Microsoft released a record-breaking 570 security patches on July Patch Tuesday, addressing vulnerabilities across Windows and related products, including 3 zero-day exploits already under active attack.
Core Summary The French government has announced it will summon Russia’s ambassador to formally protest alleged Russian sabotage and espionage operations across more than a dozen European countries. According to CBS News, France accuses Russia of conducting cyberattacks and intelligence infiltration targeting European nations over the past fifteen years. Meanwhile, the EU has sanctioned nine individuals suspected of involvement in Russian espionage activities, marking a further escalation in Europe-Russia security confrontation. ...
Core Summary The Ethereum Foundation used coordinated AI agents to conduct security testing on validator node software, successfully discovering a remotely triggerable crash vulnerability. The bug could cause validator nodes to go offline, affecting network stability. However, some AI-generated findings were false positives, ultimately requiring manual verification by human security researchers. This event demonstrates both the potential and limitations of AI in blockchain security. Event Details According to CoinDesk reports, the Ethereum Foundation launched an experimental project, directing multiple coordinated AI agents at the software code running validator nodes. These AI agents identified multiple potential issues in the code, including a remotely triggerable crash vulnerability that could indeed cause validator nodes to go offline. ...
Core Summary Security platform Immunefi’s latest report shows that the crypto industry faced a record 207 hacking incidents in the first half of 2026, but total losses fell to $972 million, below the $1 billion threshold. Notably, losses from DeFi protocol exploits dropped 74% from the 2022 peak, reflecting overall improvement in industry security levels. Event Overview According to TheBlock, despite record-high attack counts, the average loss per incident decreased significantly. This indicates that while attackers are more active, large-scale catastrophic exploit incidents have decreased. The proliferation of security audits, bug bounty programs, and insurance mechanisms is proving effective. ...
Core Summary OpenAI and Anthropic have announced that during a government cybersecurity review, their latest AI models will be restricted to customers approved by the Trump administration. Simultaneously, the administration has opened Anthropic’s Mythos model to over 100 US companies and government agencies, marking an unprecedented level of government control over frontier AI technology distribution. Event Details According to AP News, OpenAI and Anthropic have formally implemented a new customer access mechanism: during the cybersecurity review period, their most advanced AI models will only be available to customers who pass the Trump administration’s approval process. This means businesses, research institutions, and individuals without government approval will be unable to access these frontier AI tools. ...
Core Summary Anthropic has suspended all customer access to its latest AI models, Claude Fable 5 and Mythos 5, after US national security authorities identified “jailbreak” vulnerabilities. The company stated it was “ordered to suspend foreign nationals from using Claude Fable 5” and that “the net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.” This marks the latest escalation in Anthropic’s ongoing conflict with the Trump administration, after the Pentagon labeled the company a “supply chain risk.” ...
WhatsApp has announced the discovery of new spyware attacks linked to Israel’s NSO Group, allegedly in violation of court orders. The incident has reignited debate over surveillance technology abuse and communication security.
[Core Summary] Microsoft has confirmed that some of its open source development tools were compromised in a hacking incident, with attackers successfully stealing login credentials from multiple AI developers. The full scope of the breach remains unclear, but the event has triggered heightened concern across the tech industry about open source supply chain security. Microsoft is urgently investigating which specific tools were affected and advising all related developers to change their passwords immediately. ...
USB Speaker Vulnerability Allows PC Infection Without User Interaction Security researchers have discovered a novel attack vector dubbed “Pwnd Blaster” that exploits Bluetooth speakers manufactured by Creative to compromise connected PCs without any user interaction. The vulnerability allows attackers to infiltrate computers simply by being within Bluetooth range of the speaker, which is connected to the PC via USB. The exploit targets a firmware vulnerability in Creative’s popular Bluetooth speaker line, which sells for approximately three hundred dollars. When the speaker is connected to a PC via USB for charging or audio input, the compromised firmware can execute arbitrary code on the host system through the USB interface, effectively turning the speaker into a stealthy attack platform. ...
According to TechCrunch, Microsoft is facing widespread criticism for threatening a security researcher with criminal investigation after the researcher discovered vulnerabilities in Microsoft systems. The incident has sparked concerns about how tech giants treat the independent security research community.