IT Security Weekend Catch Up – July 26, 2026

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. [PL] Criminal code amendment makes patostreaming a criminal offence
2. [PL] Minors offered DDoS attack services online, with the youngest aged just 12
3. [PL] Apple strengthens parental controls in iOS. What’s changing?
4. [PL] Achievement unlocked: Steam account hijacked
5. [PL] Fake parking fee used as a phishing lure
6. [PL][VIDEO] DevOps in the crosshairs: social engineering that slips through the pipeline
7. [PL][VIDEO] Fake reviews, fake experts and the real internet
8. [PL] Publishing the names of athletes sanctioned for doping under GDPR
9. [PL][VIDEO] What is the EU’s new QWAC mechanism?
10. [PL][VIDEO] How YouTube creators can manipulate their metrics
11. [PL] It’s dumber than you think: how your chatbot is being manipulated
12. [PL] AI search: convenient answers, uncertain sources
13. [PL] Chat Control rises from the grave: an ineffective and dangerous tool
14. [PL] The Middle Kingdom watches from the shadows: China’s quiet expansion into Europe
15. [PL][VIDEO] How the Kremlin is building an alternative financial system
16. [PL] How Russian influence operations seek to delegitimise NATO
17. [PL] Pro-Russian propaganda racks up more than a million views on TikTok
18. Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak
19. Hack reveals Suno AI music generator scraped YouTube, Deezer, and Genius
20. Law enforcement takes down Kratos/Sneaky2FA phishing service

For the more technical

1. [PL][VIDEO] Recordings from the Oh My Hack 2025 conference
2. [PL] The graveyard of code-signing certificates
3. INC Ransom: Infrastructure analysis, operational tradecraft, and detection opportunities
4. Next chapter: Restructuring GitHub’s bug bounty program
5. WP2Shell: Pre authentication RCE in WordPress core
6. Exploitation in the wild of wp2shell
7. wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution
8. Tenda W18E security research
9. Email threat landscape: Q2 2026 trends and insights
10. From a single alert to 1,000 files: Inside an exposed WebDAV malware delivery lab
11. Miasma worm hits Microsoft again: Azure Functions Action and 72 other repositories disabled after supply chain attack targeting AI coding agents
12. ClickLock stealer: Paste once, lose everything
13. Abusing trusted business workflows: A multi-stage Phantom stealer campaign
14. The TTF trap: A global campaign of a low-detection Lua loader
15. Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel
16. Unpacking “Cruciferra”: An analysis of a sophisticated crypter service
17. TA488 targets Zimbra mailservers with half-click exploits
18. Lampion's Portugal-focused phishing campaign delivers multistage malware
19. DinDoor, DenoRAT, and NightshadeC2: Analyzing TAG-150's evolving tradecraft
20. The procurement trap: Inside an AiTM campaign targeting global institutions
21. Analysis of Kimsuky's attack on a South Korean groupware vendor using a new Gomir family variant
22. Who needs a job? DPRK ClickFake Interview campaign drops PylangGhost and GolangGhost RATs
23. New North Korean campaign uses fake coding interviews to steal developer credentials
24. Execution-level analysis of a Russian-speaking multi-operator intrusion campaign: Operation STANDOFF
25. UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
26. Targeted attack on government entities in the Middle East
27. GTIG: Updated cyber threat actor naming system

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.