Stay updated with the latest cybersecurity news! This daily roundup highlights critical vulnerabilities, emerging threats, data breaches, malware campaigns, and industry responses to help you navigate the fast-evolving digital threat landscape.
1. Unpatched Flaws Disclosed in FatFs Filesystem Used in Millions of Embedded Devices
Published: July 03, 2026
Security researchers at runZero disclosed seven vulnerabilities in FatFs, a widely used filesystem library for FAT/exFAT formats in embedded devices like security cameras, drones, industrial controllers, and crypto wallets. Physical access via USB/SD could lead to memory corruption and code execution on many systems lacking modern protections.
2. New “Bad Epoll” Linux Kernel Flaw Enables Root Access on Desktops, Servers, and Android
Published: July 03, 2026
A use-after-free vulnerability (CVE-2026-46242) in the Linux kernel’s epoll mechanism allows unprivileged users to gain root privileges. It affects a broad range of systems and was independently discovered, with patches now available.
3. New Avalon Malware Framework with CrownX Ransomware Delivered via Phishing
Published: July 03, 2026
Researchers uncovered Avalon, a modular malware framework featuring credential theft, lateral movement, and CrownX ransomware. It uses ISO images and .lnk files in phishing emails to bypass detections.
4. North Korea-Linked Malicious npm Packages Target Developers
Published: July 03, 2026
Threat actors tied to North Korea published fake npm packages mimicking Rollup polyfills to steal developer credentials and enable remote access. Several packages were removed from the registry.
5. Google Disrupts NetNut Residential Proxy Network Impacting 2 Million Devices
Published: July 02-03, 2026
Google, in coordination with the FBI and others, dismantled much of the NetNut (Popa) residential proxy network built on compromised Android devices, smart TVs, and streaming boxes, significantly reducing its operational capacity.
[Read more](https://thehackernews.com/ or https://www.bleepingcomputer.com/)
6. ARToken PhaaS Exposes Microsoft 365 Phishing Toolkits and Device Code Attacks
Published: July 03, 2026
A new phishing-as-a-service platform (ARToken) linked to EvilTokens provides tools for stealing Microsoft 365 tokens via OAuth device code flows and ConsentFix/ClickFix techniques, enabling rapid account hijacking.
7. DHS Confirms Breach of HSIN Information-Sharing Platform
Published: July 01-02, 2026
The Department of Homeland Security acknowledged a cyberattack compromising the Homeland Security Information Network (HSIN), used for sharing sensitive information across government and private sectors.
8. CISA Warns of Actively Exploited Vulnerabilities Including Windows BlueHammer and SharePoint RCE
Published: Early July 2026
CISA added several flaws to its Known Exploited Vulnerabilities catalog, including ransomware exploitation of a Windows flaw (BlueHammer) and a Microsoft SharePoint remote code execution vulnerability.
Stay Vigilant
Cyber threats continue to accelerate with AI integration, supply chain attacks, and sophisticated phishing. Patch promptly, enable multi-factor authentication (beyond SMS where possible), monitor for unusual activity, and train teams on emerging social engineering tactics. Subscribe for daily/weekly updates and consider proactive tools for vulnerability management and threat detection. Stay safe online!