Daily DefSec Brief - Cyber Security News for July 22 2026
1. CISA adds DD-WRT UPnP buffer overflow to KEV — CVE-2021-27137 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2. Kratos AiTM phishing-kit infrastructure taken down — The Hacker News — https://thehackernews.com/2026/07/police-dismantle-kratos-phishing-kit.html 3. Compromised Outlook mailboxes used to steal MFA-protected M365 sessions — Cyber Security News — https://cybersecuritynews.com/hackers-compromised-outlook-accounts/ 4. Azure DevOps MCP flaw lets hidden PR comments hijack AI review agents — The Hacker News —…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.