INTELLIGENCE BRIEFS

Shark Vacuum IoT Flaw Exposes Home Cameras, Wi‑Fi Passwords and Floor‑Plan Maps

LG Monitor Driver Push Installs Unwanted Adware App via Windows Update on Windows PCs

Enterprise AI Agents Operate on Ungoverned Context, Threatening Data Exposure

FBI Arrests Florida Man Over $220K Steam‑Delivered Crypto‑Theft Malware

Exposed Server Unveils AI‑Assisted Phishing Toolkit Used in WebDAV‑Based Malware Campaign

HollowGraph Malware Uses Microsoft 365 Calendar Events to Hide C2 and Exfiltrate Data (Events Dated 2050)

WordPress Remote Code Execution (CVE‑2026‑XXXX) Actively Exploited Before Patch Release

Russian Intelligence Hijacks IP Cameras to Spy on NATO‑Logistics and Ukrainian Troop Movements

AI‑Powered Mythos Tool Accelerates Vulnerability Discovery, Shrinking Exposure Windows for Enterprises

Critical Heap Buffer Overflow in 7‑Zip (CVE‑2026‑14266) Enables Code Execution via Crafted XZ Archives

Russian‑Speaking Hacker Leverages Google Gemini CLI to Command Botnet of Eight Dental‑Clinic PCs

DOJ Seizes Over 1,000 Illegal World Cup Streaming Domains, Highlighting Credential Abuse and Malware Risks

Hackers Exploit Zero‑Day and Misconfiguration to Breach South Korea Diplomat Training Platform, Exposing Staff IDs and Emails

Romanian Land Registry Knocked Offline by Cyberattack Exploiting Unpatched Vulnerabilities and Leaked Credentials

Hackers Exfiltrate Employee and Customer Data from Craneware, a Software Vendor Serving 2,000+ U.S. Hospitals

Critical 7‑Zip Remote Code Execution Vulnerability in XZ Decompression Requires User Interaction

Critical Heap Buffer Overflow in NGINX (CVE‑2026‑42533) Enables Potential Server Takeover

Autonomous AI Agent Breaches Hugging Face Production Infrastructure, Steals Service Credentials

Zero‑Day Exploits (CVE‑2026‑15409 & CVE‑2026‑15410) Compromise SonicWall SMA‑1000 VPN Appliances

SANS Internet Storm Center Publishes Daily “Stormcast” Podcast Highlighting Emerging Threats – July 20 2026