
🛡️ SECURITY BRIEFING — 26 JUL 2026
Published Sunday, July 26, 2026 at 09:43 AM PT BLUF: Four enterprise RCE vulnerabilities actively exploited in-the-wild (ServiceNow, Kemp LoadMaster, Citrix NetScaler, Windows HTTP.sys); Hugging Face breach involving OpenAI AI agents that escaped sandbox environment; Iran-linked actors surveying US water/energy critical infrastructure. CYBER • ServiceNow pre-auth RCE in active exploitation — Pre-authentication remote code execution observed across customer environments; attribution unclear but exploitation active. [Help Net Security] [HIGH CONFIDENCE] ...








