1. Fastjson RCE under active exploitation in the Java ecosystem — Risky Business News — https://news.risky.biz/risky-bulletin-a-json-rce-bug-is-about-to-rock-the-java-world/
2. Ransomware crews mass-exploiting edge VPN/firewall appliances (update) — CVE-2023-4966, CVE-2025-5777, CVE-2026-0257, CVE-2026-3055, CVE-2026-50751, CVE-2026-50752, CVE-2026-8451 — Cyber Security News — https://cybersecuritynews.com/ransomware-gangs-attack-vpn/
3. Spring Boot heapdump endpoint scanned for exposed secrets — SANS ISC — https://isc.sans.edu/diary/rss/33188
4. BlueNoroff hijacks trusted Telegram accounts for ClickFix crypto-theft — Cyber Security News — https://cybersecuritynews.com/bluenoroff-hijacks-trusted-telegram-accounts/
5. SparkKitty malware reads crypto seed phrases from phone photos — Check Point via Cyber Security News — https://cybersecuritynews.com/sparkkitty-malware-steals-crypto-wallet/
6. TELESHIM abuses Telegram API for C2 against Middle East governments — The Hacker News — https://thehackernews.com/2026/07/teleshim-abuses-telegram-for-c2-in.html
7. Fake Windows-app download sites push malware, 70+ utilities cloned — Cyber Security News — https://cybersecuritynews.com/websites-impersonating-popular-windows-apps/
8. Claude Code symlink import can silently exfiltrate local files — Cyber Security News — https://cybersecuritynews.com/claude-code-symlink-import-malicious-repositories/
9. GitHub adds 3-day Dependabot cooldown to blunt poisoned packages — The Hacker News — https://thehackernews.com/2026/07/github-adds-3-day-dependabot-cooldown.html · BleepingComputer — https://www.bleepingcomputer.com/news/security/github-pypi-add-time-absed-defenses-against-supply-chain-attacks/
10. ESAFENET CDG 3 scanned for shipped default passwords — SANS ISC — https://isc.sans.edu/diary/rss/33184
11. Anthropic Opus 5 closes gap on bug-finding, lags on exploit-writing — SecurityWeek — https://www.securityweek.com/anthropics-opus-5-nears-mythos-5-on-finding-bugs-but-falls-short-on-exploits/
12. iOS 27 jailbroken on iPhone 11 Pro via usbliter8 SecureROM exploit — Cyber Security News — https://cybersecuritynews.com/booted-jailbroken-ios-27-iphone-11-pro/
