Jul 28, 2026
7 itemsDaily Cyber Digest — July 28, 2026
Tengu botnet, NightLedger backdoor, Fastjson 1.x zero-day, CISA KEV additions, and more from July 28, 2026.
Tag archive
Tagged: malware
All visible posts matching this normalized tag.
Jul 13, 2026
5 itemsDaily Cyber Digest: 2026-07-12
Five high-signal cyber developments from July 11-13, 2026: Joomla zero-days in CISA KEV, exposed Evilginx ops, a jscrambler npm infostealer, Pakistan police portal espionage, and unpatched AI-infra flaws.
NEWS
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer Durin During Install
The jscrambler npm package was compromised; installing 8.14.0 runs a cross-platform Rust infostealer that steals cloud keys, crypto wallets, and AI-tool credentials.
Jul 11, 2026 6 min read High Severity
Jul 11, 2026
5 itemsDaily Cyber Digest: 2026-07-10
July 10, 2026 roundup: AI-driven patch pressure, a 200+ GitHub malware network, active Django SQLi, HalluSquatting, and a malicious Injective npm SDK.
NEWS
Operation Muck and Load: 222 GitHub Repos Push Windows Malware via Fake Go Module
Socket tracks 'Operation Muck and Load', a 222-repo GitHub lure network that uses a fake Go module to drop RATs, infostealers, and cryptominers.
Jul 11, 2026 5 min read High Severity
Jul 10, 2026
5 itemsDaily Cyber Digest - July 9, 2026
July 9 roundup covering Defender patching, Helix SharePoint extortion, proxy malware, npm hardening, and open-source sabotage risk.
Jul 09, 2026
6 itemsDaily Cyber Digest: July 8, 2026
July 8 brought exploited vulnerability updates, UniFi critical patches, Langflow credential-harvesting activity, and fresh research on ORB and AI-agent abuse.
Jul 07, 2026
6 itemsDaily Cyber Digest: July 7, 2026
Critical remote-access auth bypasses, a 16-year Linux KVM VM-escape flaw, Cisco ISE RCE, Chrome and Teams threats lead the day.
NEWS
SkillCloak research exposes AI agent skill scanner evasion risk
Fresh research shows malicious AI agent skills can evade static scanners, pushing defenders toward runtime sandboxing and stricter skill governance.
Jul 06, 2026 4 min read Medium
Jul 02, 2026
5 itemsDaily Cyber Digest — July 1, 2026
Source-backed July 1 digest covering active exploitation, critical enterprise patching, AI/browser attack research, and fake-PoC supply-chain abuse.
NEWS
SimpleHelp OIDC Bypass Exploited to Deploy TaskWeaver and Djinn Stealer
A June 30 report says attackers exploited SimpleHelp CVE-2026-48558 to gain RMM technician access and deliver TaskWeaver plus Djinn Stealer.
Jul 01, 2026 4 min read Critical
NEWS
Miasma worm hits Microsoft GitHub repositories
Microsoft temporarily disabled repositories after reports of Miasma worm activity targeting developer IDE and AI coding tool workflows.
Jul 01, 2026 4 min read High Severity
NEWS
SharkLoader Uses Public Exploits and Fake Installers to Target Governments
Kaspersky and CyberPress report a SharkLoader campaign that abuses public exploits and fake installers to sideload Cobalt Strike onto government and enterprise systems.
Jun 25, 2026 5 min read High Severity