Cybersecurity Daily 2026-07-10

NEWS (score >= 5)

[8] 12 Million Impacted by Data Breach at Japanese Telco KDDI (SecurityWeek)

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs.

The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek.

[7] 5,811 arrests, $293 million seized over social engineering scams (HelpNetSecurity)

Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories took part. Thousands of arrests The campaign, called Operation First Light 2026, centered on social engineering scams and the money laundering that moves their proceeds. Arrests reached 5,811. Investigators intercepted $293 million in illicit asse

[6] Injective SDK on npm infected with cryptocurrency wallet stealer (BleepingComputer)
Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. [...]

[6] Microsoft patches RoguePlanet Defender zero-day vulnerability (BleepingComputer)
Microsoft has released a security patch to address a Defender zero-day vulnerability known as "RoguePlanet," disclosed after the June 2026 Patch Tuesday. [...]

[6] NetSPI pairs AI pentesting with expert-validated security findings (HelpNetSecurity)

NetSPI has announced the expansion of its AI-powered continuous pentesting platform, broadening the suite of services that organizations can use to ensure critical assets are always protected. The new services comprise continuous web application penetration testing, continuous AI penetration testing, continuous internal penetration testing and continuous AI findings validation which applies expert human judgement to AI-generated security findings. With an expanding number of new attack surfac

[5] Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges (TheHackerNews)
Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine ("mpengine.dll"), which provides scanning, detection, and cleaning capabilities for its antivirus and
CVEs: CVE-2026-50656

[5] Microsoft Patches Defender ‘RoguePlanet’ Vulnerability (SecurityWeek)

The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.

The post Microsoft Patches Defender ‘RoguePlanet’ Vulnerability appeared first on SecurityWeek.

CVEs: CVE-2026-50656

[5] Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656) (HelpNetSecurity)

Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability and the fix CVE-2026-50656 is due to improper link resolution before file access, affects Windows 10 and Windows 11, and may allow authenticated attackers to achieve SYSTEM-level privileges on vulnerable machines by launching low-complexity attacks. The fla
CVEs: CVE-2026-50656

[5] [RANSOMWARE] nova leaked Hynet (ransomware.live/nova)
Victim: Hynet | Group: nova | Country: GB | Details: Hynet helps businesses protect and manage their most important asset: information. With a team of skilled tech experts, they solve complex IT challenges by providing smart data storage and network security services. Their remote team works closely with clients to improve productivity and keep compan

[5] [RANSOMWARE] cmdorganization leaked Finance Yorkshire (ransomware.live/cmdorganization)
Victim: Finance Yorkshire | Group: cmdorganization | Website: www.finance-yorkshire.com | Country: GB | Details: Finance Yorkshire provides funding solutions for small and medium-sized enterprises (SMEs) located in or planning to relocate to Yorkshire. Their offerings include business loans ranging from £25,000 to £250,000, equity-linked investments, and seedcorn startup finance, with a focus on supporting gro

[5] [RANSOMWARE] moneymessage leaked Envision Unlimited (ransomware.live/moneymessage)
Victim: Envision Unlimited | Group: moneymessage | Details: [AI generated] Envision Unlimited is a nonprofit human services organization based in the United States, primarily operating in Illinois. Founded in Chicago, it provides support services for individuals with intellectual and developmental disabilities. Its programs include residential services, day

[5] [RANSOMWARE] BrainCipher leaked robroy.com (ransomware.live/BrainCipher)
Victim: robroy.com | Group: BrainCipher | Website: robroy.com | Country: US | Details: [AI generated] Rob Roy Industries, operating through robroy.com, is a US-based manufacturer specializing in electrical conduit systems and enclosures. The company produces PVC-coated steel conduit, fiberglass conduit, and industrial enclosures used in corrosive and hazardous environments. Headquarte

[5] [RANSOMWARE] BrainCipher leaked iac-intl.com (ransomware.live/BrainCipher)
Victim: iac-intl.com | Group: BrainCipher | Website: iac-intl.com | Country: US | Details: [AI generated] N/A

[5] [RANSOMWARE] qilin leaked Inter Power Engineering (ransomware.live/qilin)
Victim: Inter Power Engineering | Group: qilin | Website: www.interpower-engrg.com | Country: AE | Details: N/A

[5] [RANSOMWARE] payload leaked The commune of Castries (ransomware.live/payload)
Victim: The commune of Castries | Group: payload | Website: castries.fr | Country: FR | Details: The commune of Castries is a picturesque, historic town in the south of France, renowned for its majestic 17th-century château and unique aqueduct. The city's official website (castries.fr) provides visitors and locals with the latest news, cultural event schedules, and tourism information. Addition

[5] [RANSOMWARE] settra leaked wtlawllp.co.uk (ransomware.live/settra)
Victim: wtlawllp.co.uk | Group: settra | Website: wtlawllp.co.uk | Country: GB | Details: WT Law LLP: Internal Documents of a UK Law Firm PROLOGUE Inside: full credit reports with data from ...

[5] [RANSOMWARE] settra leaked gvfsinc.com (ransomware.live/settra)
Victim: gvfsinc.com | Group: settra | Website: gvfsinc.com | Country: US | Details: GREEN VALLEY: SELF-LEASE SCHEME How a California agricultural distributor pays rent to companies con...

[5] [RANSOMWARE] settra leaked bergdemo.com (ransomware.live/settra)
Victim: bergdemo.com | Group: settra | Website: bergdemo.com | Country: DE | Details: Berg / Crushing Corporation of America: Demolition on Federal Money PROLOGUE In our possession are i...

[5] [RANSOMWARE] qilin leaked Sintax (ransomware.live/qilin)
Victim: Sintax | Group: qilin | Website: www.sintax.be | Country: BE | Details: N/A

[5] [RANSOMWARE] qilin leaked Sun Dolphin Boats (ransomware.live/qilin)
Victim: Sun Dolphin Boats | Group: qilin | Website: www.sundolphin.com | Country: US | Details: N/A

[5] [RANSOMWARE] qilin leaked Bronken's Dist (ransomware.live/qilin)
Victim: Bronken's Dist | Group: qilin | Website: www.bronkens.com | Details: N/A

[5] [RANSOMWARE] qilin leaked Alan F Burke (ransomware.live/qilin)
Victim: Alan F Burke | Group: qilin | Website: www.alanburkecpa.com | Country: US | Details: N/A

[5] [RANSOMWARE] qilin leaked Hum & Jacoby (ransomware.live/qilin)
Victim: Hum & Jacoby | Group: qilin | Website: www.hhjcpas.com | Country: US | Details: N/A

[5] [RANSOMWARE] AiLock leaked Pinturas Prisa (ransomware.live/AiLock)
Victim: Pinturas Prisa | Group: AiLock | Country: MX | Details: Pinturas PRISA is a Mexican company from the state of Jalisco with nearly 80 years of history, specializing in the production of high-quality paints and coatings for industrial sectors (automotive, woodworking, manufacturing) and retail customers.

[5] [RANSOMWARE] CRPxO leaked Creative Smiles Pediatric Dentistry (ransomware.live/CRPxO)
Victim: Creative Smiles Pediatric Dentistry | Group: CRPxO | Website: creativesmilesprosper.com | Country: US | Details: Sector: Pediatric Dentistry | Data leaked: 2.5 GB

[5] [RANSOMWARE] CRPxO leaked Benjamin H. Wang DDS Inc. (ransomware.live/CRPxO)
Victim: Benjamin H. Wang DDS Inc. | Group: CRPxO | Country: US | Details: Sector: Medical | Data leaked: 1.2 GB

[5] [RANSOMWARE] qilin leaked Peligro Sports (ransomware.live/qilin)
Victim: Peligro Sports | Group: qilin | Website: www.peligrosportsnyc.com | Country: US | Details: N/A

Cybersecurity Daily 2026-07-10

CRITICAL SECTION

CISA KEV (last 14 days)

RANSOMWARE VICTIMS (today)

NEWS (score >= 5)

SUMMARY

Cybersecurity Daily  2026-07-10

CRITICAL SECTION

CISA KEV (last 14 days)

RANSOMWARE VICTIMS (today)

NEWS (score >= 5)

SUMMARY

Cybersecurity Daily 2026-07-10