Episode 114: July 24, 2026

Signal Check · Jul 24, 2026 · 6m

This episode covers a Russian zero-day exploit in Zimbra webmail that let state-backed hackers steal credentials and two-factor codes for months, new vulnerabilities in Microsoft's passkey implementation ahead of Black Hat, and a polished malvertising campaign using fake Claude.ai ads to distribute SectopRAT malware. Adrian breaks down why overlooked infrastructure, sloppy execution on good ideas, and legitimate-looking search ads all remain serious attack surfaces. Stories covered: - Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes (The Hacker News) -…