Cyber Brief 26-08 - July 2026

This Cyber Brief compiles July 2026 open-source reporting on a broad set of high-impact cyber activity: EU sanctions and law-enforcement takedowns; nation-state espionage and zero-click/zero-day exploitation (Turla, Laundry Bear, China-linked actors); large-scale cybercrime operations including phishing-as-a-service (Kratos), webshell brokerage (WP-SHELLSTORM), supply-chain abuse, and ransomware/data-wiping incidents (ByteToBreach, DragonForce, JADEPUFFER); major vulnerabilities actively exploited (Roundcube, CitrixBleed 2, SonicWall, FortiSandbox, Langflow); large data exposures and leaks; and several AI-sandbox escapes leading to credential and infrastructure compromise.