This Critical Patch Update contains 1449 new security patches across the product families

https://www.oracle.com/security-alerts/cpujul2026.html

RE: https://cosocial.ca/@mhoye/116960268208721583

For the uninitiated, Firefox went back to X.

send this to your favorite security researcher

🤖 Trojanized Newtonsoft.Json fork on NuGet hides game-rigging code targeting Digitain sportsbook. Package "Newtonsoftt.Json.Net" typosquats the real library and includes logic to rig live betting results.

🔗 https://thehackernews.com/2026/07/trojanized-newtonsoftjson-fork-hides.html
#SupplyChain #Malware #ReverseEngineering #CyberSec

Investigation Scenario 🔎

Alert: Microsoft Defender for Endpoint: Behavior:Win32/SuspClickFix.F detected on a Windows 11 workstation.

No additional context is provided. What artifacts would you examine first to determine whether the user executed the ClickFix command?

To go further, what would you look for to determine whether the alert represents the beginning of an ACR Stealer intrusion?

#InvestigationPath #DFIR #SOC

Woof. That data breach at Suno last year, but only just disclosed last week, affected over 55 million users, including their names, physical addresses, and phone numbers, according to Have I Been Pwned.

More: https://techcrunch.com/2026/07/21/ai-music-generator-suno-breach-affects-55m-users-per-have-i-been-pwned/

Bypass for ad-blockers: https://web.archive.org/web/20260721144937/https://techcrunch.com/2026/07/21/ai-music-generator-suno-breach-affects-55m-users-per-have-i-been-pwned/

"Dionysius Thrax" sounds like a hammy villain wearing absurdly bulky, spiky armor while zipping around in a hovercraft, but actually he was one of history's biggest nerds https://en.wikipedia.org/wiki/Dionysius_Thrax

Writeup & POC: CVE-2026-49176 Windows WalletService to SYSTEM (LPE) https://davidcarliez.github.io/blog/cve-2026-49176-walletservice-to-system/

"I know that my life has always been vertebrated by two desires: the desire to know and the desire to help, to be of use."

A new page of my comic Ekphrasis, which you can read for free at https://ekphrasiscomic.neocities.org/

I'm convinced that UI developers are my mortal enemies.

Today's experience: Microsoft Outlook, which I have to assume is popular for some reason.

I go to delete a calendar item that I created for testing. Upon hitting [Delete] on my keyboard, I'm presented with the following dialog.

Which button will continue with the deletion of the item?

• [➡️ Send]
• [🗑️ Discard]

If you selected the 🗑️ button to delete the entry, you're a fool like me. Obviously the [➡️ Send] button is the one you click to delete the thing. [🗑️ Discard] obviously means [❌ Cancel] (do nothing).