Breaking News – Cyber Threats – 2026-07-17 08:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-07-17 08:00 PDT

• Ernst & Young discloses data breach after support system hack
  BleepingComputer • 2026-07-17 07:55 • www.bleepingcomputer.com
  Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. […]
  https://www.bleepingcomputer.com/news/security/ernst-and-young-discloses-data-breach-after-support-system-hack/
• Inside the Search for "Clean" Residential Proxies for Carding
  BleepingComputer • 2026-07-17 07:00 • www.bleepingcomputer.com
  Residential proxies are no longer the silver bullet they once were for carding. Flare explains why cybercriminals increasingly seek “clean” residential proxies and combine them with browser fingerprints, device profiles, and other identity signals to evade modern fraud detection. […]
  https://www.bleepingcomputer.com/news/security/inside-the-search-for-clean-residential-proxies-for-carding/
• Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
  The Hacker News • 2026-07-17 06:48 • thehackernews.com
  North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges.

  “Any user who ran the project ended up with a four-stage payload aligned with OTTERCOOKIE: a browser credential and crypto wallet stealer, a file stealer, a
  https://thehackernews.com/2026/07/north-korea-linked-hackers-hide.html

• E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
  The Hacker News • 2026-07-17 04:44 • thehackernews.com
  The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has: the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the background by imitating taps and typing.

  Google has to ship it in the next major release, Android 18, and by 1 August 2027 at
  https://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.html

• The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?
  The Hacker News • 2026-07-17 04:30 • thehackernews.com
  Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding programs that can move from concept to operational deployment at commercial speed.

  Now the focus shifts to the trusted
  https://thehackernews.com/2026/07/the-race-to-field-military-autonomy-is.html

• New Windows LegacyHive zero-day gives hackers admin privileges
  BleepingComputer • 2026-07-17 04:05 • www.bleepingcomputer.com
  A security researcher using the “Nightmare Eclipse” handle has released a Windows zero-day exploit dubbed LegacyHive that allows attackers to escalate privileges on up-to-date Windows systems. […]
  https://www.bleepingcomputer.com/news/security/new-windows-legacyhive-zero-day-exploit-grants-hackers-admin-access/
• Details of Alan Turing’s Voice Encryption System
  Schneier on Security • 2026-07-17 04:02 • www.schneier.com

  Really interesting piece of cryptographic history:

  In November 2023, a large cache of his wartime papers—nicknamed the “Bayley papers”—was auctioned in London for almost half a million U.S. dollars. The previously unknown cache contains many sheets in Turing’s own handwriting, telling of his top-secret “Delil…
  https://www.schneier.com/blog/archives/2026/07/details-of-alan-turings-voice-encryption-system.html

• Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
  The Hacker News • 2026-07-17 03:53 • thehackernews.com
  Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov.

  His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Yerevan’s Zvartnots airport, held up a phone with a photo of him off his VKontakte page, and walked him into a side
  https://thehackernews.com/2026/07/armenia-detains-russian-tourist-on-us.html

• Windows Server 2022 reach end of mainstream support in 90 days
  BleepingComputer • 2026-07-17 02:10 • www.bleepingcomputer.com
  Microsoft announced that Windows Server 2022 will reach the mainstream end date in October 2026, but will switch to extended support and continue receiving security updates for five more years. […]
  https://www.bleepingcomputer.com/news/microsoft/windows-server-2022-reach-end-of-mainstream-support-in-90-days/

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.