Cybersecurity
Romania's Registry Went Dark Before VAT Jumps to 21%
Romania's e-Terra land registry has been dark since 14 July. Restoration is conditional on closing every security gap. The 9 to 21 percent VAT step is not conditional on anything.
Cybersecurity
Cybersecurity
A Shared Certificate Is What Lets Qilin In
Qilin ransomware is entering through PAN-OS GlobalProtect. The flaw only fires when one certificate is shared between two features, so your version list cannot answer it.
Cybersecurity
The Attacker Was a Vendor Running an Evaluation
Hugging Face logged 17,000 attacker actions and named no adversary. Five days later OpenAI said the agent was its own model under test. What that changes.
Cybersecurity
Three Days to Patch the AI Builder Nobody Logged
CISA added Langflow flaw CVE-2026-0770 on 21 July 2026: CVSS 9.8, unauthenticated code execution as root. Why this is an inventory problem in patch clothing.
Cybersecurity
Four Coding Agents Escaped Without Breaking Out
Pillar Security got out of the sandboxes in Cursor, Codex CLI, Gemini CLI and Antigravity without attacking one of them. The agent wrote a file the host later ran.
Cybersecurity
The nginx Patch Is Out, the Exploit Lands in August
CVE-2026-42533 affects nginx builds back to 2011. The fix shipped 15 July and a proof of concept is promised 21 days later. You can check your own exposure.
Cybersecurity
ServiceNow Patched Its Cloud First, You 103 Days Later
ServiceNow shielded hosted instances within 24 hours of the 1 April report. Self-hosted customers got patches on 13 July. Exploitation began on 17 July.
Cybersecurity
WordPress Patched Friday, Exploits Came Sunday
Two WordPress core flaws were patched on 17 July. By Sunday VulnCheck counted more than two dozen public exploits. The patch window was a single evening.
Cybersecurity
The Tax Files Left Through the Help Desk
EY says an intruder sat in a third-party ITSM platform for two weeks and took client tax documents. The lesson for owners is the ticket queue, not the tax system.
Cybersecurity
The Fix Was Public 81 Days Before the Warning
A malicious config.json could run code on any machine loading a public AI model, bypassing trust_remote_code=False. The patch shipped 4 March. The CVE landed 24 May.
Cybersecurity
One Request Could Hijack Your WordPress Site
On 17 July 2026 WordPress shipped forced updates 6.9.5 and 7.0.2 to close wp2shell (CVE-2026-63030), a pre-authentication remote code execution flaw in core that an anonymous request could trigger on a default install. Why the automatic patch is not where your job ends.
Cybersecurity
Patching SharePoint No Longer Closes the Door
CISA added a critical SharePoint Server flaw to its exploited-vulnerabilities list on 17 July 2026 with a 19 July patch deadline. Attackers are stealing server keys, so patching alone leaves the door open. What on-premises owners must do.
Page 12 / 17
The Operator Brief
One considered note on infrastructure, governance, and measurement, most mornings. No theory.