6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

The document is a July 2026 security news feed covering active exploitation, critical vulnerabilities, phishing, malware campaigns, cloud and AI security risks, supply-chain compromise, and attacks against government, industrial, and water-sector organizations. Notable items include actively exploited Cisco FMC and Check Point flaws, critical Ruby on Rails, Ruflo, VMware, and Firefox vulnerabilities, OAuth device-code phishing, DPRK-linked macOS malware and npm hijacking, BYOVD attacks, and coordinated attacks on Minnesota water systems.