ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
2026-07-02T19:24:08Z•601b73409c3b200326c92e9dc59d1bad9946a8f9339b4f33d141f9eee5e15d78
active-exploitationai-agentai-generated-malwareargocdazure-clibotnetcitrix-netscalercredential-theftemail-api-compromisekemp-loadmasterkubernetesmalicious-reposoauth-abusepassword-sprayprompt-injectionransomwarerustducksandbox-escapesharepointsupply-chainunpatched-vulnerability
What happened
This collection highlights a surge of high-impact vulnerabilities and opportunistic malware campaigns: active-exploited SharePoint RCE added to CISA KEV, critical Kemp LoadMaster and Citrix NetScaler flaws seeing exploitation attempts, and multiple CVSS 9–10 Adobe/AI sandbox escapes. Attack techniques increasingly leverage AI (AI agents automating full ransomware campaigns, AI-generated browser ransomware, prompt-injection/sandbox escapes), OAuth/API abuse (ToddyCat’s Umbrij accessing Gmail via Google API), poisoned PoC repositories (ChocoPoC RAT), supply-chain/SEO-poisoning (ScreenConnect→Any
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 601b73409c3b200326c92e9dc59d1bad9946a8f9339b4f33d141f9eee5e15d78
- Enrichment time
- 2026-07-02T19:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.