Cybersecurity News | Daily Recap [09 Jul 2026]

Daily Recap, Data breaches impacted AssuranceAmerica (6.9 million drivers), KDDI (12 million users), Mount Royal University, and Accenture after claims of stolen source code. AI security updates covered HalluSquatting, and new exploit and patch activity included Google’s GhostLock payout, Microsoft Defender fixes for RoguePlanet, plus Chrome 150, Ubiquiti UniFi, and Roundcube-targeted spying.
#AssuranceAmerica #KDDI #MountRoyalUniversity #Accenture #HalluSquatting #GhostLock #RoguePlanet #UniFi #UniFi #Roundcube #Intellexa #Predator #Leash #Entra #Microsoft365 #NPM #PyPI #Paysafe #Skrill

AssuranceAmerica exposed records of 6.9 million drivers in a data breach. – Driver Breach
KDDI said a breach impacted 12 million users as the Japanese telecom continues investigation. – KDDI Breach
Mount Royal University confirmed a breach after hackers claimed responsibility for the attack. – University Breach
Accenture confirmed a data breach after claims of stolen source code surfaced online. – Accenture Breach

AI coding tools were tricked using a decades-old technique to hack a developer machine. – AI Coding Attack
AI coding agents are triggering endpoint security rules, showing how legitimate automation can resemble attacker behavior. – AI Agent Rules
New HalluSquatting attacks could trick AI coding assistants into installing botnet malware. – HalluSquatting
A French nonprofit launched a global intelligence hub to research AI cyber threats. – AI Threat Hub

Google paid researchers $92k for a 15-year-old Linux vulnerability dubbed GhostLock. – GhostLock
Microsoft patched the Defender vulnerability RoguePlanet. – RoguePlanet
Chrome 150 fixed 27 vulnerabilities in the latest browser update. – Chrome Update
Ubiquiti patched critical UniFi flaws across Connect, Talk, Access, Protect, and OS. – UniFi Flaws

Greek victims filed a lawsuit against Intellexa over the Predator spyware. – Predator Suit
Taiwan charged two businessmen over alleged involvement in a Chinese espionage campaign. – Taiwan Espionage
A China-linked APT expanded its arsenal with new Leash backdoors. – Leash Backdoors
Hackers exploited a Roundcube flaw to spy on academic researchers. – Roundcube Spyware

Fake Paysafe and Skrill SDKs on NPM and PyPI were used to steal credentials. – Fake SDKs
Entra passkey enrollment vishing is targeting Microsoft 365 users. – Passkey Vishing
8Layers raised $2.9 million for its identity security platform. – 8Layers Funding

Cash App owner agreed to pay $45 million to settle allegations of lax security. – Cash App Settlement
A webinar highlighted why email security continues to fail despite ongoing defenses. – Email Security

SHARE THIS STORY