Daily DefSec Brief - Cyber Security News for July 27 2026

Daily DefSec Brief · Jul 27, 2026 · 3m · transcript

1. Fastjson RCE under active exploitation in the Java ecosystem — Risky Business News — https://news.risky.biz/risky-bulletin-a-json-rce-bug-is-about-to-rock-the-java-world/ 2. Ransomware crews mass-exploiting edge VPN/firewall appliances (update) — CVE-2023-4966, CVE-2025-5777, CVE-2026-0257, CVE-2026-3055, CVE-2026-50751, CVE-2026-50752, CVE-2026-8451 — Cyber Security News — https://cybersecuritynews.com/ransomware-gangs-attack-vpn/ 3. Spring Boot heapdump endpoint scanned for exposed secrets — SANS ISC — https://isc.sans.edu/diary/rss/33188 4. BlueNoroff hijacks trusted Telegram accounts…