Phishing Campaign Abuses eCards to Deploy RMM Tools

A collection of impactful July 2026 infosec stories: a six-month phishing campaign used seasonal eCard lures to deliver legitimate RMM tools and enable post-exploitation; researchers disclosed eleven Microsoft-signed UEFI shims that can bypass Secure Boot on many systems; credential-based attacks (phishing, brute force, compromised logins) are now the dominant ransomware vector; Microsoft shipped a record 570 CVE fixes in Patch Tuesday as AI accelerates vulnerability discovery; and multiple active campaigns and malware families (CrashStealer for macOS, GodDamn/PoisonX, Vidar, RedWing) plus MFA