July 2026
OVH reveals semi-secret plan to fix critical Januscape hypervisor bug with mass reboots – and an Australian crash-test dummy
French cloud backported a patch into Debian and didn’t seek customer consent, despite chance of downtime
Attackers pummel critical WordPress vuln to create all sorts of mischief
Plus dozens of PoCs in the public domain
Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign
Malware hides commands in appointments set for 2050 and uses Redmond's own cloud to phone home
Connecting AI agents to outside services explodes the risk radius
Connect all the things and watch what happens
AI spam filters are getting suckered by old-school text salting
Turns out decades-old email tricks still work against some LLM-powered email filters
Attackers target critical FortiSandbox flaws as CISA issues patch order
Command injection vulns land on exploited list after researchers spot abuse attempts
Google fixing Android lock screen bug that lets Gemini send SMS without a PIN
A specific multi-touch gesture bypasses an authentication prompt, allowing anyone to send messages
South Korea making its own security-centric AI model
Adapting existing local LLM project for security and sovereignty purposes and hopes to one day match Mythos
OpenAI admits GPT-5.6 occasionally deletes files – but it’s an ‘honest mistake’
Data purges deemed an example of 'misaligned behavior' that upstart is working to avoid
C’mon, just copy this text string and paste it into your macOS Terminal – it’ll fix your computer, honest
Newly documented stealer ClickLock comes for the more trusting Mac user with spot of social engineering