Microsoft Threat Intelligence says fake CAPTCHA pages now pre-load a script into the browser cache disguised as a PNG, sidestepping both download monitoring and the Windows Run dialog's character limit.
Atlassian says CVE-2026-21589 lets unauthenticated attackers read files from the web application root of Jira, Confluence, Bitbucket and five other self-hosted products. All versions are affected.
Group-IB says the Milk Dragon kit has produced 258 phishing pages hitting victims in 66 countries, using fake 3D Secure screens to capture one-time passcodes in real time.
Clover Health Investments and AngMar Management Services reported separate July intrusions to US federal regulators, exposing insurance identifiers, Social Security numbers and medical histories.
The Health Care Cybersecurity and Resilience Act would fund training, support rural clinics and require HHS to build an incident response plan. It now goes to the House.
A Wikimedia Foundation report documents unpublished and potentially malicious edits, attempts against its Etherpad notes tool, and millions of automated requests.
The DataSuckers group posted a ransom note on ATB's own website and claims to hold data on 7.9 million customers. ATB says customer data was not compromised.
Citrix released emergency builds for CVE-2026-88779, a memory overflow in NetScaler SAML deployments that attackers are using to knock appliances offline.
Italy's data protection authority fined IQVIA's Italian arm €7 million, finding that health records gathered from 800 general practitioners were pseudonymised rather than truly anonymised and could be traced back to patients.
Researchers at Rostelecom subsidiary Solar say the Belarusian Cyber Partisans held access to a Russian healthcare organisation from early 2024 until December 2025, using a Telegram-controlled backdoor and taking no destructive action.
Dell patched five flaws in its System Update deployment tool, led by a CVSS 9.6 path traversal bug that can let a remote, unauthenticated attacker run code as root. Version 2.3.0.0 fixes all of them.
Japan's Nikkei disclosed that an attacker took over an employee's Microsoft 365 account and used it to send roughly 9,000 malicious emails. The Record reports a separate Google Workspace intrusion affected 1,646 people.
