Weekly News - Two new high severity WordPress vulnerabilities, patch immediately!

Fake OAuth client IDs are helping attackers slip past sign-in logs - View in browser  Weekly cybersecurity news July 20, 2026 Gartner predicts 60% of pen test programs go continuous by 2028. Get the Gartner report on building a continuous offensive security testing program. Latest articles: Product showcase: How to evaluate AI SOC platforms and where Prophet AI leads The MDR renewal question: what changes when AI can handle the alerts Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance Two new high severity WordPress vulnerabilities, patch immediately! Spirals ransomware locks down victim systems in under 24 hours Scammers weaponize FaceTime to drain bank accounts Claude can now sign into websites with 1Password without exposing your credentials Ransomware attack halts Coca-Cola’s Fairlife US milk production Prompt injection is becoming the XSS of the web agent era The script, not the voice, is what makes AI voice phishing work A hard drive reliability check on 341,263 drives, from 4TB to past 20TB New infosec products of the week: July 17, 2026 Scattered Spider members jailed over Transport for London hack that cost £29 million CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes Romania’s land registry hit by cyber attack, data allegedly for sale Microsoft makes Windows SSO prompts easier to manage Police take down investment fraud network that stole €100 million a month VS Code agent host runs Copilot, Claude, and Codex in a dedicated process Reading between the lines of a cyber insurance policy What public money does to open-source projects Ransom demands are down, email is the top way attackers get in Companies keep getting breached by vulnerabilities they already knew about GPT-Red beat human red teamers on a prompt injection test Finance phishing works because it sounds boringly normal LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software Threat actor impersonated hundreds of brands on GitHub to push infostealer malware Spanish police dismantle €140 million cybercrime network ClickFix is changing the economics of social engineering AI-driven bug hunting fuels record Microsoft Patch Tuesday AWS retools Security Hub for AI and multicloud threats FreeRDP 3.29.0 security update resolves 22 advisories SingGuard-NSFA: Open-source guardrails for agentic AI An AI overthinking attack can tie a robot up for over a minute AI used to help plan the break-in, now it’s doing the break-in SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410) New macOS malware steals passwords by posing as Apple’s crash-reporting tool Download: The ultimate guide to network operations management “Context bombs” can frustrate AI-driven attacks, researchers found Google adds FIDO2 keys and phone passkeys to Windows login via GCPW No one knows how many old shims can still bypass UEFI Secure Boot UK charges five persons linked to fraud platform behind more than a million scam calls Microsoft Entra ID authentication overhaul to start in September 2026 New tutorials on underground hacking forums have roughly doubled The best defense against AI attacks turns out to be a skeptical human Fake smart home residents could stand in for real ones in security research Chatto: Open-source team messenger with privacy at its core Cybersecurity jobs available right now: July 14, 2026 Hackers breach Lidl’s IT service provider, steal customer data EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe Ransomware negotiator who betrayed clients sentenced to 70 months in prison Fake OAuth client IDs are helping attackers slip past sign-in logs Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers Claude Code users keep 50% higher limits until July 19 Why SBOMs, signing, and provenance still don’t tell you if software is safe Cynative: Open-source deep research agent Microsoft demystifies how Windows updates work A hardware security AI assistant that checks chips for hidden backdoors 99.9% of fixable AI vulnerabilities remain unpatched Enterprises are rethinking where their AI applications run Debian 13.6 security update patches over a hundred advisories in trixie Videos: The five step plan that cuts security budget waste Your vendor’s vendor might be the real breach risk Industry news: Adaptiva simplifies secure patch management for air-gapped networks ValorC3 extends SaaS protection with immutable cloud backups Intruder brings AI-powered, on-demand penetration testing to web applications Tenable One unifies code risks with enterprise exposure data Lineation.ai focuses on runtime security for autonomous AI agents Socure rolls out Remote Verifier for higher-risk identity checks Xint Pulse offers on-demand black-box penetration testing for web applications F5 Insight for ADSP enhances BIG-IP operations with guided updates and AI audit trails Radware adds cloud intelligence to DefensePro X for web DDoS defense LatticeFlow AI connects governance frameworks with continuous AI risk monitoring Nudge Security automates detection of risky OAuth grants and browser extensions Binary Defense’s NightBeacon CMD helps enterprise SOC teams automate threat investigations Polygraf AI Meeting Guard delivers real-time deepfake detection for enterprise meetings Fortinet adds AI controls and data loss prevention to FortiEndpoint Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots Lumen expands managed detection and response with Cortex XSIAM integration FastNetMon eliminates third-party bgp lookups with Netomics Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive