Latest / Daily DefSec Brief / Daily DefSec Brief - Cyber Security News for July 20 2026
Transcript
- Jerry: Two critical remote bugs went from patch to active exploitation this week. One in WordPress and one in Service Now. And the rest of the day is mostly AI agents behaving badly on both sides of the keyboard. This is the Daily DefSec brief. I'm Jerry Belt. This is today's security news in under five minutes for July 20th, 2026. Eleven items on the board today. One, there's an unauthenticated sandbox escape RCE and self-hosted ServiceNow AI platform, and it's confirmed being exploited in the wild now just a week after the patch shipped. If you run it self-hosted, apply the July 13th update today. Two. Two flaws in a stock WordPress install. No plugins needed, let an anonymous attacker in, and exploitation started almost as soon as the bug surfaced. Confirm the forced auto update actually installed 6.9.5 or 7.0.2 on your sites. Don't assume it applied and check your Cloudflare WAF rules if you're behind it. Three. Chrome 150 fixes three critical use after free bugs in camera capture GPU and network plus a handful of other memory safety issues. Push it out now because use after free bugs like these are exactly what browser exploit chains are built on. Four. Three malicious Ruby gem packages. One impersonating the legitimate Git credential manager dropped a loader that skips build environments and installs a persistent backdoor on developer machines. Pull the affected versions immediately, rotate credentials on any machine that installed them and hunt for callbacks to the attacker's second stage. Five, North Korean linked operators are hiding malware inside SVG flag images in a fake coding test lure, and the code assembles itself when the developer runs the project locally. Treat coding test projects as hostile. Run them as sandboxed and brief your developers on this specific one. Six, a Russian speaking actor used Google's open source Gemini CLI to run C2 migration and a small botnet, the whole thing fitting in about five kilobytes of plain text logs. Watch for AI CLI tool patterns in your egress traffic And treat access to agentic AI tooling as a sensitive credential service worth logging. An autonomous AI agent chained a dataset loader and a template injection flaw to get code execution on a hugging face processing worker, then escalated and moved laterally across sandboxes. If you run pipelines that execute untrusted datasets or model loader code, isolate those workers from production and check how tightly your credentials are scoped between them. Eight. A Chinese group got into Digicert through phishing disguised as screenshots and support tickets, then intercepted customer certificate activation codes to sign their own malware. Review your certificate activation and issuance logs for anomalies. And treat unsolicited screenshot attachments and support channels as a live phishing vector. Nine. A known Microsoft issue has broken W SUS synchronization for over a week. So affected servers can't pull the latest update metadata. Until Microsoft ships a fix, use direct Windows update or manual catalog downloads to get your critical patches out. 10. A driver conflict from the July cumulative update with shutting down some Dell PCs after install. Deploy the out-of-band KB512-1767. To affected fleets and check device manager for a flagged processor participant driver as a quick indicator. eleven. Nearly seventy percent of Windows devices are still on Windows ten, which stopped getting free updates last October, and enterprising domain joined machines are mostly excluded from the consumer ESU bridge. Inventory remaining Windows ten endpoints now and either enroll the eligible ones or migrate before the free EEA window closes on october fourteenth. That's the board for today. Thank you for watching. All the sources are linked in the show notes below. if the show's useful to you, give it a like, subscribe, and pass it on to someone on your team who'd use it. See you tomorrow.