Breaking-Alert

Published Friday, July 10, 2026 at 07:24 PM PT BLUF: CISA announced creation of a new advisory board to coordinate critical infrastructure cybersecurity policy across government and private sector. This is a structural/governance initiative with no immediate operational security impact. No threat actor activity or vulnerability disclosure associated with this announcement. DETAILS: CISA formally launched an advisory council designed to improve information sharing and partnership coordination between federal agencies and critical infrastructure operators on cybersecurity matters. ...

Published Friday, July 10, 2026 at 01:22 PM PT BLUF: France’s cybersecurity agency ANSSI will cease certifying security products lacking quantum-resistant encryption starting 2027, forcing government bodies and critical infrastructure operators to migrate legacy systems. Organizations relying on French certifications must begin post-quantum crypto assessments immediately. DETAILS ANSSI announced the certification halt at the France Quantum conference; implementation begins 2027 Policy targets government bodies and critical operators as primary enforcement mechanism Quantum-resistant encryption standards exist (NIST finalized post-quantum algorithms in 2022); transition is technically feasible but operationally complex Timeline provides ~2.5 years for compliance; businesses should begin migration planning now per ANSSI guidance This represents the first major government agency to enforce post-quantum cryptography via certification requirements IMPACT ...

Published Friday, July 10, 2026 at 07:21 AM PT BLUF: Israeli cryptographic governance firm QIZ Security closed a $17 million seed round to accelerate deployment of post-quantum cryptographic solutions across critical infrastructure sectors. No active threat or incident reported; this is a funding announcement reflecting industry-wide shift toward quantum-resistant encryption ahead of federal compliance deadlines. DETAILS QIZ Security announced $17 million Series A funding led by Bessemer Venture Partners and Merlin Ventures, with additional participation from undisclosed investors Company develops cryptographic governance platform designed to identify and remediate post-quantum cryptographic vulnerabilities in operational technology (OT) and critical infrastructure environments Funding aligns with Trump administration post-quantum security directives and federal migration timelines (Microsoft targeting 2029 transition; government agencies under accelerated deadlines) Israeli-based firm; no confirmed U.S. government contracts mentioned in available reporting, though platform targets critical infrastructure operators Competitive landscape includes Keyfactor ($1B+ valuation) and other quantum-safe security vendors; market consolidation ongoing IMPACT ...

Published Friday, July 10, 2026 at 07:20 AM PT BLUF: InfraShield has unveiled NullCloud.ai, an on-premises AI compute system designed for nuclear and critical infrastructure operators to enhance cybersecurity and compliance posture. This is a product announcement, not a security incident. No active threat or vulnerability is reported at this time. DETAILS: InfraShield released NullCloud.ai as a localized AI platform specifically architected for nuclear facilities and other critical infrastructure environments The system operates on-premises, eliminating cloud dependency—a significant design choice for operators managing sensitive OT/IT environments with air-gap or restricted connectivity requirements Platform targets three functional areas: cybersecurity threat detection, compliance management, and critical infrastructure resilience capabilities Positioning aligns with broader industry trend of AI-driven operational technology (OT) security solutions (similar initiatives noted from Claroty, Frenos, and others in 2024) Uncertainty flag: Specific technical capabilities, deployment timeline, and customer commitments are not confirmed in available reporting IMPACT: ...

Published Thursday, July 09, 2026 at 01:18 PM PT BLUF: Zscaler has issued fragmented threat intelligence regarding a ClickFix-based infection chain targeting automotive-related entities. Alert content is incomplete and contains significant gaps. Do not act on this notification until full details are available through official Zscaler channels. DETAILS: Zscaler has identified an infection chain beginning with ClickFix lures on automotive-related platforms (UNCONFIRMED: scope, affected organizations, and delivery mechanism unclear) Initial payload and subsequent infection stages referenced but NOT DETAILED in available alert text Reference to “Mythos” and “GPT 5.5 Cyber” AI model testing mentioned but context and relevance UNCERTAIN Alert appears to be fragmented or corrupted — multiple incomplete sentences and context breaks present No confirmed indicators of compromise (IOCs), malware hashes, or detection signatures provided IMPACT: ...

Published Sunday, July 05, 2026 at 10:00 AM PT BLUF: Apple has released Safari 26.5.2 addressing 25+ confirmed security vulnerabilities, including multiple WebKit flaws. All Safari users should update immediately. Organizations should prioritize deployment across macOS and iOS environments. DETAILS: Safari 26.5.2 patches a minimum of 25 documented security vulnerabilities across WebKit and related components, per Apple’s official security documentation Multiple sources confirm Apple accelerated this release cycle in response to AI-assisted exploitation risks, indicating elevated threat severity CVE-2026-43725 and CVE-2026-43701 are specifically flagged by security researchers as weaponizable-grade vulnerabilities (Pwn2Own classification level) WebKit vulnerabilities represent the primary attack surface; remote code execution via malicious web content is the primary concern Uncertainty note: Exact CVE count varies across sources (25-30+ reported); confirm specific CVEs affecting your environment via Apple’s official support page (support.apple.com/en-us/100100) IMPACT: ...

Published Saturday, July 04, 2026 at 01:07 PM PT BLUF: Huntress has identified active exploitation of ESXi hypervisors in the wild using multi-stage attacks that break out of guest virtual machines. The campaign leverages potential zero-day vulnerabilities and VSOCK communication channels to compromise the underlying hypervisor infrastructure. Organizations running ESXi environments should immediately audit VM-to-host communication logs and apply available security patches. Scope and attribution remain under investigation. ...

Published Saturday, July 04, 2026 at 10:00 AM PT BLUF: Apple has released macOS Tahoe 26.5.2 containing patches for dozens of vulnerabilities across macOS, iOS, and Safari, including WebKit flaws and AI-discovered bugs. Organizations should prioritize deployment of this update. Specific CVE details and severity ratings are available at https://support.apple.com/en-us/100100. DETAILS: Apple patched 30+ vulnerabilities across macOS, iOS, and Safari in this release cycle WebKit vulnerabilities are included in the patch set; WebKit flaws historically enable remote code execution via malicious web content Some vulnerabilities were discovered through AI-assisted analysis methods UNCERTAINTY NOTE: The exact number of flaws in version 26.5.2 specifically is not confirmed from provided sources; referenced sources discuss broader June 2026 Apple updates Official CVE list and severity ratings require review at Apple’s support portal IMPACT: ...

Published Saturday, July 04, 2026 at 01:05 AM PT BLUF: Multiple on-premises Microsoft Exchange servers are being actively exploited in coordinated attacks. Organizations running Exchange Server must immediately verify patch status and monitor for unauthorized access. Huntress MDR has detected and is responding to active exploitation campaigns. DETAILS: Active exploitation targeting on-premises Exchange Server infrastructure confirmed across multiple customer environments Attack pattern indicates coordinated, widespread campaign rather than isolated incidents Huntress threat hunting and rapid response teams are actively engaged in incident response operations Initial access vectors and specific CVEs involved: details limited pending full technical analysis Timeline suggests ongoing exploitation activity with continued threat actor activity IMPACT: ...

Published Friday, July 03, 2026 at 07:04 PM PT BLUF: Rapid7 has released a new Metasploit module enabling direct upgrade of SMB sessions to Meterpreter sessions via PsExec. This is a legitimate penetration testing capability addition with no confirmed active exploitation in the wild. Organizations should assess exposure if Metasploit is deployed in their environments or if SMB access controls are weak. ...