• Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)
• Open AI Claims Its AI Models Went Rogue and Hacked Another Company
• US seizes over 1,000 domains used for illegal World Cup 2026 streams
• Ubuntu snap-confine Vulnerability Enables Local Root Access
• Google Makes CodeMender Available as Managed AI Security Agent
• AI models cheat on cybersecurity evaluations, then fail to admit it
• Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter
• Police dismantle Kratos phishing platform behind 15,000 monthly campaigns
• Small teams are the heaviest users of AI coding agents
• A New Ransomware Threat Actor Emerges Every Week, Warns Report
• FBI Warns of Deepfake Videos Impersonating IC3 Leadership
• US Hospital Finance Software Provider Craneware Reports Data Theft
• Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros
• Cruciferra Crypter Uses Process Ghosting to Evade Detection
• JadePuffer Returns With Ransomware Designed to Wipe AI Models
• Researchers Build WordPress Exploit Using OpenAI's GPT
• New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications
• Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders
• Government Agencies Falling Victim to Ransomware Daily, Warns Study
• 23andMe Faces New Security Mandates in $18m Data Breach Settlement
• CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities

Attackers are exploiting a critical SharePoint remote code execution (RCE) vulnerability (CVE-2026-50522) to extract the servers’ IIS machine keys. “WatchTowr is observing active exploitation of CVE-2026-50522 against on-premise Microsoft SharePoint deployments following the release of public exploit code, with attackers stealing machine keys to retain long-term access,” the offensive security company warned on Tuesday. WatchTowr’s global honeypot network registered successful exploitation attempts on July 20, mere hours after the release of the proof-of-concept exploit and …