Your Security Digest · 29 jul

Quiet today.

495 scanned. Nothing on fire. Read at your own pace.

Data source: supabase

tracked136

critical0

active exploit0

136 incidents · mediumupdated live

Jul 272d ago

…

mediumidentity

Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin

Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store.

aeo—social0 · flat

Jul 272d ago

…

mediumemail

Shadow AI agents are multiplying. Here's how to find and secure them.

Your workforce is building agents in Salesforce Agentforce, Microsoft Copilot Studio, Cursor, Zapier, Retool, and a dozen other tools, often without visibility or approval from IT or security.

aeo—social0 · flat

Quiet today.

Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin

Shadow AI agents are multiplying. Here's how to find and secure them.

GitHub, PyPI add time-based defenses against supply chain attacks

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Malicious sites use JavaScript to build malware in browser memory

OpenAI confirms ChatGPT is down worldwide

Microsoft blames massive Microsoft 365 outage on maintenance bug

Chick-fil-A data breach affects more than 13,000 customers

Man gets six years for hacking 750 women's Snapchat accounts

Australian energy provider Origin says data breach exposes client data

Fake Claude app promoted by Bing ads pushes SectopRAT malware

FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires

MZ Automation lib60870

Weintek cMT3092X

Rockwell Automation ThinManager

Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite

Johnson Controls XAAP Android

MZ Automation libIEC61850

Johnson Controls C-CURE 9000 and Victor application server

Panduit IntraVUE

Microsoft working to fix Exchange Online mailbox quarantine issue

Stop renting storage space — this lifetime 2TB plan is yours for $59

Chick-fil-A discloses data breach after credential stuffing attacks

LG to Ban Residential Proxies from Smart TV Apps

Police dismantle Kratos phishing platform, arrest developer

Tycon Systems TPDIN-Monitor-WEB2

Siemens SIDIS Secured SmartPlug

Siemens IAM Client

Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW

Rockwell Automation 1734 POINT I/O

Rockwell Automation 1718-AENTR/1719-AENTR

Rockwell Automation Studio 5000 Logix Designer

Siemens CADRA

Rockwell Automation FactoryTalk Services Platform

US seizes over 1,000 websites in FIFA World Cup piracy crackdown

Microsoft shares manual fix for WSUS sync delays and timeouts

Hackers steal $23.7 million in crypto from Ostium in off-chain attack

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

Hugging Face warns an autonomous AI agent hacked its network

Microsoft confirms Windows Server Update Services sync delays

Windows KB5121767 OOB update fixes shutdowns on some Dell PCs

Hackers abuse ViPNet software to target Russian govt agencies

The Future of Age Verification: Your Face Never Leaves Your Device

Abbott probes two cyber incidents amid extortion claims

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

Inside the Search for "Clean" Residential Proxies for Carding

US charges two over laundering $43 million from investment fraud

Claude Chrome extension flaw lets malicious extensions trigger AI actions

New OkoBot framework deploys 20 payloads to steal data, crypto

AI Agents Broke the Security Playbook. Here's What Replaces It.

Scattered Spider members behind TfL hack get five years in prison

Rockwell Automation Arena

Siemens SICAM 8

SALTO ProAccess Space

Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix

Rockwell Automation FactoryTalk DataMosaix

Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT

Rockwell Automation Flex 5000 Adapter

NASA Core Flight System (cFS) Health & Safety (HS) Application

AutomationDirect Productivity Suite

Windows 11 24H2 Home and Pro reach end of support in 90 days

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers

Microsoft: Some Dell PCs shut down after recent Windows updates

Windows 11 KB5101650 & KB5099414 cumulative updates released

Microsoft Entra ID gets passkeys default authentication starting September

New phishing kits target Microsoft 365 accounts, evade MFA

ABB Ability Edgenius

ABB Advant Master Online Builder

ABB T-MAC Plus

Rockwell Automation 1715-AENTR EtherNet/IP Adapter

Microsoft starts testing cleaner Windows Search without ads

Hackers backdoor Jscrambler npm package with infostealer malware

Lessons Learned from CISA’s Recent GitHub Leak

Lidl discloses online shop breach after service provider hack

UK charges suspects linked to Russian Coms call spoofing platform

Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting

EU sanctions Russian GRU military hackers over cyberattacks

OpenAI temporarily relaxes GPT-5.6 Sol usage limits