Mobile Security
Apple Publishes Warning on FaceTime-Based Social Engineering Targeting iPhone and iPad Users
An Apple advisory on FaceTime-based social engineering — defender-team end-user awareness this week.
Latest
Ransomware
Armenia Detains Russian National Aleksandr Ermakov on US REvil Extradition Request; Family Disputes Identity
A cross-border REvil extradition drama - an identity dispute and the Armenian judicial process take center stage this week, with a Russian tourist detained on a US warrant his lawyers say names a different man.
Threat Intelligence
Microsoft Defender Experts Documents ACR Stealer Delivered via ClickFix Lures Targeting Browsers and Microsoft 365
Another named stealer joins the ClickFix pattern — a defender posture review across Microsoft 365 environments after Microsoft's published analysis this week.
Nation-State Cyber Threats
Ars Technica Reports Russia's Sandworm Cluster Now Using ClickFix Technique
ClickFix migrates from financially motivated crime to nation-state activity, according to Ars Technica's report on Russia's Sandworm cluster - a defender-awareness read for this week.
Ransomware
Symantec Documents "Spirals" Ransomware Reportedly Locking Systems in Under 24 Hours
A fast-moving Rust-based ransomware family — defender detection-engineering review this week.
Policy & Government
CyberScoop Reports US Authorities Attribute 120+ Attacks to Scattered Spider Defendant Thalha Jubair
More detail on Scattered Spider's TfL leaders: US authorities have Jubair on the record for 120 attacks, and defender pattern-tracking continues this week.
Vulnerabilities
CISA Adds SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog With July 19 Patch Deadline
A CVSS 9.8 SharePoint zero-day joins CISA's KEV catalog with a two-day patch deadline — defender teams accelerate verification this week.
Ransomware
ReliaQuest: “The Gentlemen” Overtakes Qilin as Most Prolific Ransomware Operation
The ransomware leaderboard shifts — The Gentlemen tops the chart in ReliaQuest’s latest tracking, and defender-team pattern-watching continues this week from the analyst’s chair, not the attacker’s.
Vulnerabilities
CISA Mandates Urgent Patching for Actively Exploited Fortinet FortiSandbox Vulnerabilities (July 19 Deadline)
Two FortiSandbox flaws under active attack — CISA's July 19 deadline puts defender teams on the clock this week.
Nation-State Cyber Threats
Researchers Document North Korea-Linked "Contagious Interview" Campaign Using SVG Steganography to Deliver OtterCookie-Aligned Malware
Another Contagious Interview variant with a novel SVG delivery angle — a defender-oriented research review of how North Korea-linked actors hid an OtterCookie-aligned payload inside flag images sent through fake coding challenges.
Ransomware
Coca-Cola Suspends Fairlife US Milk Production Following Ransomware Attack (SEC 8-K Filed)
A ransomware attack halts fairlife's US milk production and lands as a Coca-Cola SEC 8-K filing — food-industry sector-advisory coverage this week.
Cybersecurity 101
Indicators of Compromise (IOCs): What They Are and How to Use Them
A complete guide to indicators of compromise (IOCs) — the major types, the IOC vs IOA distinction, the Pyramid of Pain, and how IOCs are shared via STIX/TAXII.