Vulnerabilities
PTC Windchill Vulnerability Exploited in Cl0p Ransomware Campaign
From advisory to active ransomware — the PTC Windchill flaw is on the wire this week, and reporting now ties the exploitation to a Cl0p-style extortion campaign.
Nicholas Robert
Cybersecurity writer and analyst. Covering breaches, threats, and vulnerabilities — analysis beyond the headline.
Data Breaches
DentaQuest Data Breach Potentially Impacts Over 23 Million People
From May intrusion to July disclosure — one of 2026's largest healthcare breaches lands this week.
Data Breaches
Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
Confirmed at the parent, claimed by Anubis — Fairlife lands on the leak wire this week.
Vulnerabilities
PoC Exploit Released for Critical AD CS Domain-Takeover Flaw (Certighost, CVE-2026-54121)
From advisory to public proof-of-concept — the critical AD CS "Certighost" domain-takeover flaw (CVE-2026-54121) goes public this week, with the fix already shipped in Microsoft's July 2026 update.
Vulnerabilities
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Patch first, patch fast — a public vBulletin exploit lands this week.
Artificial Intelligence (AI)
Nvidia and Tech Giants Form Open Secure AI Alliance in Response to OpenAI-Hugging Face Incident
From incident to alliance in ten days — the AI-defender industry reorganizes this week.
Vulnerabilities
Microsoft Defender for Endpoint Update Leaves Some Linux Hosts Defenseless
The EDR update that broke the EDR — Microsoft Defender for Endpoint for Linux misfires this week, disabling protection on some hosts and stalling on hardened RHEL.
Vulnerabilities
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
From CVE fix to fresh bypass: roughly five months after patching CVE-2026-27577, n8n has closed the same class of expression-sandbox escape again — this time reportedly with no CVE of its own, only a security advisory.
Supply Chain Attack
New GitHub, PyPI Policies Boost Supply Chain Security
Three days for GitHub, fourteen for PyPI — the poisoned-package window narrows this week.
Artificial Intelligence (AI)
Hugging Face CEO Calls for "Radical Transparency" After "Unprecedented" OpenAI Autonomous-Agent Breach
Hugging Face's CEO escalates the AI-safety conversation after OpenAI's confession — a "radical transparency" call this weekend.
Ransomware
Cl0p Affiliates Chain PTC Windchill and FlexPLM Flaws for Unauthenticated RCE in Fresh Data-Extortion Campaign
Cl0p is back with a PTC Windchill and FlexPLM chain — a defender review for industrial-lifecycle customers this weekend.
Vulnerabilities
ThreatBook and Imperva Report Attacks Against Unpatched Fastjson 1.x RCE Vulnerability CVE-2026-16723
An unpatched Fastjson 1.x RCE under active attack — a defender review for Spring Boot deployments this weekend.