TL;DR
Russian state-sponsored group Laundry Bear actively exploits a Zimbra webmail zero-day to steal emails, directory listings, and two-factor authentication codes. CISA added five new CVEs to its Known Exploited Vulnerabilities catalog today, including critical RCEs in Langflow and chained WordPress SQL injection flaws requiring immediate patching.
Executive Summary
- Kremlin-backed group Laundry Bear (also tracked as Void Blizzard) exploits a patched Zimbra Collaboration vulnerability using zero-click phishing that steals the last 90 days of emails, entire email directories, saved browser passwords, and 2FA codes from Western organizations.
- CISA added five high-severity CVEs to its Known Exploited Vulnerabilities catalog, including Langflow remote code execution (CVE-2026-0770), Microsoft SharePoint ⚠ deserialization RCE (CVE-2026-50522), and chained WordPress SQL injection flaws (CVE-2026-60137 + CVE-2026-63030) with federal remediation deadlines between July 24–August 4.
- New AI-powered threats include Claude Cowork sandbox escape allowing VM breakout to access macOS files, and OpenAI ChatGPT Agent flaw (AgentForger) enabling attackers to create invisible autonomous agents inside victim organizations.
- Chaos ransomware group deploys msaRAT, a Rust-based implant that routes command-and-control traffic through victims' Chrome and Edge browsers, evading traditional network monitoring.
- FBI seized NetNut residential proxy platform operated by Alarum Technologies; LG Electronics bans proxy-capable apps from smart TV store following discovery that 42% of TV games and apps were turning devices into always-on proxy nodes.
Top Threats Today
1. Zimbra Zero-Day Exploitation by Laundry Bear
Severity: CRITICAL Affected: Government Technology
Russian state-sponsored espionage group Laundry Bear (also known as Void Blizzard) has spent months exploiting a now-patched Zimbra Collaboration webmail vulnerability to conduct targeted surveillance against Western organizations [1][2]. The attack uses zero-click phishing emails requiring victims only to open or preview the message [3][4]. Once the flaw is triggered, the payload exfiltrates the last 90 days of all email messages, the organization's complete email directory, passwords saved in the browser, and two-factor authentication codes [1]. CISA and international partners including the U.S. State Department have issued warnings about the campaign targeting both U.S. and Ukrainian entities [2][4].
Sources:[1] The Hacker News[2] BleepingComputer[3] Dark Reading[4] The Record
Recommended Action
- Immediately verify Zimbra Collaboration deployment versions and apply vendor patches if not already deployed
- Review email logs for the past 90 days for indicators of compromise; cross-reference mailboxes accessed from unusual locations or IP ranges
- Reset all saved browser passwords on systems running Zimbra clients and reset or rotate 2FA codes and backup authentication methods
- Enable phishing-resistant MFA (hardware keys) where possible; implement email preview restrictions if supported by your client
- Engage incident response if any suspect activity is detected; coordinate with CISA if breach is confirmed
2. Langflow Remote Code Execution & Critical WordPress Chain Added to CISA KEV
Severity: HIGH Affected: Technology
CISA added CVE-2026-0770 (Langflow) to its Known Exploited Vulnerabilities catalog, a critical remote code execution vulnerability allowing unauthenticated remote attackers to execute arbitrary code on affected Langflow installations, with a federal remediation deadline of July 24, 2026 [3]. In parallel, WordPress users face an urgent chaining vulnerability: CVE-2026-60137 (SQL injection) and CVE-2026-63030 (interpretation conflict) can be combined by unauthenticated attackers to achieve remote code execution on default WordPress installations [1][2]. CVE-2026-63030 carries a federal remediation deadline of July 24, 2026; CVE-2026-60137 is due August 4, 2026 ⚠[1][2].
Sources:[1] CISA KEV[2] CISA KEV[3] CISA KEV
Recommended Action
- URGENT: Patch Langflow to the latest version immediately; verify no internet-facing instances of Langflow remain unpatched
- Update WordPress Core to the latest patch version blocking CVE-2026-60137 and CVE-2026-63030; do not delay
- Audit WordPress plugin/theme code for untrusted input passed directly to database queries that could chain with these vulnerabilities
- Monitor WordPress activity logs for SQL injection payloads in URL parameters and POST data
- If breach is suspected, engage incident response and preserve logs for forensic analysis
3. Microsoft SharePoint & Check Point SmartConsole RCE in KEV
Severity: HIGH Affected: Government Technology
CISA added CVE-2026-50522 to its Known Exploited Vulnerabilities catalog: a deserialization-of-untrusted-data vulnerability in Microsoft SharePoint that allows unauthorized attackers to execute code over a network, with federal remediation due July 25, 2026 [2]. Check Point SmartConsole (CVE-2026-16232), an improper authentication flaw allowing unauthenticated remote attackers to obtain an application login token and authenticate with full administrative privileges, was also added to KEV with a July 25 remediation deadline [1].
Sources:[1] CISA KEV[2] CISA KEV
Recommended Action
- Patch Microsoft SharePoint to the latest security update; verify no unpatched instances are internet-accessible
- Update Check Point SmartConsole immediately; restrict network access to SmartConsole interfaces to authorized subnets only
- Review SharePoint and SmartConsole access logs for anomalous authentication events or object creation from unexpected accounts
- Implement network segmentation to limit lateral movement if breach is suspected
4. Chaos Ransomware Uses Browser-Based C2 via msaRAT
Severity: HIGH Affected: Technology
Cisco Talos disclosed msaRAT, a Rust-based implant deployed by Chaos ransomware group that routes command-and-control traffic through the victim's own Chrome and Edge browsers, never opening an outbound connection of its own [1]. This technique evades traditional network-based detection and firewalling by masquerading as legitimate browser traffic. The implant is discovered on compromised Windows machines prior to ransomware execution [1].
Sources:[1] The Hacker News
Recommended Action
- Hunt for msaRAT indicators of compromise in endpoint telemetry; Cisco Talos threat intelligence should provide specific IOCs
- Monitor for unexpected browser child processes or browser process network activity to non-standard ports
- Implement application-layer inspection on web proxies to detect anomalous browser-based C2 patterns
- Isolate any detected infected systems and preserve forensic evidence before remediation
5. AI Agent Sandbox Escapes & ForgedAgent Flaws
Severity: HIGH Affected: Technology
Cybersecurity researchers uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that allows an AI agent to break out of its Linux virtual machine and read or write files anywhere on the macOS host system [1]. In a separate disclosure, OpenAI fixed AgentForcer, a ChatGPT Agent flaw that allows an attacker to create, insert, and remotely control an invisible autonomous AI agent inside a victim organization ⚠ [2]. Both flaws represent emerging threats as AI agents gain autonomy and system access.
Sources:[1] The Hacker News[2] SecurityWeek
Recommended Action
- If using Claude Cowork, update to the patched version immediately and restrict agent execution to isolated sandboxes
- Review OpenAI ChatGPT Agent configuration; restrict agent creation permissions to authenticated, trusted users only
- Monitor for unexpected agent creation or execution events in AI platform audit logs
- Implement strict API token management and consider IP whitelisting for agent endpoints
Today’s Action Checklist
- ☐ URGENT (due today): Verify Zimbra Collaboration is patched; review email logs and reset 2FA codes in affected organizations
- ☐ URGENT (due today): Patch Langflow (CVE-2026-0770) on all internet-facing instances
- ☐ URGENT (due Jul 24): Patch WordPress to block CVE-2026-63030 SQL injection; audit plugin input validation
- ☐ URGENT (due Jul 25): Patch Microsoft SharePoint (CVE-2026-50522) and Check Point SmartConsole (CVE-2026-16232)
- ☐ HIGH: Hunt for msaRAT indicators in endpoint telemetry; monitor for unusual browser-based C2 traffic
- ☐ MEDIUM: Review Claude Cowork and ChatGPT Agent configurations; restrict agent creation and execution permissions
- ☐ MEDIUM: Audit internet-facing Langflow, SharePoint, and WordPress deployments; implement WAF rules to detect exploitation attempts