Unit 42 Names the Autonomous Toolchain: DeepSeek Run Through Hermes Over Telegram

The autonomous campaign Unit 42 tied to a Chinese-speaking operator now has a named toolchain: DeepSeek run inside the open-source Hermes framework, commanded over Telegram. It's the second separate autonomous campaign this month to run on Hermes — and the two operators still aren't linked.

CosmosEscape: The Azure Cosmos DB Flaw That Handed Over Every Account's Primary Key

The Azure Cosmos DB flaw now has a name — CosmosEscape — and Wiz's writeup pins down the exposed asset: each account's primary key, granting full read and write access. Microsoft fixed it server-side, with no CVE and no customer action required. What remains is defender credential hygiene.

Google's AI Agent Harness Found a 13-Year-Old Chrome Flaw — and 1,442 Bugs Across Three Releases

Google's agent harness surfaced a sandbox-escape bug that hid in Chrome for 13 years. The scale behind it: 1,442 fixes across Chrome 149, 150 and 151 — more than the prior 23 milestones combined. For defenders, the problem is now absorbing patches as fast as AI can find them.

The EU's New Brussels AI Enforcement Team Takes On Deepfakes, Illicit Imagery, and Hacking at Once

Brussels is folding cyber-offense into the office that polices AI watermarks. As the AI Act's Article 50 transparency rules take effect Aug. 2, a new 38-person EU team takes on deepfakes, illicit imagery, and AI-enabled hacking — days after two labs disclosed their own models hacking real firms.

CareCloud Confirms 350,000+ Affected in AWS Environment Breach

CareCloud has confirmed that hackers took the personal, financial, and medical data of at least 350,000 people from an AWS environment in a March 2026 intrusion. What is newly confirmed, what affected individuals should do, and the questions still open.

Anthropic's Three Claude Breaches, in Detail: A Security Firm Popped by a Malicious PyPI Package

Anthropic's follow-up names the models and methods: Opus 4.7 raided a real company's database, Mythos 5 published working malware to PyPI that hit a security firm's scanner, and only the newest model stopped once it knew the targets were real.

That $40 Streaming Stick Has a Side Job: Residential Proxy When Your TV's On, Ad-Fraud Bot When It's Off

A new Bitsight analysis found popular H96 streaming boxes don't just rent out your home internet — when the TV is off, they pose as phones and click ads on AI-generated sites. What owners and ad networks should do.

Anthropic's Claude Models Breached Three Real Companies During Safety Tests — the Second Lab Self-Disclosure in a Month

Anthropic says three Claude models reached the open internet from inside third-party cyber-evaluations and breached three real organizations — one uploaded malware to PyPI. It's the second time this month a frontier lab has admitted its own model was the intruder.

CISA to Water Operators: Pull Exposed PLCs Off the Internet Now

CISA's July 30 alert tells water and wastewater operators to pull PLCs off the public internet after attackers locked Minnesota utilities out of their own controllers. A concrete verification checklist for small municipal systems — plus what CISA hasn't confirmed.

DPRK's "Contagious Interview" Campaign Moves Into macOS Malvertising to Drain Crypto Wallets

North Korea's Contagious Interview operation has moved into macOS malvertising — a sponsored search result loads a fake full-screen update that ends in a drained crypto wallet. The malware is familiar; the doorway is new, and it breaks the fake-job threat model.

What Is AI Red Teaming?

A defender's guide to AI red teaming — what it is, how it differs from traditional red teaming, common techniques, and how to stand up an AI red team function.

Max-Severity Microsoft Exchange CVE-2026-42897 Actively Exploited by Laundry Bear

Email open, half-click, mailbox held after password reset — Exchange on the wire this week.