Peter Corish 
In this week’s TL’DR, We cover the targeting of two major internet-facing platforms. Adobe Commerce operators must deploy an emergency hotfix, while SonicWall customers must patch their systems and check whether attackers compromised their remote-access infrastructure before they installed the update. Adobe Commerce and Magento Stores Backdoored Through Critical Zero-Day The Hacker News reported that … Read more
This week’s TL;DR features two main stories that focus on infrastructure that organisations often trust without much scrutiny. PaperCut servers are being actively targeted, while backdoors discovered in widely rebranded routers show how difficult it can be to assess the technology sitting at the network edge. Here is what you need to know. Attackers Chain … Read more
This week’s TL;DR highlights two stories on risks in the systems organizations trust with their most sensitive assets: source code and credentials. Both show why internet-facing platforms and centralized security tools need rapid patching, strong architectural controls, and active monitoring. GitLab Flaw Comes Under Active Exploitation The Hacker News reported that CVE-2026-19478 came under active … Read more
This week’s leading stories show attackers targeting two essential layers of modern operations: industrial control systems and digital identities. Water utilities face immediate operational disruption, while new passkey research demonstrates that phishing-resistant authentication still depends on secure endpoints and careful implementation. Multistate Water-System Attacks Target Exposed Controllers Dark Reading reports that cyberattacks against water and … Read more
In this week’s TL;DR we are highlighting: a breach affecting UK policing organisations and an international effort to stop millions of dollars in fraudulent payments. Both demonstrate why strong security controls and swift action remain essential in today’s threat landscape. PNLD Breach Exposes UK Police and Government Contact Details The Police National Legal Database (PNLD) … Read more
This week was a busy one. Microsoft broke patch records and new data confirmed that attackers are getting into networks through identity and not vulnerabilities. Here is what you need to know. Microsoft’s Largest Ever Patch Tuesday Includes Two Zero-Days Already Under Attack Microsoft’s July 2026 Patch Tuesday was the biggest on record. It covered … Read more
This week’s TL;DR covers two stories worth paying attention to. First, a zero-click flaw in Opera GX let malicious sites silently steal Gmail addresses. Second, new Chinese AI models are outperforming US counterparts on vulnerability discovery, cheaply. Opera GX Flaw Let Malicious Sites Silently Install Mods and Steal Gmail Addresses Researchers discovered a zero-click flaw … Read more
This week’s TL;DR covers two important stories. First, AI penetration testing is losing the trust of security teams. Second, a hidden malware campaign ran inside Edge for years. Confidence in AI Penetration Testing Falls Sharply According to a June 2026 report from Cobalt, security professionals have cooled sharply on autonomous AI testing. In 2025, 29% … Read more
This week’s TL;DR covers two stories that highlight just how broad the attack surface has become. One was a near-miss for FIFA, the other a picture of how cybercrime is accelerating. FIFA Bug Opens World Cup Broadcasts to Remote Takeover An ethical hacker going by “BobDaHacker” discovered that FIFA’s entire online infrastructure was accessible to … Read more
This week’s TL;DR covers two stories making waves in the security community. First, Anthropic’s release of Claude Fable 5 and Mythos 5, and what security experts are actually saying about it. Second, a supply chain attack targeting over a million WordPress sites through tampered plugin scripts. Claude Fable 5 Doesn’t Change the Security Story Anthropic … Read more
