Weak Security Continues to Fuel Russian Cyberattacks

A DarkReading roundup (early July 2026) describing a surge in sophisticated, actively exploited threats and growing AI-specific attack vectors. Highlights include joint UK/EU sanctions for Russian cyber/disinformation operations; modular destructive malware (GigaWiper), kernel-signed driver abuse and BYOVD ransomware (GodDamn), an LLM-driven ransomware campaign (JadePuffer), and widespread infostealer/malvertising ops (Vidar, BusySnake). Multiple active vulnerabilities and PoCs are noted (RoguePlanet Windows Defender zero-day, Citrix NetScaler memory disclosure, FortiBleed access chain and a fl