https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.security.com%2Fthreat-intelligence%2Fdaxin-returns-stupig&data=05%7C02%7Ckimberly.kaleta%40sra.io%7Ca9663d4066ae43fe37d708dee2a5abfa%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639197398369323948%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=wJfpIAmqBkr1AnU9s%2BIFMsX9JD9nKUK3gOwv76IXAiI%3D&reserved=0#new_tab 2026-07-15T20:11:19Z Security Risk Advisors en 🚩 Symantec finds resurfaced Daxin rootkit and new Stupig backdoor on Taiwan manufacturing network 2026-07-15T20:11:19Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.infostealers.com%2Farticle%2Fhow-an-infostealer-infection-led-to-a-sophisticated-clickfix-campaign-at-artlist%2F&data=05%7C02%7Ckimberly.kaleta%40sra.io%7C3dd85a60d0064fcd930608dee2a5aced%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639197398359362922%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=wy1Q7tDTfNb0azBYWTpV56eM7QAtMbBh%2FvMAGMI20%2Fw%3D&reserved=0#new_tab 2026-07-15T20:09:44Z Security Risk Advisors en 🚩 ClickFix campaign compromises Artlist subdomain after years-old infostealer infection exposes privileged WordPress credentials. 2026-07-15T20:09:44Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisa.gov%2Fnews-events%2Falerts%2F2026%2F07%2F14%2Fcisa-urges-sharepoint-hardening-after-new-exploitations&data=05%7C02%7Ckimberly.kaleta%40sra.io%7C0fa8618311b9450427af08dee2a5acaa%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639197398359401099%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=UPTz29gIU0vXFxtho4uNCcbvO%2B32Ho9oJ4YetOa1b90%3D&reserved=0#new_tab 2026-07-15T20:08:36Z Security Risk Advisors en CISA Warns of Active Exploitation of Multiple SharePoint Server Vulnerabilities Enabling Remote Code Execution and Persistence Across On-Premises Instances. 2026-07-15T20:08:36Z Blog https://sra.io/wp-content/uploads/2026/07/TB20260714-July-2026-Microsoft-Patch-Tuesday.pdf#new_tab 2026-07-14T20:34:59Z Security Risk Advisors en TB20260714 - Microsoft Patch Tuesday 2026-07-14T20:34:39Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisa.gov%2Fnews-events%2Fcybersecurity-advisories%2Faa26-194a&data=05%7C02%7Ckimberly.kaleta%40sra.io%7Ce21b34aef979405a2f9208dee1db4234%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639196528991130637%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Ah0IYUY3pxTKfekX8rqSLv%2BFX0juld2kqdRTgeDzFjk%3D&reserved=0#new_tab 2026-07-14T20:24:15Z Security Risk Advisors en CISA warns Russian FSB hackers continue exploiting poorly secured routers to compromise global critical infrastructure. 2026-07-14T20:24:15Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.wiz.io%2Fblog%2Fm-red-team-asyncapi-supply-chain-compromise-via-github-actions%23what-happened-3&data=05%7C02%7Ckimberly.kaleta%40sra.io%7C79baec255c6e44ab281c08dee1db40bc%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639196528976665508%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=xbtGdErQxTBo09k3GpljtevqSVp14b6uxgwk9V8nndk%3D&reserved=0#new_tab 2026-07-14T20:23:29Z Security Risk Advisors en 🚩 AsyncAPI GitHub Actions compromise publishes malicious npm packages that deploy multi-stage malware targeting developer credentials. 2026-07-14T20:23:29Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fany.run%2Fcybersecurity-blog%2Fkratos-phaas-account-takeover%2F&data=05%7C02%7Ckimberly.kaleta%40sra.io%7Cc8006a0c998449a1494c08dee1db4173%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639196528976439774%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=qe7mr7bL9luwZJQdqZITksL0W%2B%2BEkMN%2B9XK57tS%2F8BI%3D&reserved=0#new_tab 2026-07-14T20:22:38Z Security Risk Advisors en 🚩 Kratos phishing-as-a-service targets Microsoft 365 users across the United States and Europe to steal credentials and enable account takeover. 2026-07-14T20:22:38Z Blog