Author: V Diwahar

CYBERSECURITY WEEKLY REPORT: WEEK OVERVIEW Welcome to this week’s cybersecurity weekly report. Scale and speed both broke records this week. Microsoft shipped 570 patched vulnerabilities in a single Patch Tuesday – nearly triple June’s already record-setting release while SonicWall confirmed two SMA 1000 zero-days had been under active exploitation since late June, giving federal agencies a five-day KEV remediation window. On the geopolitical front, France and the European Union formally attributed a decade-plus cyberespionage campaign to Russia’s FSB Center 16 (Turla), backing the attribution with EU/UK sanctions on 24 individuals and entities and a joint NSA/CISA/FBI advisory on router-hygiene failures…

CISA’s Known Exploited Vulnerabilities catalog has flagged thousands of flaws across routers, servers, and enterprise software. Until July 7, 2026, it had never listed a single vulnerability inside an AI agent platform until Langflow CVE-2026-55255 changed that. Security researchers had already caught attackers exploiting the flaw in the wild nearly two weeks before CISA’s confirmation landed. That gap should worry any SOC team, because most vulnerability-management programs still don’t track AI agent platform vulnerability categories the way they track servers and endpoints. Credentials, API keys, and cloud tokens sit inside these workflows in plain sight, and very few teams are…

This cybersecurity weekly report lands at an uneasy moment. Patch volumes keep breaking records, and quietly, the ransomware ecosystem is starting to automate itself. The week’s biggest story was the fallout from the FortiBleed credential-theft campaign, now formally tied to two active ransomware crews. Right alongside it: continued exploitation of a Microsoft SharePoint flaw that CISA has already added to its Known Exploited Vulnerabilities catalog. Qilin and DragonForce affiliates, for their part, kept up an aggressive pace of victim disclosures across manufacturing, telecom, and professional services. Here’s the strategic piece security leaders shouldn’t scroll past: the emergence of “agentic ransomware,”…

Mobile apps ship faster than most security teams can keep up with. A build that passed review in January might carry a new authentication flow, a new SDK, or a new payment integration by June. Each of those changes reopens the attack surface, whether anyone remembers to retest it or not. That’s the backdrop for mobile app penetration testing 2026, and it looks different from the annual check-the-box audits security teams got used to a few years ago. Regulation is tightening. Attackers have largely moved on from brute-forcing the client and started going after APIs and the third-party code bundled…

AI agents don’t just answer questions anymore. They browse websites, read internal documents, call APIs, and execute commands on behalf of the people who deployed them. That autonomy is what makes them useful. It’s also what’s created an entirely new security problem, and attackers have noticed. CrowdStrike’s researchers recently expanded their prompt injection taxonomy with 18 new techniques, pushing the total past 200 documented methods. Five of these deserve a closer look. They’re quiet by design, built to slip past reviews meant to catch obvious jailbreak attempts. That’s the uncomfortable part: these techniques don’t look like attacks until after they’ve…

Every SOC analyst evaluating the best SIEM tools 2026 has to offer runs into the same problem: the category has split into at least three different product types wearing the same three-letter acronym. There’s the classic log-search-and-correlate platform, the cloud-native pay-as-you-go service, and the newer AI-driven SecOps suite that bundles SIEM with XDR and SOAR. They are not interchangeable, and picking the wrong one means either drowning in per-GB ingestion bills or under-investing in detection depth. 2026 has added real complexity to this SIEM platform comparison. IBM sold QRadar’s SaaS business to Palo Alto Networks, pushing cloud customers toward Cortex…