Talkback News · Scour

The Canvas breach exposed higher Ed's third-party identity blind spot

Centers Lab NJ discloses data breach incident impacting 542,000 people

Covers U.S. Department of Health & Human Services - Office for Civil Rights

Ukrainians reportedly manipulate Russian fuel maps through coordinated online participation

Covers Ukrainians are using VPNs to cause havoc in Russia by changing fuel station statuses on maps in a bid to cause chaos and confusion

Malwarebytes·

Ghostcommit attack hides malicious AI instructions in images [app] [exp]

Covers GhostCommit – Convention-File Steganographic Exfiltration (Attack PoC)

Covered by Malware Analysis, News and Indicators

Dark Reading·

Turning the Tables on Email Scammers With 'ScamBuster' [social]

Covered by SC Media

CyberInsider·

Intel agencies warn of Russian state hackers targeting routers worldwide [net]

ministryofcyberaffairs.com·

How China Built a 50,000 Apps Per Day Detection Grid for safeguarding its Cyber Space [net]

ministryofcyberaffairs.com·

FBI and Google Dismantle 'Outsider', the $88-a-Week Phishing Service Behind $1.9 Billion in Losses [social]

Security Affairs·

U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

Covers 2 stories including Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation

The Hacker News·

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Covers 4 stories including The npm Threat Landscape: Attack Surface and Mitigations

The Hacker News·

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Covers 2 stories including One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

SecurityWeek·

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Covers Coordinated GitHub API enumeration and access token abuse

Covered by sh.itjust.works, Techrights

BleepingComputer·

Australia warns of global campaign targeting vulnerable CMS platforms

Covers Large-scale exploitation campaign targeting website content management systems (CMS)

Covered by Computer Sweden

haveibeenpwned.com·

Glendale Community College - 793,925 breached accounts

ministryofcyberaffairs.com·

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

13th July – Threat Intelligence Report

EU and UK officially blame Russian spies for cyberattack on Poland's power grid

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

Lessons Learned from CISA’s Recent GitHub Leak

The Canvas breach exposed higher Ed's third-party identity blind spot

Centers Lab NJ discloses data breach incident impacting 542,000 people

Ukrainians reportedly manipulate Russian fuel maps through coordinated online participation

Ghostcommit attack hides malicious AI instructions in images [app] [exp]

Turning the Tables on Email Scammers With 'ScamBuster' [social]

Intel agencies warn of Russian state hackers targeting routers worldwide [net]

How China Built a 50,000 Apps Per Day Detection Grid for safeguarding its Cyber Space [net]

FBI and Google Dismantle 'Outsider', the $88-a-Week Phishing Service Behind $1.9 Billion in Losses [social]

U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Australia warns of global campaign targeting vulnerable CMS platforms

Glendale Community College - 793,925 breached accounts

Google's Alert led to busting of a child exploitation case in Uttar Pradesh; accused arrested