Russian FSB attacks critical infrastructure by exploiting weak router hygiene, legacy SNMP, Cisco Smart Install exposure, and TFTP configuration theft. UK, US, and allied agencies warn that FSB Centre 16 continues to target critical networks. Fix router security now.

Microsoft patches record 622 flaws in July 2026, including exploited zero-days in SharePoint and AD FS. Security teams should patch the exploited flaws first, prepare for Kerberos RC4 hardening, and use threat-informed triage.

ServiceNow AI Platform RCE CVE-2026-6875 is under active exploitation days after the self-hosted patch release. Attackers are using a second sandbox escape route, so WAF rules are not enough. Patch now.

Qilin ransomware GlobalProtect VPN bypass attacks exploit Palo Alto CVE-2026-0257 to gain VPN access, steal credentials, move laterally, and encrypt domains. Patch PAN-OS, terminate sessions, and hunt for compromise now.