ServiceNow exposure scanner Security teams keep finding critical flaws after scheduled testing ends AI can’t fix cybersecurity’s hiring problem Cloud operations become the next big role for agentic AI AI agents tricked into recommending malicious GitHub repositories JadePuffer returns with ransomware built to target AI models and infrastructure Cisco’s open-weight Antares models make vulnerability localization cheaper SonicWall SMA zero-days were exploited weeks before disclosure Fake FBI agents target people who already got scammed AWS wants GuardDuty to automate the first steps of threat investigations Estée Lauder discloses data breach tied to Oracle EBS vulnerability Open-source maintainers still work underfunded as sponsorship crosses $100 million The air gap is a myth and other OT security truths Nobody was checking the drives that encrypt your laptop PR3TACK preemptive framework maps threats before attackers use them AI agents are still logging in as humans Cybersecurity jobs available right now: July 21, 2026 AI-generated reports push GNOME to shorten its disclosure window The Odyssey piracy scams surface hours after its theatrical debut HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel Paidwork breach exposes sensitive data of 23 million users ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875) Italy fines WINDTRE €1.7 million over security flaws behind two data breaches Hugging Face breached by autonomous AI agent The Windows 10 hangover is becoming a security problem Meet Dusseldorf, Microsoft’s open-source out-of-band security platform A forensic tool for backdoored code completions in AI assistants Product showcase: ZoneAlarm Mobile Security adds customizable content filtering to mobile security Nearly half of open-source AI projects never reach production Videos: Governing Al agents at scale: Lessons from the leaders who’ve done it More alerts are making your team slower, and an outcome-based SOC fixes that Industry news: Cobalt adds Autonomous Pentest to scale application security testing Axonius expands Asset Cloud with Cyber Assets and Exposures enhancements Astelia extends reachability analysis with agentic AI for vulnerability management ThreatDown expands security visibility to AI tools and machine identities Swimlane AI SOC automates security operations for MSSPs Glow exits stealth with $180 million to secure the AI-enabled endpoint Lookout identifies exploitable vulnerabilities in mobile apps Box expands enterprise AI governance with new agent security featuresox Arista adds AI-driven zero trust to VeloCloud SD-WAN Teleport enhances Identity Security platform with new AI agent behavior controls Druva brings backup, recovery and governance to AI workloads Shufti simplifies cross-border compliance with the Glocal Platform Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive