July 2026

4 pieces, newest first.

• Two hours from disclosure to exploitation, and a day from entry to encryption

  July 22, 2026 · 3 sources

  Both windows closed in the same month: the one before a flaw is used, and the one before an intrusion becomes a consequence.

• The model you downloaded is code you ran

  July 16, 2026 · 3 sources

  Models arrive through a channel that dependency scanning does not inspect, into the machines that hold everything.

• Six hundred fixes in one day, and the queue stopped being arithmetic

  July 14, 2026 · 3 sources

  Remediate everything critical in thirty days became arithmetically impossible, and the policy did not change.

• The ransom note was written by a model, and so was everything before it

  July 9, 2026 · 3 sources

  Every step was ordinary except the last: the counterparty in a negotiation may not be a person.