A week in security (July 13 – July 19)

2026-07-20T08:51:59Z947b078f1eb3c3ea4e75ae2c2fc580a387d42a15c9b1cbad0c1b559bbe3ccb43
ai-securityassuranceamericachromechrome-extensionsclaudebleedcrashstealercrypto-scamdata-breachfacetime-scamflock-camerasghostcommitgigawiperinsider-threatiotmacos-malwaremicrosoftpatch-tuesdayprivacyprompt-injectionransomwarescamssecurity-updatesshark-robot-vacuumvulnerabilityzero-day

What happened

Malwarebytes posts from July 13–19, 2026 cover a broad set of consumer and enterprise security issues: Microsoft’s July Patch Tuesday (622 CVEs including three zero-days), multiple Chrome critical fixes, and security updates for Adobe, Firefox, VMware and Zoom. Notable threats and incidents include a Shark robot vacuum vulnerability exposing cameras, maps and Wi‑Fi credentials; the ClaudeBleed flaw allowing malicious Chrome extensions to access Gmail via Claude for Chrome; a macOS credential‑stealing fake Apple app (CrashStealer); the new GigaWiper Windows RAT with destructive wipes; a Ghost​-

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
malwarebytes_labs
Record identifier
947b078f1eb3c3ea4e75ae2c2fc580a387d42a15c9b1cbad0c1b559bbe3ccb43
Enrichment time
2026-07-20T08:51:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.