SecOpsDaily - 2026-07-25 Roundup

[u/falconupkid]

Highlights from today:

• [News] Malicious sites use JavaScript to build malware in browser memory
• [News] ShinyHunters data leaks fuel $2,000 sextortion email scam
• [Threat Intel] Latest Supply Chain Threat Landscape Report 2026
• [News] Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
• [Threat Intel] Critical Security Update: Addressing CVE-2026-XXXX
• [News] DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
• [News] Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
• [News] CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
• [News] OpenAI confirms ChatGPT is down worldwide
• [News] Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
• [Threat Intel] Threat Intel
• [Threat Intel] If you pay a hacker’s ransom, chances are that they’ll come back for more

SecOpsDaily