WordPress Plugins Compromised Without a Single File Change

A July–August 2026 cybersecurity news digest covering supply-chain compromises, phishing and identity attacks, ransomware, cloud and SaaS targeting, malware, data breaches, cryptocurrency theft, vulnerability exploitation, and emerging AI-assisted or AI-agent security risks. Notable reports include compromised WordPress and npm ecosystems, unauthenticated command execution in Paperclip AI, rapid exploitation of newly disclosed vulnerabilities, captive-portal token theft, Snowflake account compromises, and malware targeting macOS, Linux, and Windows environments.