This Week’s Top Five Stories in Cyber

An employee opens an email that looks like any other, clicks a link, and gives up a password without noticing. A stolen login opens a door deeper in the network. Files stop opening a few days later. That chain now sits at the front of most ransomware cases. Malicious email and phishing together account for…

The Trump administration unveiled its new federal clearinghouse for sharing AI cyber threat information between the government and private sector, and said the project is already receiving threat intelligence on cybersecurity vulnerabilities and prioritizing patching. Created last month through a White House executive order, “Gold Eagle” will be managed by the Department of the Treasury,…

Executive Summary A critical supply chain attack has compromised the integrity of several Laravel Lang PHP localization packages, resulting in the widespread deployment of advanced credential-stealing malware. The threat actors exploited the GitHub version tagging mechanism to inject malicious code into every version tag across multiple repositories, thereby impacting a vast number of developers and organizations…

Ford Motor Company issued a clarification on July 17, 2026, stating that its recent patent filings do not indicate plans for production or consumer use, as privacy concerns have mounted over several technology applications described in the company’s intellectual property portfolio. “No matter what a patent application outlines, we will always put the customer first…

Incode has launched On-Device Age Estimation, an age verification capability that performs age estimation and liveness detection directly on the user’s device, without transmitting facial data off the device. The company’s age estimation models are now available to run entirely on-device. The solution combines on-device age estimation with deepfake and spoofing detection. More than 30…

An unpatched vulnerability in Cursor on Windows can be triggered for code execution when a developer opens a repository in the application, Mindgard reports. Cursor is one of the most popular AI-assisted development environments, with more than 7 million active users. The security defect, Mindgard says, is straightforward: when opening a repository, Cursor would automatically…