These news items are automatically aggregated from industry sources and are not individually reviewed. Any inaccuracies are unintentional —
let us know and we'll correct or remove it.
Socket discovered 17 malicious npm and PyPI packages published simultaneously on July 7, impersonating SDKs for UK-headquartered payment brands Paysafe, Skrill, and Neteller. The packages return convincing fake success responses while quietly exfiltrating API keys, AWS credentials, GitHub tokens, and npm tokens to attacker infrastructure hosted on AWS. Any developer integrating payment SDKs from public registries without verifying the publisher just got a very concrete reason to check.
As of July 8, 2026, Azure Databricks bills Genie usage beyond a 150 DBU per-user monthly allowance on a pay-as-you-go basis. Teams that enabled Genie for wide user access without setting usage controls will start seeing per-user LLM charges accumulate immediately, and service principals get no free allowance at all. It is a small pricing change on paper that can produce a real line item for organisations that treated Genie as a flat-cost feature rather than a metered one.
CISA added four actively exploited flaws to its Known Exploited Vulnerabilities catalog this week, including CVE-2026-55255 in Langflow, the first AI agent orchestration platform ever to appear on the list. Alongside a maximum-severity Adobe ColdFusion path traversal bug and two Joomla page builder flaws, federal agencies have been told to patch by July 10. Organisations running AI agent tooling in production should treat this as the moment that category of software officially became a routine attack target.
npm v12 ships this month with the most significant security redesign in the package manager’s 16-year history: install scripts, Git dependencies, and remote tarball sources will no longer run automatically. The change is a direct response to a year of supply chain attacks that used postinstall hooks to steal credentials from developer machines and CI/CD pipelines. Teams that have not acted on the warnings already present in npm 11.16.0 will find builds failing silently the moment v12 lands.
CVE-2026-48558, a maximum-severity CVSS 10.0 authentication bypass in SimpleHelp’s remote support software, lets an unauthenticated attacker forge an OIDC token and create a fully privileged technician account. CISA added it to its Known Exploited Vulnerabilities catalog with a 2 July 2026 remediation deadline, and attackers are already using it to install Djinn Stealer and TaskWeaver malware. Because SimpleHelp sits inside the MSP supply chain, one compromised instance can cascade into every managed client behind it.
AWS Continuum, unveiled at the AWS Summit in New York and now in gated preview, is a security service that discovers, prioritises, validates, and remediates code vulnerabilities autonomously, starting in a human-in-the-loop learn mode before teams can graduate it to automated enforcement. It leans on the new AWS Context knowledge graph to reason about what is actually exploitable in a given environment. For teams already struggling to keep up with vulnerability backlogs, it is a preview of where cloud security tooling is heading, and a preview of the governance questions that come with it.
CVE-2026-20896, a CVSS 9.8 flaw in Gitea’s official Docker images, let anyone who could reach the container’s HTTP port impersonate an administrator with a single X-WEBAUTH-USER header. Gitea patched it in version 1.26.3 on 20 June 2026, but threat actors were already probing for it by early July. This is the second major Gitea vulnerability disclosed in as many months, and it lands squarely on the self-hosted Git servers many European teams run to keep code off US-based platforms.
CVE-2026-43503, dubbed DirtyClone, lets any unprivileged local user on a wide range of Linux distributions gain root by exploiting how the kernel clones socket buffer fragments. The exploit bypasses on-disk integrity monitoring entirely, and JFrog’s proof-of-concept is already public.
Microsoft’s July 1 2026 pricing update raises most commercial Microsoft 365 and Office 365 plans by 8 to 17 percent in USD terms, on top of a separate pricing-precision change applied to EEA currency billing. Combined with February’s temporary euro price cut, the net impact on European invoices is uneven and easy to miss.
With the June 30 audit deadline now behind them, national regulators across the EU are moving on NIS2 enforcement, but not through fines yet. Germany’s BSI issued 47 formal notices in the last quarter, France’s ANSSI sent 23 remediation orders to energy and transport entities, and Italy’s ACN is still chasing thousands of unregistered entities. The pattern mirrors 2018 GDPR enforcement closely enough to predict what comes next.
This site uses cookies. By continuing to use this website, you agree to their use.
We’ll help you resolve your infrastructure challenges
Our team of experts is ready to help you with your infrastructure challenges. We’ll give you honest and personal treatment. Get in touch to learn more.
