IT Security Weekend Catch Up – July 5, 2026

Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!

For the less technical

1. [PL][VIDEO] GPS interference in Europe. The trail leads to a Russian satellite
2. [PL] How the Social Design Agency works on Russia's behalf
3. [PL][AUDIO] Fifth episode of the Informatyk Zakładowy Retro-podcast
4. [PL][VIDEO] Digital Hydra: does the individual stand a chance?
5. [PL] Unpaid parking fee? Watch out for scammers
6. [PL][VIDEO] Why everyone falls for online scams
7. [PL][VIDEO] They're trying to steal your Gmail credentials on LinkedIn
8. [PL] Polish cyber police identify 17-year-old behind attacks on mobile subscribers
9. [PL] How the FBI trains investigators in a realistic cyber range
10. [PL] Illegally processed personal data as evidence in court
11. [PL] "Children online 2026" report: algorithms and AI are already harming preschoolers
12. [PL] Eustella, a secure European alternative to ChatGPT and Gemini
13. Hate “the algorithm?” RSS is one of the tools you’ve been looking for
14. Espionage against the European Parliament. Member of committee investigating spyware hacked with Pegasus
15. Global cyber strike disrupts SocGholish, Amadey, and StealC malware networks
16. United States seizes hundreds of Internet domains used to illegally stream World Cup matches
17. Google’s continued disruption of malicious residential proxy networks
18. Alleged member of criminal cyber hacking group “Scattered Spider” arrested in Finland and extradited to the United States

For the more technical

1. [PL][VIDEO] An overview of interesting web application vulnerabilities
2. [PL][VIDEO] FortiBleed isn't a new flaw, it's a credentials issue
3. [PL][VIDEO] Railway cyber resilience: from vulnerabilities to compliance and security
4. [PL] Deepfakes and a spoofed gov.pl site backed a fake investment platform
5. Cybercrime breaches Klue: Salesforce data impacted for many victims
6. Kali Linux 2026.2 release (GNOME 50, KDE 6.6, Helper Scripts, APT Formats & VM Boot Tweaking)
7. WinPE as a stateless harness for Windows driver testing and fuzzing
8. Dissecting and exploiting Linux LPE variant: DirtyClone (CVE-2026-43503)
9. 282 iOS AI apps leak API keys and open AI proxy access in network traffic study
10. Indirect prompt injection in web content targets AI agents
11. Silent Swap: A crypto clipper extension campaign
12. Chromium extension uses AI‑related branding to redirect browser search
13. Clone this repo and I own your machine
14. BioShocking AI: “Gaming” the AI browser and escaping its guardrails
15. ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
16. AsyncRAT reloaded: Using Python and TryCloudflare for malware delivery again
17. An analysis of ValleyRAT infection campaigns from fake installers, Japanese malicious emails
18. TONResolver RAT abuses TON blockchain to target Japan's hotel industry
19. From Bing search to ransomware: Bumblebee and AdaptixC2 deliver Akira
20. Veil#Drop: Blogspot-hosted PowerShell loader delivers PureLog stealer through XOR-encoded in-memory .NET payloads
21. PamStealer: a Rust-based macOS infostealer that validates credentials through PAM
22. RustDuck: An in-depth analysis of a two-stage botnet
23. Miasma Mini Shai-Hulud hits LeoPlatform npm packages and GitHub Actions, expands to the Go ecosystem
24. [VIDEO] Signals & Stories: The evolution of attribution in cyber threat intelligence
25. Mustang Panda targets India's government and energy sectors with Zohomurk and Minirecon
26. Operation DragonReturn: China-nexus cyber espionage campaign targeting Govt. of India/MoF tax infrastructure via multi-stage DcRAT deployment
27. UNC1151 phishing email targeting Belarusian politician points to multi-national campaign

Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.