Adversaries Don't Need a Zero-Day — They Read Your Rulebook

Dark Reading feed covering cybersecurity developments from July 15–27, 2026, including actively exploited vulnerabilities, zero-days, ransomware, identity attacks, cloud and application security flaws, malware campaigns, data exposure, and emerging risks from agentic AI. Notable items include WordPress remote takeover exploitation involving CVE-2026-60137 and CVE-2026-63030, Russian exploitation of a Zimbra zero-day, SonicWall SMA zero-days used by ransomware operators, Azure Automation cross-tenant identity takeover, exposed PII from a prayer app, Android spyware, and AI-assisted attack and L